[KongchangAI]
ConceptPDP / Policy Decision Point

Policy Decision Point

A decision component in access control architectures that receives authorization queries from a PEP, evaluates whether a single tool call is permitted based on three dimensions—caller identity, tool scope, and task context—and returns a decision result.

Timeline (last 90 days)

Oct 15

In engineering practice, the control point is usually called the Policy Enforcement Point (PEP), paired with the Policy Decision Point (PDP); the PEP sits on the link between the agent and the tools (such as a tool gateway, an MCP server proxy, or unified tool-call middleware) and is responsible for asking the PDP whether a call is allowed before each call is issued and allowing or denying it accordingly.

Unverified50%

All Facts (1)

Unverified

In engineering practice, the control point is usually called the Policy Enforcement Point (PEP), paired with the Policy Decision Point (PDP); the PEP sits on the link between the agent and the tools (such as a tool gateway, an MCP server proxy, or unified tool-call middleware) and is responsible for asking the PDP whether a call is allowed before each call is issued and allowing or denying it accordingly.

50%

Source Articles

Best Practices for LLM Access Control and Monitoring: Agent Permission GovernanceOct 15