Enforce mode
Definition
In enforce mode a control layer physically enforces rules: critical tool calls are held until a human decides, forbidden calls are rejected. If the layer fails, no unchecked action gets through (fail-closed). Enforce mode is the difference between convention ("the agent should not") and enforcement ("the agent cannot").
For auditors this difference is central: a prompt describing limits to the agent is not effective oversight - a system that physically holds the call is. Enforce mode applies per connection, so uncritical systems can stay in monitor mode.
Related terms
tokyn.trail puts tracking, rules and human approvals in front of your MCP server - in 10 minutes, no code changes.
Learn more