MCP server tool permissions now support a permission_policy field carried on mcp_set_servers for remote servers, allowing administrators to pre-configure allowed/denied tool lists for MCP tools.
Evidence
Permission policies (search for "permission_policy") — 2 occurrences in v2.1.110, 5 in v2.1.111
Strings lifted out of the shipped bundle, so the claim above can be checked against them.