MCP approvals and audit
Control side effects from MCP clients and review what automation executed.
Read and write are different
Read operations can provide context to a connected client. Mutating operations may require an explicit approval depending on your MCP settings and the tool contract.
Approval prompts
Review the exact action and target before approving. A familiar client name is not enough when the operation can change a task, request, secret or shared resource.
Audit
Use MCP logs and audit information to identify the client, tool, time and result of an operation. Disconnect clients you no longer use and rotate exposed connection material.