MCP and Tool Governance

tools/list

tools/list is the MCP protocol method that an agent client sends to an MCP server to retrieve the list of available tools, their input schemas, and descriptions.

Why this matters for AI agents

The tools/list response shapes the agent's understanding of what is possible. An unrestricted tool list is an unrestricted action surface.

How AgntID relates

AgntID intercepts tools/list responses to apply catalog filtering—removing tools the agent is not authorized to invoke before the response reaches the agent.

The static IAM gap

The MCP protocol sends the full tool list to any authenticated client. There is no native mechanism for per-agent or per-task tool filtering.

Related phrases

tools listtool discovery requestMCP tools/listtool enumeration

Related terms

Frequently asked questions

What is tools/list in MCP?

tools/list is the MCP protocol method that an agent client sends to an MCP server to retrieve the list of available tools, their input schemas, and descriptions.

Why does an unrestricted tools/list response create risk?

The tools/list response shapes the agent's understanding of what is possible. An unrestricted tool list is an unrestricted action surface.

How does AgntID modify the tools/list response?

AgntID intercepts tools/list responses to apply catalog filtering—removing tools the agent is not authorized to invoke for the current task before the response reaches the agent.

Runtime Enforcement

Secure every agent tool call at execution time.

AgntID gives infrastructure teams scoped, ephemeral access control for AI agents without replacing IAM, MCP servers, tools, or agent frameworks.