Blocking happens on the machine, so it works on any network.
Sanctioning a tool grants nothing on your MCP Connections. Which MCP tools a person may use is decided by MCP Policies.
Endpoint agent
AI Tools
Every AI tool found on your machines, with a sanction state per tool: Unsanctioned, Sanctioned or Blocked.
AI Tools lists every AI tool the agent has seen on your fleet: who uses it, on how many machines, when it was first and last seen, and the AI clients installed for it.
Each tool has one sanction state, and that state is the policy:
Last modified on November 9, 2026