MCP authorization

Control access to MCP tools and resources with CEL-based authorization rules

MCP authorization controls which tools, prompts, and resources a client can reach, by using CEL expressions that evaluate against MCP method invocations rather than against an HTTP request.

For the policy reference, including rule syntax, the CEL variables available at request time and in access logs, role-based access with JWT claims, and per-target rules, see MCP authorization.

Related