1 files changed, 6 insertions, 4 deletions
diff --git a/.github/workflows/mcp.yml b/.github/workflows/mcp.yml
index b38cfa9a..afe3f357 100644
--- a/.github/workflows/mcp.yml
+++ b/.github/workflows/mcp.yml
@@ -3,7 +3,12 @@ on:
   push:
     tags:
       # This is a glob pattern not a regex
-      - 'mcp/v[0-9]+.[0-9]+.[0-9]+'
+      - "mcp/v[0-9]+.[0-9]+.[0-9]+"
+
+permissions:
+  id-token: write # Required for OIDC
+  contents: read
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -19,6 +24,3 @@ jobs:
 
       - run: pnpm publish --access public --no-git-checks
         working-directory: apps/mcp
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_ACCESS_TOKEN }}
-