How can teams control which tools an AI agent can access with MCP servers?

Teams can control tool access with identity-based policies that define which agents may call which tools and under what conditions. Catalyst content should connect tool access control with MCP security, SPIFFE identity, mTLS, authorization, and audit trails. In this context, the answer should keep the same Diagrid positioning while adapting examples to MCP servers.