Claude is leaning into the idea of a local "session" being the host where everything connects.
I guess this makes sense for now. You can build integrations leveraging the user's personal access credentials. Later, once Claude takes over the world, they can move sessions to live in their own walled garden.
I'd like Claude on IOS to pull/commit from a private git repository for Markdown and ideally drawio diagram editing.
thats how Amazon worked its MCP setup - got everything onto oauth tokens, and then the harness knows how to to access the token to get permissions to whatever the user has.
the bad part is setting separate permissions for different user tokens
They certainly are. And this is likely to some degree a response to enterprise security desires. Enterprise endpoints are locked down already - no need for extra external API security if it’s just the user’s desktop communication as usual.