Monitor mode
Definition
In monitor mode a control layer observes traffic to an MCP server without intervening: every tool call is recorded, nothing is blocked. If the layer fails, traffic keeps flowing (fail-open). Monitor mode is the zero-risk entry - it makes visible for the first time what agents actually do.
The typical path: monitor mode first to see the status quo, then define rules, then switch to enforce mode where critical calls are actually held. Control grows step by step instead of arriving as a big bang.
Related terms
tokyn.trail puts tracking, rules and human approvals in front of your MCP server - in 10 minutes, no code changes.
Learn more