See which MCP tools a workspace was granted and which it uses
DVARA, the AI governance platform, decides every MCP tool call against the workspace's servers, tools and policies. That stops a call that is not allowed. It does not stop scope creep: a workspace is given twelve tools for one job, and months later it calls four of them for something nobody reviewed. Every one of those calls is allowed, so no check on a single call can see it. OWASP lists it as MCP02, Privilege Escalation via Scope Creep.
The MCP Tool Scope page in DVARA Flightdeck puts the two side by side: every tool a workspace was granted, and how it has used each one.
Not included in DVARA Open Source.
What the page shows
One row for each tool in the catalogs of the workspace's MCP servers, with:
- the server, and when it was registered (the tool counts as granted from then);
- how many calls reached the server, and the first and last of them.
Calls that a policy denied are not counted: they never reached the tool.
Some rows are marked:
| Mark | Meaning | What to do |
|---|---|---|
| Not used | Granted at least 90 days ago and not called in the last 90 days | A permission you can probably remove |
| New use | First called in the last 30 days, at least 30 days after it was granted | Not a violation. A change of behaviour worth a look |
| Not in a catalog | Called, but no registered server lists this tool any more | The tool or its server was removed, or the call went through a virtual server. A call to a tool that is not in the catalog is refused, so these are calls made before the tool left it |
The page changes nothing. It does not remove, block or hold any tool. To remove a tool, edit its server or add a policy. Taking a permission away because a tool was quiet for a while would break a job that runs once a quarter, so that decision stays with a person.
Open it
- Platform roles: MCP → Tool Scope, then choose the workspace.
- Workspace roles (admin, developer and viewer): Agents → MCP Tool Scope. You see your own workspace only.
What it does not show
- Policies and virtual servers. "Granted" is every tool in the server's catalog. A policy or a virtual server's tool list can narrow what a caller may call; the page does not apply them.
- When a tool was added. A tool that a later sync added counts from the day its server was registered, so its first call can show as new use.
- Changes to a virtual server's members, or approvals per tool over time.
- Whether a new tool waits for review. By default a new tool on a server you already approved is usable after the next sync, and this page shows it once it is used. To review new tools before they can be used, turn on the hold for new tools: see A new tool can wait for approval.