What would you like to be added:
tools/list request returns all the lists of tools exposed by the Gateway.
When AccessPolicy that allows access only to certain tools, ideally tools/list call should return only the allowed list for the client.
Why this is needed:
We dont want clients to be able to see tools they can't access. This is better for security and also for efficiency, i.e they anyway wont able to call them.