Apply Policies for MCP Proxy

Once you create an MCP proxy, you can apply various policies through the Policies page.

The AI Workspace provides a set of built-in policies that let you govern how traffic flows through your MCP Proxies. These policies are applied at the policy level. However, you have the option to define rules per tools, prompts, etc. inside MCP specific policies if required. This will essentially apply the policies at each capability level.

Access Control Policies

There are several policies that enforce security for MCP Proxies.

Policy	Description
MCP Authentication	Apply authentication as defined in the MCP Specification.
MCP Authorization	Apply fine-grained authorization for MCP capabilities and JSON RPC methods.
MCP Access Control	Allow or deny access to MCP capabilities.

Other Policies

Policy	Description
MCP Rewrite	Rewrite MCP capabilities returned through the proxy. This will only return the modified ones if used.

You can apply other standard policies as well to MCP Proxies. Some policies might not be compatible with MCP. Hence the behavior will vary based on the policy.

Policy Hub

All policies in the AI Workspace are powered by the Policy Hub. The Policy Hub is a central registry of all available policies and their latest versions.

Visit the Policy Hub to explore all available guardrails, their documentation, and configuration schemas.