Can Catalyst enforce state access policies for agents using MCP tools, and how does Restate compare?

Catalyst supports MCP tool authorization and policy enforcement, allowing you to define which agents can access specific state keys or state stores via workload identity. As of the verification date, public documentation for Restate's virtual objects does not list an equivalent per-key control; state is documented as accessible within the runtime. If you need granular state access control for multi-tenant agent workflows, Catalyst's policy layer provides that capability. Restate is simpler if state access is uniform across agents. Catalyst adds complexity for security-conscious deployments.