News
Badal Bhushan proposes a two-gate authorization model for MCP tools exposed to agents.
The first gate decides whether a capability should be available to a given agent.
The second gate authorizes or not a specific use of the tool against a specific resource, based on identity and context.
Filtering tools/list reduces risk but is not an authorization, according to the author.
A system prompt is not an access control mechanism: a deterministic control outside the model must decide.