Back to Policy Packs
MCP Tool Execution Policy
Pre-action governance for Model Context Protocol (MCP) tool execution. Enforces server allowlists, tool restrictions, parameter validation, and rate limits for secure MCP integration.
v1.0.0
Requirements
Required Capabilities
mcp.tool.execute
Minimum Assurance Level
L0
Required Limits
allowed_servers
max_calls_per_minute
Enforcement Rules
These rules are automatically enforced when using this policy pack
server_allowlist_enforced
tool_allowlist_enforced
rate_limits_enforced
parameter_validation_enforced
session_tracking_enforced
Best Practices
- Use server allowlists to prevent unauthorized MCP connections
- Restrict tools to minimum required for agent functionality
- Enforce rate limits to prevent MCP server abuse
- Validate tool parameters against expected schemas
- Log all MCP tool calls for Verifiable Attestation
- Use session tracking for cross-tool audit trails
- Subscribe to status webhooks for instant suspend
- Implement progressive limits for new MCP integrations
- Monitor MCP usage patterns for anomalies
- Consider tool-specific parameter restrictions