Least privilege for agents is usually all-or-nothing. Front one upstream MCP server with two gateway routes, give each its own tool catalog, and gate them by the IdP group your team already belongs to.
Per-Role Tool Catalogs for Your MCP Server
calendar_today
July 16, 2026
domain
zuplo