Returns authoritative MCP tool scoping config for server-side enforcement.
Called by the MCP server on session start to verify tool_profile, allowed_tools, and blocked_tools — preventing credential file tampering.
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Successful Response
Authoritative MCP tool scoping config for server-side enforcement.
Includes identity fields (tenant_id, service_id, kafka_username) so the MCP server can enrich audit logs with verified context without trusting the credential file.