mcpAuthorization
An MCP authorization policy in agentgateway that uses CEL rules to evaluate tool names, tool targets, and JWT claims. Because it is evaluated before the request and mcp.tool.arguments is marked as post-request, path parameters cannot be obtained during the authorization phase.
Timeline (last 90 days)
agentgateway has a built-in MCP authorization policy mcpAuthorization, which evaluates mcp.tool.name, mcp.tool.target, and JWT claims using CEL rules.
In agentgateway, mcp.tool.arguments is marked as post-request and is only populated for access logs after the call has executed, whereas mcpAuthorization rules are evaluated before the call, when the arguments are not yet populated.
All Facts (2)
agentgateway has a built-in MCP authorization policy mcpAuthorization, which evaluates mcp.tool.name, mcp.tool.target, and JWT claims using CEL rules.
50%UnverifiedIn agentgateway, mcp.tool.arguments is marked as post-request and is only populated for access logs after the call has executed, whereas mcpAuthorization rules are evaluated before the call, when the arguments are not yet populated.
50%