# X_MCP_TOOL_UNSAFE

## Means

an MCP tool declares no policy

## Typical cause

a hand-written `tools:` entry written without `policy`

## Fix

add `policy: '<resource>:<verb>'`, reusing the permission its action uses

[MCP and AI](/error-codes#mcp-and-ai)