Connect approved vault context and direct local file tools to MCP clients with explicit access controls.