Connected assistants now keep their approved access

The real client keeps the real grant

ChatGPT and Claude connections now bind the verified token to the exact preconfigured WorkOS application that completed consent. If WorkOS leaves custom MCP scopes out of that token, miracle.fyi recovers only the grant registered for that exact public client.

Narrow by construction

• An explicit read-only token stays read-only.
• Unknown and lookalike client IDs receive no fallback access.
• Dynamic registration still accepts only the exact ChatGPT and Claude callback shapes and returns no client secret.