We will create a pre-tool plugin that will handle the IAM requirements for the given tool (we will limit our scope to MCP servers in this issue), which include token acquisition, token exchange, and any policy enforcement as required by the CF administrator.

This plugin will feed an access token to the module that makes an HTTP call to the tool (i.e., MCP server).

@aksharkaul @terylt @abhi201191 @viksharma1987 @sandeepnRES