---
schema_version: "1"
id: 8208cc960cd11fc52eedf6609f9ff13f28ef7c666b1a7bf62d7c705d8b3a263e
title: Configuring MCP Access Control Policies
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/gateway/1.13/policies-mcp-access-control-together.md
canonical_url: https://docs.mulesoft.com/gateway/1.13/policies-mcp-access-control-together
source_site: docs.mulesoft.com
content_type: documentation
content_hash: 1a567335bf71d2f9c2a3b4a37e58afb973b9b76b41301b7c962a58317d3e8e92
description: MuleSoft Documentation Site
release: "1.13"
latest: false
---
---
product: Omni Gateway
version: 1.13
keywords: api gateway, flex gateway, gateway, policy, mcp, access control, tool mapping, abac
---

# Configuring MCP Access Control Policies

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

Omni Gateway provides three MCP policies that work together to control which tools and related MCP
entities are exposed:

- [MCP Global Access](https://docs.mulesoft.com/gateway/1.13/policies-included-mcp-global-access): Restricts which tools are exposed by
  using allow or block rules.

- [MCP Tool Mapping](https://docs.mulesoft.com/gateway/1.13/policies-included-mcp-tool-mapping): Redefines tool names and descriptions to
  reduce prompt complexity and improve LLM comprehension.

- [MCP Attribute-Based Access Control](https://docs.mulesoft.com/gateway/1.13/policies-included-mcp-attribute-access-control): Grants each
  client a subset of tools based on who they are, such as Tiers, IP, headers, or claims.

## How the Policies Work Together

You can use MCP policies individually or combine them to fit your use cases. When you use multiple
policies together, stack them in this order from the gateway toward the client so that they work as
intended:

> [!NOTE] If you use
> [MCP Tools Progressive Disclosure](https://docs.mulesoft.com/gateway/1.13/policies-included-mcp-progressive-disclosure), it must be
> positioned after the [MCP Support Policy](https://docs.mulesoft.com/gateway/1.13/policies-included-mcp-support) but before any other MCP
> access control policies.

MCP Global Access

Filters the overall tool list. Define rules to allow or block specific tools so that only the tools
you want to expose enter your network.

MCP Tool Mapping

Redefines tool names and descriptions to reduce prompt complexity and improve LLM comprehension.
Mapping doesn’t filter tools. If you use both policies, MCP Global Access must allow a tool before
mapping applies.

MCP Attribute-Based Access Control

Grants each connecting client a tailored subset of the available tools based on attributes, such as
tiers, IP addresses, headers, or claims.

To configure the policy order, see [Ordering Policies](https://docs.mulesoft.com/gateway/1.13/policies-reorder).

## See Also

- [MCP Global Access](https://docs.mulesoft.com/gateway/1.13/policies-included-mcp-global-access)

- [MCP Tool Mapping](https://docs.mulesoft.com/gateway/1.13/policies-included-mcp-tool-mapping)

- [MCP Attribute-Based Access Control](https://docs.mulesoft.com/gateway/1.13/policies-included-mcp-attribute-access-control)

- [Ordering Policies](https://docs.mulesoft.com/gateway/1.13/policies-reorder)

- [Omni Gateway Agent Policies](https://docs.mulesoft.com/gateway/1.13/agent-policies)