Add Business Policies for MCP Servers

Add business policies that define how the MCP Gateway governs and routes requests across connected services.

Learn More About Business Policies

See Business and Security Policies for MCP Gateway.

Prerequisites

Define MCP Servers to Manage

Instructions

  1. Open a project.
    1. In the navigation pane, select Projects.
    2. Select the project that contains the MCP gateway.
  2. In the left toolbar, select MCP Gateway .
  3. In the Business policies section, select Add.

    The Add business policy panel appears.

  4. Enter descriptive metadata for the business policy by filling in the following fields:

    • Name: Enter a name for the business policy. Provide a descriptive name so that you know what the business policy enforces.

    • Identifier: Oracle Integration generates this value using the Name value.

    • Description: Provide additional information about the business policy.

  5. Select Create Policy.
    The business policy editor appears.
  6. From the MCP Server list, select the server.
  7. From the MCP Tool list, select the MCP tool to which to apply the business policy.
  8. In the AI Assist field, enter the logic that describes when this business policy should allow this action, then click Generate rules. For example:
    Don't process invoices over 500 dollars.
    The JavaScript rule body of the business policy is generated. For example:
    if (input.message.includes('invoice') && input.message.includes('$')) {
    var invoiceAmount = parseFloat(input.message.match(/\d+(?:\.\d+)?/)[0]);
    if (invoiceAmount > 500) {
        deny('Invoice amount exceeds $500.');
    }
}
allow('Invoice is valid or not an invoice.');
  9. Edit the JavaScript rule body, if necessary. The function wrapper is shown above and below the editor. You can perform the following actions:
    1. Enter content or press Ctrl+Space for payload suggestions.
    2. Call allow() when the request is permitted.
    3. Call deny('message') when the request is denied.
  10. In the Tool Payload field, use the payload fields through the input parameter in the JavaScript rule.
  11. Click Validate Syntax before saving.
    Any validation errors are displayed below the JavaScript rule body.
  12. Correct any errors and click Validate Syntax until there are no errors.
  13. Click Save.

Next steps:

  • If needed, create additional business policies.

  • Create the MCP gateway, if it doesn't exist yet. See Create an MCP Gateway.