[Question]: Restrict the information that can be queried by the user

### Your question

Hello,
We want to use the MCP server with Claude Desktop. Users will self authorize and that have access to sensitive data (email messages for example) from the UI.
If we need to restrict the data retrieved by the MCP but not through the UI for the user. For example, the user can access sensitive email messages from the UI but not from the LLM.
What would be the best option ?

### Context

_No response_

### Environment

_No response_