tools

An MCP server is an API that a model drives. The scored answer treats it as an OAuth resource server, authorises every tool call against the user, and keeps upstream credentials out of the client's hands.

Follow individual fields from their authors through tools, summaries and actual model exposure. Separate service-authoritative identifiers from quoted prose, then check each output and operation.

Build a permission worksheet for each tool: acting principal, task grant, objects, recipients, bounds and enforcement. Treat reads and reversible writes as potentially consequential.