"author:Geomanti" matching MCP servers:

Exposes a governed, credential-scoped tool surface over MCP, so each agent's tools/list returns only the tools its least-privilege credential permits and any withheld tool answers "Unknown tool:" with no reachable code path. Enforcement is stacked across construction-time scope rejection, registration-time filtering, and a call-site re-check.