policy

Overview ¶

Package main demonstrates using BeforeCallHook as a policy gate: any tool marked Destructive is blocked before the call reaches the upstream server. Prerequisites: replace the placeholder binary/URL with a real MCP server.