Initial curated ITWorx_MCP_Hub source from 368fba691ea8d23403b4d56b53b5ec670d7c5020

catalog/policies/040-read-tool-allow.yaml

@@ -0,0 +1,28 @@
+{
+  "apiVersion": "hub.example.com/v1alpha1",
+  "kind": "Policy",
+  "metadata": {
+    "name": "040 Read Tool Allow",
+    "slug": "040-read-tool-allow"
+  },
+  "spec": {
+    "priority": 40,
+    "description": "Allow R0/R1 calls only when scope, capability pack, connector binding, input budget and output policy all pass.",
+    "match": {
+      "riskClasses": [
+        "R0",
+        "R1"
+      ]
+    },
+    "conditions": {
+      "requireScope": true,
+      "requireCapabilityPack": true,
+      "requireConnectorBinding": true,
+      "requireInputValidation": true,
+      "requireOutputValidation": true,
+      "requireRedaction": true
+    },
+    "decision": "allow_if_conditions",
+    "terminal": true
+  }
+}