DEV Community

Discussion on: How to Run MCP Servers in Production (Security, Scaling & Governance for AI Tooling)

Collapse
 
klement_gunndu profile image
klement Gunndu

The tool permission sprawl you describe is real — even tool-level access control isn't granular enough once agents start chaining multiple MCP calls in a single reasoning step. Have you seen teams implementing per-chain audit trails rather than per-tool?

Collapse
 
hadil profile image
Hadil Ben Abdallah

That’s a great point; tool-level control starts to fall short pretty quickly once chains get involved.

Yeah, I’ve seen some teams move toward per-chain tracing/auditing, especially to capture the full reasoning path instead of isolated calls. It makes debugging and accountability way clearer.

Feels like that’s where observability is heading next.