How to Secure MCP Tool Calls
· 11 min read
An agent can keep sensitive data out of a model prompt and still leak it in the next tool call. MCP arguments and responses are separate data paths, so they need their own policy, PII handling, and audit controls.