mirror of
https://github.com/mcloh/Enterprise-MCP-Service-Bus.git
synced 2026-11-06 06:24:12 +00:00
21 lines
545 B
Markdown
21 lines
545 B
Markdown
# ADR-003: Independent reauthorization on tools/call
|
|
|
|
**Status:** Accepted.
|
|
**Source:** this ADR is the canonical record of this decision. For implementation and validation context, see `RI/docs/AS-BUILT.md` and, where applicable, the relevant contract in `RI/docs/interfaces/`.
|
|
|
|
## Context
|
|
|
|
Is filtered `tools/list` sufficient?
|
|
|
|
## Decision
|
|
|
|
No — `tools/call` must be reauthorized independently of discovery.
|
|
|
|
## Alternatives Considered
|
|
|
|
Relying only on filtered discovery.
|
|
|
|
## Consequences
|
|
|
|
EP-05 implements two enforcement points, not one.
|