mcp_permission_guard
