MCP tool security
Parts, in publishing order
- Tool-level security for remote MCP servers, part 1: designing role-based access control
Why remote MCP servers need tool-level access control, the security architecture, and the data model and tool registry behind role-based access.
- Tool-level security for remote MCP servers, part 2: enforcement, identity and practice
How an MCP server enforces permissions and filters data, connects to existing identity systems, and rolls out access control in practice.