Runtime authorization & controls
Runtime governance layer inside the Databricks platform that routes and controls requests to models, agents, MCP services and AI tools using Unity Catalog privileges, service policies, rate limits and spend caps. Controls are strongest for assets governed by Unity Catalog rather than arbitrary external agent traffic.
commercial · unknown · Research snapshot 2026-09-06
Visit the official product source ↗Runtime authorization & controls · Observability & traceability · Data governance & privacy
Useful conversation with: Data platform owner, AI governance lead, CISO.
Show me Unity Gateway restricting an agent to an approved subset of tools on an MCP service, with the service policy that blocks a request and the resulting inference log.
Support labels reflect the supplied research. Documentation and vendor claims are not independent product tests. “Not established” means the researcher did not find support; it does not prove a capability is absent.
Documented by provider
Unity Gateway applies Unity Catalog privileges and service policies at request time to govern models, model provider services and MCP services, including tool filtering for MCP servers.
Limit: Documentation does not state an availability stage (GA, beta or preview) for the gateway or its components.
Vendor claim
The product page states identity-aware policies control what agents can access, which actions they can take and which tools they can use, with agents inheriting user permissions on MCP connections.
Limit: No authorization API, token-exchange mechanism or decision format is specified.
Documented by provider
The gateway can enforce rate limits, traffic splitting, fallbacks, per-user thresholds and hard spend caps for AI traffic.
Limit: Effectiveness for non-Databricks-hosted AI systems is asserted rather than documented.
Listing does not imply partnership, supplier status, a working DutyGraph integration, or a compliance certification.
Suggest a correction