# Which operations of openapi.yaml become MCP tools, and who may call each.
#
# This file is the allow-list as well as the ACL: an operation that is not
# named here does not become a tool. Kong's generator exposes every operation
# it finds and can express no authorization at all from a bearer-token spec —
# see k8s-platform/MCP-TOOL-GENERATION.md, limits 1 and 5.
#
# `allow` lists consumer groups, which come from realm_access.roles in the end
# user's own token. Kong applies them at tools/list, so a caller never sees a
# tool it may not call.

mcp_name: customers-mcp

tools:
  list-customers:
    allow: [admin, read_only, product_manager, customer, support]
  get-customer:
    allow: [admin, read_only, product_manager, customer, support]
  create-customer:
    allow: [admin]