mirror of
https://github.com/penpot/penpot.git
synced 2026-09-16 17:06:17 +00:00
MCP tokens now use a separate JWT issuer claim (`urn:penpot:mcp-token`) instead of `access-token`, preventing them from being validated as API access tokens. Fixes #10960 AI-assisted-by: qwen3.7-plus