Use the harden command to tighten an existing development profile before exporting it for production.

Syntax

./mcpgen harden [options]

Flags for the harden Command

The following table lists the available flags for the harden command, describing their effect:
Flag Effect
--remove-client Deletes generated client convenience assets.
--drop-private Removes private key material and retains public parts.
--drop-token Removes stored service account token.

Recommended sequence

To ensure a secure and compliant production deployment, always harden the development profile first and then export the sanitized bundle for production release:
./mcpgen harden --drop-private --drop-token
./mcpgen export --bundle prod