From a spec to tools
Import the service's OpenAPI 3 spec. Its operations become typed MCP tools with validated arguments. Any agent that speaks MCP can call them with its own key.
Each agent gets its own slice
The policy names which operations each agent may call, with which argument values and how often. A support agent can see the lookup operations. A refund operation can be offered to one agent only, and held for approval.
Credentials stay off the agent
Upstream credentials are read from the connector's config, used per call and scrubbed from results. The agent never holds the service's key.
When the API changes
new_tools: deny keeps an operation the service adds from being listed or called until you review it and pin it. A server with no review setting gets a warning when you validate the policy.
Same record as everything else
Every call to an API tool goes into the same keyed, hash-chained audit log as your CLI and host actions: which agent, which operation, which arguments, what bastn decided.