Servers that mutate external state should require a valid decision receipt for the declared frame, same as REST or SDK paths.
Treat MCP tool calls like any other execution surface: permit, deny, or silence before downstream systems accept work.
Servers that mutate external state should require a valid decision receipt for the declared frame, same as REST or SDK paths.