How can a Hantera MCP tool run with limited authority?
An MCP ingress can run with its own ACL, the caller’s authority, or the intersection of both, allowing a tool to remain user-scoped while applying an additional permission ceiling.
restricted-caller is useful when a tool should honor the user’s authority while also staying inside a declared data-access ceiling. The appropriate authority mode depends on the capability being exposed.