Prompts Don't Protect: Architectural Enforcement via MCP Proxy for LLM Tool Access Control
DGX agentarXiv:2605.18414v1 Announce Type: cross Abstract: Large language models increasingly operate as autonomous agents that select and invoke tools from large registries. We identify a critical gap: when u