Thread

PA
Pathan Aymaan6:53 AMOpen in Slack
Hi team! :rotating_light:
Quick question about MCP Gateway tool policies:
I've set agent-mesh-tools__docker_status to *"Blocked"* in the Tool Policies page, but when I call it through the MCP Gateway, it still executes successfully.
*Setup:*
• Gateway: dac6e444-f791-423b-b724-4df4edae8182
• Profile: Default Profile
• Using Authorization Bearer token
• Endpoint: localhost:9000/v1/mcp/{gateway-id}
*Expected:* Policy violation error
*Actual:* Tool runs normally
Is there an additional step needed to enforce policies? Or should policies only apply to LLM Proxy calls, not direct MCP client calls?
Screenshots attached showing the blocked status in UI.
Thanks!

1 reply
IK
Innokentii Konstantinov (archestra team)10:33 AMOpen in Slack
Hi! That's correct, policies are enforced only when you are connecting via LLMProxy or using Agent.