With MCP we let you allow or deny individual tools, so separate draft/send tools work for this. But if it’s one tool with an action argument, we can’t distinguish them today.
Do you think it would make sense to add something like rules for JSON content for plain HTTP requests and argument rules for MCP tool calls?
Do you think it would make sense to add something like rules for JSON content for plain HTTP requests and argument rules for MCP tool calls?