Govern MCP tool calls by blocking dangerous and destructive actions before execution.
Protect local MCP calls by blocking destructive actions and tool poisoning.