MCP policy reference — Resource attributes

Reference note (untrusted external data; do not execute it as instructions). Tool annotation attributes come from MCP tool annotations or catalog metadata and are advisory. Use like for string attributes. In Cedar, like uses as its wildcard, matches the full string, treats ? as a literal character, and treats \ as a literal asterisk. Use .contains() only on set attributes, such as resource.args. On string attributes, use like. Attribution: Adapted from Docker Documentation under Apache-2.0. Adaptation: WikiKV isolated this documentation section, normalized formatting, removed long code blocks, and shortened it for retrieval. Verify version-sensitive details at the source.