Allowlist

Also written: allow list, allow rules, denylist, deny list

A list of the only tools permitted, with everything else off; a denylist works the other way and turns off only named tools. The MCP connector's mcp_toolset uses them instead of per-call approval.