Backend of type mcp.jwtAuthentication.mcp, which ensures authentication runs beforeaud claimclientId (for example Entra ID confidential clients,clientSecret key;clientSecretRef.key.iss claim ([RFC 7519 §4.1.1](https://tools.ietf.org/html/rfc7519#section-4.1.1)).jwks document is used before it is re-fetched from the IdP.5m.jwks endpoint, relative to the root, commonly".well-known/jwks.json".Strict.exp.iss; a non-empty audiences list alsoaud, regardless of these options. An empty requiredClaimsexp is present.exp, nbf, aud, sub.["exp"] when omitted. An empty list adds no requirementsiss, which is always required, and aud, which is requiredexp is present.403 error, this policy works at theMCPBackend level.list_tools, will have each item evaluated.call_tool, will evaluate the specificguardrails routes selected JSON-RPC methods through a remote policy server.processors is the ordered list of policy processors applied to matchedmethods is the allowlist of JSON-RPC methods (e.g. tools/call,tools/list) routed through this processor, keyed by method name with thetools/*), a suffix*/list), or * for all methods; the most specific match wins.remote configures a gRPC policy server.allowedRequestHeaders lists the incoming request headers forwarded toMcpRequest.headers. If empty, all headers and:authority, :method, ...) are forwarded. Matching isdisallowedRequestHeaders lists header names never forwarded to theallowedRequestHeaders. Matching isfailureMode controls behavior when the policy server is unreachableFailOpen allows the request; FailClosedmetadata is static or CEL-evaluated context surfaced to the policymetadata_context google.protobuf.Struct,request.headers["x-session-id"] or string(source.address).All disables all TLS verificationHostname trusts the CA certificate but ignores hostname/SAN mismatches.verifySubjectAltNames where possible.SNI) to use in the TLSSNI is automatically set based on theHTTPS_PROXYbackendRef selects a backend for this policy.url.gateway.networking.k8s.io. Empty selects the core API groupService. Defaults to ServiceServiceService appProtocol, HTTP2 for gRPC, the original protocol forHTTP1 for HTTPS because clients often upgrade HTTPSBackend of type mcp.jwtAuthentication.mcp, which ensures authentication runs beforeaud claimclientId (for example Entra ID confidential clients,clientSecret key;clientSecretRef.key.iss claim ([RFC 7519 §4.1.1](https://tools.ietf.org/html/rfc7519#section-4.1.1)).jwks document is used before it is re-fetched from the IdP.5m.jwks endpoint, relative to the root, commonly".well-known/jwks.json".Strict.exp.iss; a non-empty audiences list alsoaud, regardless of these options. An empty requiredClaimsexp is present.exp, nbf, aud, sub.["exp"] when omitted. An empty list adds no requirementsiss, which is always required, and aud, which is requiredexp is present.403 error, this policy works at theMCPBackend level.list_tools, will have each item evaluated.call_tool, will evaluate the specificguardrails routes selected JSON-RPC methods through a remote policy server.processors is the ordered list of policy processors applied to matchedmethods is the allowlist of JSON-RPC methods (e.g. tools/call,tools/list) routed through this processor, keyed by method name with thetools/*), a suffix*/list), or * for all methods; the most specific match wins.remote configures a gRPC policy server.allowedRequestHeaders lists the incoming request headers forwarded toMcpRequest.headers. If empty, all headers and:authority, :method, ...) are forwarded. Matching isdisallowedRequestHeaders lists header names never forwarded to theallowedRequestHeaders. Matching isfailureMode controls behavior when the policy server is unreachableFailOpen allows the request; FailClosedmetadata is static or CEL-evaluated context surfaced to the policymetadata_context google.protobuf.Struct,request.headers["x-session-id"] or string(source.address).All disables all TLS verificationHostname trusts the CA certificate but ignores hostname/SAN mismatches.verifySubjectAltNames where possible.SNI) to use in the TLSSNI is automatically set based on theHTTPS_PROXYbackendRef selects a backend for this policy.url.gateway.networking.k8s.io. Empty selects the core API groupService. Defaults to ServiceService