-rw-r--r-- 11m Agent runtime A tool name is a label: MCP authorization binds to identity
The trust list has an entry that says delete_user is allowed. What the agent calls is delete_user. Same string, two different things.
mcp
root@amaltsev >:~/blog$ grep -l "mcp" -r ~/blog
1 post on mcp.
root@amaltsev >:~/blog$ grep -l "mcp" -r ~/blog
mode date min topic name
~/blog: 1 match
root@amaltsev >:~/blog$ cd ~/blog && ls -la
The whole directory is one click away. Every post, filed by subject.