Enterprise-MCP-Service-Bus/docs/adr/ADR-003-reauthorization-of-tools-call.en-us.md

ADR-003: Independent reauthorization on tools/call

Status: Accepted. Source: this ADR is the canonical record of this decision. For implementation and validation context, see RI/docs/AS-BUILT.md and, where applicable, the relevant contract in RI/docs/interfaces/.

Context

Is filtered tools/list sufficient?

Decision

No — tools/call must be reauthorized independently of discovery.

Alternatives Considered

Relying only on filtered discovery.

Consequences

EP-05 implements two enforcement points, not one.