Benefits with Ory + Model Context Protocol Fetch MCP Server
Use Cases
— 01 use caseAgent IAM
Research agents get Read to pull pages, agents holding secrets or customer data are set to Block, and Fetch has nothing behind Write or Admin.
Core Functionality
— 04 capabilitiesRead, write, admin, or no access
Ory Agent Security classifies every tool on the Fetch MCP reference server as read, write, or admin, and because the Fetch MCP reference server only retrieves web content, the choice for each user, team, or agent type comes down to read for research agents or no access for agents that hold credentials or customer data.
Enforced before execution
Ory Agent Security checks each tool call against the user, the agent acting for them, and any sub-agent inside the agent harness, so a denied page fetch stops before it reaches the open web, with nothing to roll back and no gateway to deploy.
Observe, then enforce
Observe mode shows which agents pull web content into their context and for whom without blocking anything, so you can apply Ory's pre-built policy for the Fetch MCP reference server and enforce it on your own schedule.
Complete audit trail
Every allow and deny decision on the Fetch MCP reference server streams to your SIEM through OpenTelemetry with the user, agent, and action attached, so you can show which agent fetched a page before taking an unexpected action.