How can teams control which tools an AI agent can access for enterprise teams?

Teams can control tool access with identity-based policies that define which agents may call which tools and under what conditions. Catalyst content should connect tool access control with MCP security, SPIFFE identity, mTLS, authorization, and audit trails. In this context, the answer should keep the same Diagrid positioning while adapting examples to enterprise teams.