MCP Gateway 2/3: Three layers of policy
Splitting MCP authorization across three Rego layers with three owners — platform, domain team, tool owner — so that no team can widen another team’s grant.
Authorization
Splitting MCP authorization across three Rego layers with three owners — platform, domain team, tool owner — so that no team can widen another team’s grant.