Databricks Community

USE CONNECTION bypasses your MCP Service's Tool Selection and Policies

I registered a mock MCP server in Unity Catalog, exposed only its read tool, attached a deny policy, and then called the delete tool anyway. What decided the outcome was access to the underlying connection, and it came from grants on the schema, not ...