Tool allow-list
In short: A tool allow-list is the approved set of tools an agent may call. Anything not on the list is blocked, and in stronger setups it is hidden so the agent never sees it. Allow-lists limit the damage a hijacked or confused agent can do with tools it should not use.
Which controls use this term?
- GOV-10Tool allow-listing and hiding. Allow each agent to use only the tools on its approved list, and hide every other tool from it entirely.
Which terms are related?
MCP.
Reviewed by The Register desk