Review steps
- Submit the server intake with the tool list and source notes.
- Send high-risk findings to the right reviewer.
- Record approve, approve with conditions, or hold decisions.
- Export the approval timeline with the risk packet.
MCP approval workflow
Approval should not live in a chat thread. MCP server decisions need ownership, timestamps, conditions, and a record of which tools were allowed.
Open scanner preview