MCP Response Redaction Governance

This domain covers how sensitive-field disclosure (secrets, tokens, raw credentials) is controlled across MCP tools and API responses. The governing principle: request intent is not authorization. A caller argument like include_sensitive=true expresses what the caller wants, but only server/operator policy decides whether to honor it. Never let a per-call argument directly gate secret disclosure.

Prerequisites