Policy at resource/tool level

[sarathsp06]

Pre-submission Checklist

• I have verified this would not be more appropriate as a feature request in a specific repository
• I have searched existing discussions to avoid duplicates

Your Idea

I want to establish a mechanism that allows tools and resources to report policy violations. Additionally, tools should be able to specify the context they require from the LLM when needed.

When MCP exposes tools and resources, they may operate under different scopes. For instance, if a PostgreSQL database is connected and contains data for multiple users, it is crucial to ensure that any queries made by the LLM adhere to the defined policies set by MCP developers. For example, if user_id is a required policy parameter, all queries must be scoped to that user.

MCP developers should be able to use the protocol itself to communicate policy violations back to the LLM, ensuring that unauthorized or non-compliant queries are rejected based on the established policy constraints.

Scope

• Protocol Specification
• SDK Features
• Documentation
• Developer Experience
• Other