OAuth deployment scopes are an independent resource-server authorization
layer. They only reduce the surface that the B2 capability filter would
otherwise expose; they never grant a B2 operation by themselves.
Parameters
name: string
MCP tool name.
scopes: ReadonlySet<string>|null
Verified scopes, or null when OAuth is not active.
Returns boolean
true when OAuth is inactive or the tool's required tier is allowed.
Remarks
Unknown tool names default to the admin tier, so OAuth deployments fail
closed until a reviewed policy is added.
OAuth deployment scopes are an independent resource-server authorization layer. They only reduce the surface that the B2 capability filter would otherwise expose; they never grant a B2 operation by themselves.