easier to gate MCP tools? you can allow/deny tools very easily