Skip to content

[FEATURE]: Option to deny MCP tools by default #3612

@sroidl-airup

Description

@sroidl-airup

Feature hasn't been suggested before.

  • I have verified this feature I'm about to request hasn't been suggested before.

Describe the enhancement you want to request

(hope this wasnt suggested before, but did not find anything)

Context: I'd like to use certain MCP servers only with specific agents. E.g. I'm using the jetbrains mcp, but I don't want all agents to use it's file editing capabilities, since it does not work well with the undo feature.

However, I have created a Jetbrains agent for the purpose of collaborating closely on what I do in my current jetbrains IDE (think implement the open TODO() in my current editor).

Problem:
There seems to be no easy way to deny access to all MCP tools of a defined server globally and override this in only one agent.

I've tried setting "permissions" : { "jetbrains_*" : "deny"} in my global openapi.json to no success.
Also the "tools": { "jetbrains_*": false} was not supported globally.

So currently I'm stuck with disallowing the tools for each agent. This is cumbersome and errorprone, since we don't know which agents are going to be active depending on the project I'm working on.

Request:
Make either "tools" a global configuration, so I can disallow tool usage across all agents (with the expectation, that agent specific entries override this global config), or allow MCP tools to be referenced in the "permissions" (global) config.

Metadata

Metadata

Assignees

Labels

discussionUsed for feature requests, proposals, ideas, etc. Open discussion

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions