Unfortunately not. It just is a primitive intermediate layer of checks for each tool access. Which should be default for each such api call anyway. It's by far

Unfortunately not. It just is a primitive intermediate layer of checks for each tool access. Which should be default for each such api call anyway. It's by far not a proper capability based design as advertised.