Sign in with a service token. It is checked against the API before anything is stored.
The token is kept in this browser only and grants exactly what MCC has: no more, no less.