subagentidentities

cloudflaregithubfilesystemchrome-devtoolsengineering-coworker

Each MCP server runs as a local npx/binary process under the Mac's own OS-level auth (SSH keys, cargo/wrangler sessions, Cloudflare API token) rather than a service account provisioned in a console — the personal-account/DM shape, not the channel/service-account shape

Whatever each of the 5 local MCP servers can reach on this one Mac — no centrally configured Domains allowlist, since these are local process spawns, not proxied network egress

engineering-coworker (the dedicated Rust MCP server for cargo/wrangler/git/D1) is itself the "plugin" here — a bundle of deterministic tools travelling with this scope, the same relationship add-connections.md describes between a Datadog credential and a Datadog plugin

profiles/claude_desktop_cowork.json; CLAUDE.md, "macOS Claude Desktop profiles"