Authorizes MCP tool calls against a session policy, not one call at a time.
Free
Scanned where there is a package or repository to read, and every release diffed against the tool surface we already hold.
Authorizes MCP tool calls against a session policy, not one call at a time.