MCP servers give agents access to real systems. Kastra applies policy to every MCP tool call, blocking unauthorized use and logging every invocation.