Admin-approved catalog
Enable managed connectors or a public HTTPS MCP server, then snapshot every security-relevant detail.
One governed endpoint
The connective tissue for agent access.
User-selected identity
Choose one owned or assigned identity per connector, narrow tools, and reuse the choice as a profile.
Policy in the path
Default deny, deny precedence, immediate tightening, step-up approval, and no silent grant expansion.