What the agent reads is checked too
Tools from servers your org hasn’t approved are blocked, and text that tries to instruct the agent is flagged.
An unapproved server, stopped
- Approve a server once
- Add a server to the rule’s exceptions and its tools work for every agent in the org.
- Allowed once, on purpose
- The agent or person asks from the record. An admin allows it once or for a while, and the retry passes.
- Instructions in what it reads
- Files, web pages and tool results are scanned, and text that reads like instructions to the agent is flagged.
The MCP servers off the org list policy
Tools from servers the org has not approved, and tool text that tries to instruct the agent.
- It installs as Observe, so you see your own traffic first. Turn it to Block when you are ready.
- Approve a server by adding it to the rule's exceptions; until then every MCP tool call is watched.
- Tool text that tries to instruct the agent is found by the content scan, not by this rule.
Related use cases and clients
- Network off the allowlistA web fetch to a host your org hasn’t named is blocked until someone reviews it.
- Device reports and bypassA session in bypass mode is reported from the Mac it ran on, and an agent starting another agent with it is blocked.
- Set up the MCP proxyThe adapter’s proxy wraps each MCP server a client uses, so every tool call passes the same policy.