How does a framework-agnostic runner handle tool authorization and security for MCP tools?

The runner enforces tool authorization policies per agent identity, controlling which MCP tools an agent may call. It integrates with workload identity to authenticate agents and applies policies before tool invocation. This prevents unauthorized tool access even if the agent framework itself lacks such controls, adding a security layer independent of your framework.