Function eager_mcp_tool_allowed 

pub fn eager_mcp_tool_allowed(
    name: &str,
    policy: Option<&ToolAccessPolicy>,
) -> bool

Whether an MCP tool name is admitted by policy (a None policy admits everything). The risk-profile denylist always wins; the allowlist auto-admits <server>__<tool> names so a restrictive allowlist does not silently drop a configured server’s tools.