The server process should not carry broad backend authority simply because the tool exposes one narrow function.
MCP & TOOL ARCHITECTUREENTERPRISE AI ARCHITECTURE
Tool Permission Model
Tool permissions should match the minimum data and actions required for the advertised capability.
A lookup tool uses a read-only database role restricted to approved views.
Does backend privilege exceed the tool's stated function?
REMEMBERTool least privilege must exist below the model layer.
No uploads · No company data · No account required