AWS TOLAP enforces column/row/field access control at the tool layer so data-access policies follow the data across MCP, LangChain and Bedrock Agents.
Yes, AWS TOLAP is open source under the Apache-2.0 license.
AWS TOLAP is free to use.
Yes, AWS TOLAP can be self-hosted (the source is available under the Apache-2.0 license).
Apache-2.0 protocol from AWS Labs — the Tool-Object Level Access Protocol — that enforces object-level access control (column, row, field) around the tool/function layer so data-access policies travel with the data rather than the agent. It is protocol-agnostic across MCP, LangChain, Bedrock Agents and Semantic Kernel, and ships enforcement SDKs for .NET, Python and TypeScript plus a reference policy server. It is a legitimate first-party AWS launch that is almost entirely undiscovered so far (5 stars, null repo description).
The governance gap in agentic data access is that policy usually attaches to the agent — grant it a scope, hope it stays inside. TOLAP inverts that: the access rule binds to the object (a column, a row, a field) and is enforced at the tool/function boundary, so the same policy holds no matter which agent or framework makes the call. For a RevOps or security team letting agents touch customer, deal or PII data, that is the plumbing that lets you say "agents may read these fields and not those" and have it enforced consistently across MCP, LangChain and Bedrock Agents. The honest read: it is a brand-new AWS Labs launch with essentially no traction yet, and it is a protocol with SDKs — the value only appears once you wire the enforcement into your own tool layer.