MCP tool authorization: a gateway deny counts only when the server shows no side effect

A test matrix for MCP tool authorization that checks discovery, invocation, policy changes, approvals, the direct path to the upstream server and telemetry-only traffic,…