skilder packages tools inside role-scoped skills served by one MCP server, so tools the agent has not learned cannot be called
arXiv 2609.28693: Progressive Skill Discovery as Access Control·low signal
The agent starts with a minimal catalog of roles, and each role bundles skills, instructions, tools and limits such as spending caps. Tools reach the agent only through the skills it has learned, so the MCP server enforces scope deterministically instead of relying on prompt policy. Across 13 tasks, six models and 10 runs each, no unauthorized call or parameter violation executed once a governed call was issued. This is a reusable way to expose a large internal toolset without handing every agent every tool.