Run an MCP preflight

Preflight applies one named policy to one exact MCP server and returns PASS, REVIEW, or BLOCK. It uses public evidence. It is not a security audit.

Select one exact row

Policy decision

Ordered reasons

Decision record

Limitations

Add the same gate

Real inputs, no copied secrets

REST

MCP tool call

Generic CI

PASS is a first gate. Review requested permissions, scopes, code, and runtime isolation before install.