tool_filtering
Which per-server tool filtering mechanisms the provider supports. Contents: {allowlist: bool, blocklist: bool, disable_flag: bool}. Controls which server tools are exposed to the agent. Boundary: tool_filtering governs tool visibility (what appears in the agent’s available tool set); see auto_approve for execution gating of visible tools.
Type: object Content type: mcp
Provider Support
Section titled “Provider Support”| Provider | Supported | Mechanism |
|---|---|---|
| amp | ✓ | per_tool_enable_disable: Amp supports per-tool enable/disable configuration to control which MCP tools are exposed to the agent |
| cline | ✓ | always_allow_tools (visibility scope): Cline's always_allow list controls which MCP tools are exposed in the agent's available tool set without per-invocation prompts |
| codex | ✓ | mcp_enabled_disabled_tools: Codex supports per-server tool enable/disable configuration controlling which tools are exposed to the agent |
| copilot-cli | ✓ | mcp_tool_allow_deny_flags: Copilot CLI supports per-tool allow and deny flags to control which MCP tools are exposed |
| gemini-cli | ✓ | tool_filtering: Gemini CLI supports per-server tool filtering to control which MCP tools are exposed to the agent |
| kiro | ✓ | kiro_mcp_disabled_tools: Kiro supports per-server tool disable configuration to control which MCP tools are available to the agent |
| roo-code | ✓ | per_server_tool_filtering: alwaysAllow and disabledTools arrays on each server entry filter which MCP tools are exposed and which bypass confirmation |
| claude-code | ✗ | Claude Code exposes all tools from connected MCP servers; no per-server tool allowlist or blocklist for individual tool visibility |
| crush | ✗ | Per-server tool allow/block list not documented in the Crush MCP schema |
| cursor | ✗ | Cursor does not document per-server tool allowlists or blocklists for MCP servers. |
| factory-droid | ✗ | Factory Droid does not document per-server MCP tool filtering |
| opencode | ✗ | No per-server tool allowlist/blocklist documented |
| windsurf | ✗ | Windsurf exposes all tools from connected MCP servers; no per-server tool allowlist or blocklist documented |
| zed | ✗ | no per-server include/exclude tool filter documented in Zed MCP configuration |