Tavily MCP server and Dome

1. 01

   Add the Tavily MCP server

   Dome keeps the Tavily API key and presents it as a Bearer token. No agent holds a copy.

   $ dome tools add --name tavily \
     --url https://mcp.tavily.com/mcp/ \
     --auth-method api-key \
     --credential-type shared \
     --authorization "Bearer $TAVILY_API_KEY" \
     --gateway prod-gateway

2. 02

   Sync the catalog

   Sync lists tavily_search, tavily_extract, tavily_crawl, tavily_map and tavily_research. Agents can call none of them before it runs.

   $ dome tools catalog sync tavily

3. 03

   Block personal data in arguments

   The filter runs on requests and reads inside lists of URLs. A match stops the call at the Gateway.

   $ cat > query-leak.json <<'EOF'
   $ {"json":{"components":[{"fieldActions":[{
     "matcher":{"contentMatchers":[{"ssn":{}},{"creditCard":{"requireLuhn":true}},{"email":{}}]},
     "action":"FILTER_ACTION_BLOCK"}]}]}}
   $ EOF
   $ dome guards filters create query-leak --config-from query-leak.json
   $ dome tools guards filters set tavily --direction request --filters query-leak

4. 04

   Apply the rules

   The crawl rule is scoped to filings-reader. Simulate a crawl on and off sec.gov, then deploy.

   $ dome rules apply tavily-research.cedar --agent filings-reader --name tavily-research

Commands and rules tested against a Dome workspace on October 1, 2026. For anything about Tavily itself, see Tavily's documentation.

permit (principal, action == Dome::Action::"mcp:call", resource is Dome::MCPTool)
when {
  resource.connection_name == "tavily" &&
  ["tavily_search", "tavily_extract", "tavily_crawl"].contains(resource.tool_name)
};
 
forbid (principal, action == Dome::Action::"mcp:call", resource is Dome::MCPTool)
when {
  resource.connection_name == "tavily" &&
  !["tavily_search", "tavily_extract", "tavily_crawl"].contains(resource.tool_name)
};
 
forbid (principal, action == Dome::Action::"mcp:call", resource is Dome::MCPTool)
when {
  resource.connection_name == "tavily" &&
  resource.tool_name == "tavily_search" &&
  resource has arguments &&
  resource.arguments has query &&
  resource.arguments.query like "*Halcyon*"
};
 
forbid (principal, action == Dome::Action::"mcp:call", resource is Dome::MCPTool)
when {
  resource.connection_name == "tavily" &&
  resource.tool_name == "tavily_crawl" &&
  !(resource has arguments &&
    resource.arguments has url &&
    resource.arguments.url like "https://www.sec.gov/*")
};