Sent Messaging Operate direct message workflows with , , and . Establish connection and scope 1. Let the MCP client perform OAuth 2.1/PKCE authorization. Never request, accept, print, or store tokens, API keys, authorization headers, client IDs, or secrets. 2. Surface the organization and Sender Profile selected by the active connection before a mutation. If the client context does not expose both, use to inspect the authorized scope before continuing. 3. Use an explicit, validated acting profile when an organization grant supports it. 4. Minimize sensitive output. Mask phone numbers where pr…