For the complete documentation index, see llms.txt. Markdown versions of all docs pages are available by appending .md to any docs URL.
MCP authorization
Verified Code examples on this page have been automatically tested and verified.Control access to MCP tools and resources with CEL-based authorization rules
MCP authorization controls which tools, prompts, and resources a client can reach, by using CEL expressions that evaluate against MCP method invocations rather than against an HTTP request.
For the policy reference, including rule syntax, the CEL variables available at request time and in access logs, role-based access with JWT claims, and per-target rules, see MCP authorization.
Related
MCP authenticationValidate tokens so that authorization rules can match on JWT claims.
MCP target policiesReview the other policies that you can scope to an individual target.
MCP observabilityLog tool calls and their arguments after a request completes.
CEL referenceLook up the full list of supported variables and functions.
7 practical MCP policiesCommunity blog post with worked authorization, authentication, and guardrail recipes.
Was this page helpful?
