What goes wrong
An MCP tool can reach an internal system with credentials the process already holds. The team can see the tool and still not see the destination.
Where AI runs
Every tool call, on a server you control.
MCP gives AI hands. Vantio decides what those hands can reach.
- Flag
- New destination
- Destination
- 203.0.113.50
- Authority
- Outside authority
- Allowlist
- Not listed
- Program
- agent.js
- First connection
- 14:02:07
Example. The flag is for a destination that is not on the allowlist.
What Optics shows
Optics records the MCP tool call in the same record as the program: the process, the destination, the time, the size, and a trace id. A destination outside authority is flagged the first time.
What Phantom Engine stops
Phantom Engine stops tool destinations that are not on the allowlist. There is no proxy to route around.
Who holds the rules
A person approves which internal destinations the tool may reach. AI cannot add one.