Part of the hosted on-behalf-of MCP server proposal (#297).
Scope
Add audit logging and quota accounting keyed to the authenticated subject rather than to the process.
Acceptance criteria
Each tool call is attributable to a user identity in logs; per-user quota counters exist.
Dependencies
Builds on request-scoped identity (#302).
Part of the hosted on-behalf-of MCP server proposal (#297).
Scope
Add audit logging and quota accounting keyed to the authenticated subject rather than to the process.
Acceptance criteria
Each tool call is attributable to a user identity in logs; per-user quota counters exist.
Dependencies
Builds on request-scoped identity (#302).