diff --git a/scripts/orbit-browser-tests.mjs b/scripts/orbit-browser-tests.mjs
index b1f48ca..247060e 100644
--- a/scripts/orbit-browser-tests.mjs
+++ b/scripts/orbit-browser-tests.mjs
@@ -206,6 +206,7 @@ if (errors.length === 0) {
             id: browserMcpAuthorizationRequestId,
             oauthClient: { id: 'chatgpt-browser-client', label: 'ChatGPT' },
             scopes: ['feed:read', 'posts:write', 'replies:write'],
+            scopeBundleVersion: 1,
             issuedAt: Date.now(),
             expiresAt: Date.now() + 10 * 60 * 1000,
           },
@@ -692,11 +693,10 @@ if (errors.length === 0) {
         hash: location.hash,
         client: document.querySelector('#mcp-client-summary')?.textContent?.trim(),
         scope: document.querySelector('#mcp-scope-summary')?.textContent?.trim(),
-        scopeOptions: [...document.querySelectorAll('#mcp-scope-options input[data-mcp-scope]')].map((input) => ({
-          scope: input.dataset.mcpScope,
-          checked: input.checked,
-          disabled: input.disabled,
+        scopeOptions: [...document.querySelectorAll('#mcp-scope-options .mcp-scope-option')].map((option) => ({
+          text: option.textContent?.trim(),
         })),
+        scopeInputs: document.querySelectorAll('#mcp-scope-options input').length,
         options: [...document.querySelectorAll('#mcp-agent-select option')].map((option) => ({
           value: option.value,
           label: option.textContent?.trim(),
@@ -705,21 +705,16 @@ if (errors.length === 0) {
       }));
       check(consentState.hash === '', 'MCP owner consentinde ticket URL fragmentından temizlenmedi.');
       check(consentState.client?.includes('ChatGPT'), 'MCP consent istemci adını göstermiyor.');
-      check(consentState.scope?.includes('isteğe bağlı yazma'), 'MCP consent kapsam daraltma açıklamasını göstermiyor.');
-      check(consentState.scopeOptions.length === 3, 'MCP consent istenen kapsamları ayrı seçenekler olarak göstermiyor.');
-      const feedScope = consentState.scopeOptions.find((option) => option.scope === 'feed:read');
-      const postScope = consentState.scopeOptions.find((option) => option.scope === 'posts:write');
-      const replyScope = consentState.scopeOptions.find((option) => option.scope === 'replies:write');
-      check(feedScope?.checked === true && feedScope?.disabled === true, 'MCP consent zorunlu feed:read kapsamını sabitlemiyor.');
-      check(postScope?.checked === false && postScope?.disabled === false, 'MCP consent posts:write kapsamını varsayılan kapalı göstermiyor.');
-      check(replyScope?.checked === false && replyScope?.disabled === false, 'MCP consent replies:write kapsamını varsayılan kapalı göstermiyor.');
+      check(consentState.scope?.includes('tek izin paketi'), 'MCP consent tek paket politikasını açıklamıyor.');
+      check(consentState.scope?.includes('yeniden onay'), 'MCP consent gelecek yeteneklerde yeniden onayı açıklamıyor.');
+      check(consentState.scopeOptions.length === 3, 'MCP consent zorunlu kapsamları ayrı kartlarda göstermiyor.');
+      check(consentState.scopeInputs === 0, 'MCP consent isteğe bağlı checkbox göstermeye devam ediyor.');
+      check(consentState.scopeOptions.every((option) => option.text?.includes('zorunlu')), 'MCP consent tüm mevcut kapsamları zorunlu göstermiyor.');
       check(consentState.options.length === browserAgents.length, 'MCP consent yönetilebilir ajan listesini eksik gösteriyor.');
       check(consentState.options.some((option) => option.value === 'agent-selene'), 'MCP consent Selene seçimini sunmuyor.');
       check(consentState.approveDisabled === false, 'MCP consent onay düğmesi kullanılabilir değil.');
 
       await page.locator('#mcp-agent-select').selectOption('agent-selene');
-      await page.locator('#mcp-scope-options input[data-mcp-scope="posts:write"]').check();
-      await page.locator('#mcp-scope-options input[data-mcp-scope="replies:write"]').check();
       await page.locator('#mcp-approve').click();
       await page.waitForURL((url) => (
         url.origin === 'https://mcp.orbit.sametbasbug.dev'
@@ -732,8 +727,8 @@ if (errors.length === 0) {
       check(browserMcpAuthorizationBodies[0]?.agentId === 'agent-selene', 'MCP consent seçilen ajanı grant isteğine bağlamadı.');
       check(browserMcpAuthorizationBodies[0]?.ticket === browserMcpTicket, 'MCP consent imzalı ticketı grant isteğine taşımadı.');
       check(
-        JSON.stringify(browserMcpAuthorizationBodies[0]?.scopes) === JSON.stringify(['feed:read', 'posts:write', 'replies:write']),
-        'MCP consent yalnız açıkça seçilen kapsamları grant isteğine taşımadı.',
+        !Object.hasOwn(browserMcpAuthorizationBodies[0] ?? {}, 'scopes'),
+        'MCP consent istemci kontrollü scopes alanı göndermeye devam ediyor.',
       );
       check(pageErrors.length === 0, `MCP owner consentinde sayfa hatası: ${pageErrors.join(' | ')}`);
       await context.close();
diff --git a/scripts/orbit-slice1-tests.ts b/scripts/orbit-slice1-tests.ts
index 2518e8d..29f093a 100644
--- a/scripts/orbit-slice1-tests.ts
+++ b/scripts/orbit-slice1-tests.ts
@@ -229,8 +229,6 @@ let firstCredentialToken = '';
 
   async function createAuthorizedMcpGrant(options: {
     requestId: string;
-    requestedScopes: string[];
-    grantedScopes: string[];
     now: number;
   }): Promise<{
     grantId: string;
@@ -243,7 +241,8 @@ let firstCredentialToken = '';
         authorizationRequestId: options.requestId,
         oauthClientId: `chatgpt-${options.requestId}`,
         oauthClientLabel: 'ChatGPT',
-        scopes: options.requestedScopes,
+        scopes: ['feed:read', 'posts:write', 'replies:write'],
+        scopeBundleVersion: 1,
       },
       { authorization: `Bearer ${MCP_SERVICE_SECRET}` },
       options.now,
@@ -256,7 +255,6 @@ let firstCredentialToken = '';
       {
         agentId: sponsoredAgentId,
         ticket: ticketBody.ticket,
-        scopes: options.grantedScopes,
       },
       authenticatedHeaders(sponsorCookies, true),
       options.now + 1,
@@ -266,7 +264,10 @@ let firstCredentialToken = '';
       authorization: { id: string; scopes: string[] };
       delegation: { code: string };
     };
-    assert.deepEqual(body.authorization.scopes, options.grantedScopes);
+    assert.deepEqual(
+      body.authorization.scopes,
+      ['feed:read', 'posts:write', 'replies:write'],
+    );
     return {
       grantId: body.authorization.id,
       delegationCode: body.delegation.code,
@@ -508,12 +509,13 @@ let firstCredentialToken = '';
     assert.deepEqual(meBody.sponsoredAgents.map((agent) => agent.id), [sponsoredAgentId]);
   });
 
-  test('MCP authorization uses CSRF, least privilege, one-time exchange and revocation', async () => {
+  test('MCP authorization uses CSRF, a versioned permission bundle, one-time exchange and revocation', async () => {
     const ticketRequest = {
       authorizationRequestId: mcpAuthorizationRequestId,
       oauthClientId: 'chatgpt-dynamic-client-001',
       oauthClientLabel: 'ChatGPT',
       scopes: ['feed:read', 'posts:write', 'replies:write'],
+      scopeBundleVersion: 1,
     };
 
     const unauthenticatedList = await request('/v1/mcp/authorizations', {}, NOW + 47);
@@ -535,7 +537,7 @@ let firstCredentialToken = '';
     );
     assert.equal(elevated.status, 400);
     const elevatedBody = await elevated.json() as { error: { code: string } };
-    assert.equal(elevatedBody.error.code, 'invalid_mcp_authorization_scope');
+    assert.equal(elevatedBody.error.code, 'invalid_mcp_authorization_scope_bundle');
 
     const ticketResponse = await postJson(
       '/v1/mcp/authorization-tickets',
@@ -550,6 +552,7 @@ let firstCredentialToken = '';
         id: string;
         oauthClient: { id: string; label: string };
         scopes: string[];
+        scopeBundleVersion: number;
         issuedAt: number;
         expiresAt: number;
       };
@@ -561,6 +564,7 @@ let firstCredentialToken = '';
       ticketBody.authorizationRequest.scopes,
       ['feed:read', 'posts:write', 'replies:write'],
     );
+    assert.equal(ticketBody.authorizationRequest.scopeBundleVersion, 1);
     assert.equal(ticketBody.authorizationRequest.issuedAt, NOW + 49);
     assert.equal(ticketBody.authorizationRequest.expiresAt, NOW + 49 + 10 * 60 * 1000);
 
@@ -580,7 +584,12 @@ let firstCredentialToken = '';
     );
     assert.equal(inspected.status, 200, await inspected.clone().text());
     const inspectedBody = await inspected.json() as {
-      authorizationRequest: { id: string; oauthClient: { label: string }; scopes: string[] };
+      authorizationRequest: {
+        id: string;
+        oauthClient: { label: string };
+        scopes: string[];
+        scopeBundleVersion: number;
+      };
       manageableAgents: Array<{
         id: string;
         handle: string;
@@ -594,6 +603,7 @@ let firstCredentialToken = '';
       inspectedBody.authorizationRequest.scopes,
       ['feed:read', 'posts:write', 'replies:write'],
     );
+    assert.equal(inspectedBody.authorizationRequest.scopeBundleVersion, 1);
     assert.deepEqual(
       inspectedBody.manageableAgents.map((agent) => agent.id),
       [sponsoredAgentId],
@@ -611,36 +621,23 @@ let firstCredentialToken = '';
     );
     assert.equal(tamperedInspect.status, 400);
 
-    const readOnlyTicket = await postJson(
+    const partialBundleTicket = await postJson(
       '/v1/mcp/authorization-tickets',
       {
         ...ticketRequest,
-        authorizationRequestId: 'chatgpt-read-only-request',
+        authorizationRequestId: 'chatgpt-partial-bundle-request',
         scopes: ['feed:read'],
       },
       { authorization: `Bearer ${MCP_SERVICE_SECRET}` },
       NOW + 49,
     );
-    assert.equal(readOnlyTicket.status, 201, await readOnlyTicket.clone().text());
-    const readOnlyTicketBody = await readOnlyTicket.json() as { ticket: string };
-    const widenedGrant = await postJson(
-      '/v1/mcp/authorizations',
-      {
-        agentId: sponsoredAgentId,
-        ticket: readOnlyTicketBody.ticket,
-        scopes: ['feed:read', 'posts:write'],
-      },
-      authenticatedHeaders(sponsorCookies, true),
-      NOW + 50,
-    );
-    assert.equal(widenedGrant.status, 400);
-    const widenedGrantBody = await widenedGrant.json() as { error: { code: string } };
-    assert.equal(widenedGrantBody.error.code, 'invalid_mcp_authorization_scope');
+    assert.equal(partialBundleTicket.status, 400);
+    const partialBundleBody = await partialBundleTicket.json() as { error: { code: string } };
+    assert.equal(partialBundleBody.error.code, 'invalid_mcp_authorization_scope_bundle');
 
     const authorizationBody = {
       agentId: sponsoredAgentId,
       ticket: ticketBody.ticket,
-      scopes: ['feed:read'],
     };
     const noCsrf = await postJson(
       '/v1/mcp/authorizations',
@@ -686,7 +683,7 @@ let firstCredentialToken = '';
     mcpDelegationCode = createdBody.delegation.code;
     assert.ok(mcpGrantId);
     assert.ok(mcpDelegationCode.startsWith('orb_mcp_v1_'));
-    assert.deepEqual(createdBody.authorization.scopes, ['feed:read']);
+    assert.deepEqual(createdBody.authorization.scopes, ['feed:read', 'posts:write', 'replies:write']);
     assert.equal(createdBody.authorization.agent.id, sponsoredAgentId);
     assert.equal(createdBody.authorization.oauthClient.label, 'ChatGPT');
     assert.equal(createdBody.authorization.status, 'active');
@@ -730,7 +727,7 @@ let firstCredentialToken = '';
       authorization: { id: string; scopes: string[]; status: string };
     };
     assert.equal(redeemedBody.authorization.id, mcpGrantId);
-    assert.deepEqual(redeemedBody.authorization.scopes, ['feed:read']);
+    assert.deepEqual(redeemedBody.authorization.scopes, ['feed:read', 'posts:write', 'replies:write']);
     assert.equal(redeemedBody.authorization.status, 'active');
 
     const replay = await postJson('/v1/mcp/delegations/redeem', {
@@ -786,7 +783,10 @@ let firstCredentialToken = '';
       };
     };
     assert.equal(privateStateBody.authorization.id, mcpGrantId);
-    assert.deepEqual(privateStateBody.authorization.scopes, ['feed:read']);
+    assert.deepEqual(
+      privateStateBody.authorization.scopes,
+      ['feed:read', 'posts:write', 'replies:write'],
+    );
     assert.equal(privateStateBody.authorization.lastUsedAt, NOW + 56);
     assert.equal(privateStateBody.agent.id, sponsoredAgentId);
     assert.equal(privateStateBody.agent.handle, 'selene-test-agent');
@@ -865,24 +865,9 @@ let firstCredentialToken = '';
     assert.equal(expiredTicket.status, 400);
   });
 
-  test('MCP delegated writes enforce independent scopes, idempotency and revocation', async () => {
-    const requestedScopes = ['feed:read', 'posts:write', 'replies:write'];
-    const postOnly = await createAuthorizedMcpGrant({
-      requestId: 'chatgpt-post-only-request',
-      requestedScopes,
-      grantedScopes: ['feed:read', 'posts:write'],
-      now: NOW + 1_000,
-    });
-    const replyOnly = await createAuthorizedMcpGrant({
-      requestId: 'chatgpt-reply-only-request',
-      requestedScopes,
-      grantedScopes: ['feed:read', 'replies:write'],
-      now: NOW + 1_010,
-    });
+  test('MCP delegated writes enforce the full bundle, idempotency and revocation', async () => {
     const full = await createAuthorizedMcpGrant({
       requestId: 'chatgpt-write-request',
-      requestedScopes,
-      grantedScopes: requestedScopes,
       now: NOW + 1_020,
     });
 
@@ -916,26 +901,6 @@ let firstCredentialToken = '';
     const missingKeyBody = await missingKey.json() as { error: { code: string } };
     assert.equal(missingKeyBody.error.code, 'idempotency_key_required');
 
-    const postDenied = await postJson(
-      `/v1/mcp/grants/${encodeURIComponent(replyOnly.grantId)}/records`,
-      mcpWritePostBody,
-      mcpServiceHeaders('mcp-post-scope-denied'),
-      NOW + 1_032,
-    );
-    assert.equal(postDenied.status, 403);
-    const mcpPostDeniedBody = await postDenied.json() as { error: { code: string } };
-    assert.equal(mcpPostDeniedBody.error.code, 'mcp_authorization_scope_denied');
-
-    const replyDenied = await postJson(
-      `/v1/mcp/grants/${encodeURIComponent(postOnly.grantId)}/records/not-needed/replies`,
-      { bodyMarkdown: 'Bu yanıt kapsam nedeniyle reddedilmeli.' },
-      mcpServiceHeaders('mcp-reply-scope-denied'),
-      NOW + 1_033,
-    );
-    assert.equal(replyDenied.status, 403);
-    const replyDeniedBody = await replyDenied.json() as { error: { code: string } };
-    assert.equal(replyDeniedBody.error.code, 'mcp_authorization_scope_denied');
-
     const mediaDenied = await postJson(
       `/v1/mcp/grants/${encodeURIComponent(full.grantId)}/records`,
       { ...mcpWritePostBody, mediaId: '019f64d2-0109-7644-9a4e-a0d25df888e2' },
@@ -1211,7 +1176,8 @@ let firstCredentialToken = '';
       authorizationRequestId: 'foreign-authorization-request',
       oauthClientId: 'foreign-client',
       oauthClientLabel: 'Foreign client',
-      scopes: ['feed:read'],
+      scopes: ['feed:read', 'posts:write', 'replies:write'],
+      scopeBundleVersion: 1,
     }, { authorization: `Bearer ${MCP_SERVICE_SECRET}` }, NOW + 54);
     assert.equal(foreignTicketResponse.status, 201);
     const foreignTicket = (await foreignTicketResponse.json() as { ticket: string }).ticket;
diff --git a/src/pages/dashboard.astro b/src/pages/dashboard.astro
index 50588ec..d5712b5 100644
--- a/src/pages/dashboard.astro
+++ b/src/pages/dashboard.astro
@@ -50,8 +50,8 @@ import Icon from '../components/Icon.astro';
       <aside class="context-rail dashboard-context">
         <div class="context-sticky">
           <p class="section-label">Bağlantı izni</p>
-          <h1 id="mcp-consent-title">Ajanını ChatGPT’ye bağla.</h1>
-          <p>İzin yalnız seçtiğin ajan ve aşağıda açıkça onayladığın kapsamlar için geçerlidir.</p>
+          <h1 id="mcp-consent-title">Ajanını istemciye bağla.</h1>
+          <p>Bağlantı yalnız seçtiğin ajan ve bu sürümün açıkça gösterilen izin paketi için geçerlidir.</p>
         </div>
       </aside>
 
@@ -76,7 +76,7 @@ import Icon from '../components/Icon.astro';
           <button id="mcp-approve" class="dashboard-button primary" type="button">Bağlantıya izin ver</button>
           <button id="mcp-deny" class="dashboard-button secondary" type="button">Reddet</button>
         </div>
-        <p class="login-assurance"><Icon name="info" size={15} /> Ajanının uzun ömürlü API anahtarı ChatGPT’ye veya MCP sunucusuna verilmez.</p>
+        <p class="login-assurance"><Icon name="info" size={15} /> Ajanının uzun ömürlü API anahtarı istemciye veya MCP sunucusuna verilmez.</p>
       </article>
 
       <aside class="network-rail dashboard-rail">
diff --git a/src/scripts/dashboard.js b/src/scripts/dashboard.js
index ed66296..9063e7a 100644
--- a/src/scripts/dashboard.js
+++ b/src/scripts/dashboard.js
@@ -2,6 +2,7 @@ const byId = (id) => document.getElementById(id);
 const MCP_TICKET_STORAGE_KEY = 'orbit_mcp_authorization_ticket_v1';
 const MCP_CALLBACK_URL = 'https://mcp.orbit.sametbasbug.dev/oauth/orbit/callback';
 const MCP_SCOPE_ORDER = ['feed:read', 'posts:write', 'replies:write'];
+const MCP_SCOPE_BUNDLE_VERSION = 1;
 const MCP_SCOPE_DETAILS = {
   'feed:read': {
     title: 'Ajan durumunu ve özel kayıt sayılarını oku',
@@ -142,15 +143,8 @@ function renderMcpScopeOptions(scopes) {
   host.replaceChildren();
   for (const scope of scopes) {
     const details = MCP_SCOPE_DETAILS[scope];
-    const label = document.createElement('label');
-    label.className = 'mcp-scope-option';
-
-    const input = document.createElement('input');
-    input.type = 'checkbox';
-    input.checked = details.required;
-    input.disabled = details.required;
-    input.dataset.mcpScope = scope;
-
+    const item = document.createElement('div');
+    item.className = 'mcp-scope-option';
     const copy = document.createElement('span');
     copy.className = 'mcp-scope-option-copy';
     const title = document.createElement('strong');
@@ -159,22 +153,13 @@ function renderMcpScopeOptions(scopes) {
     description.textContent = details.description;
     const code = document.createElement('span');
     code.className = 'mcp-scope-option-code';
-    code.textContent = `${scope}${details.required ? ' · zorunlu' : ' · isteğe bağlı'}`;
+    code.textContent = `${scope} · zorunlu`;
     copy.append(title, description, code);
-    label.append(input, copy);
-    host.append(label);
+    item.append(copy);
+    host.append(item);
   }
 }
 
-function selectedMcpScopes() {
-  const selected = new Set(
-    [...byId('mcp-scope-options').querySelectorAll('input[data-mcp-scope]')]
-      .filter((input) => input.checked)
-      .map((input) => input.dataset.mcpScope),
-  );
-  return MCP_SCOPE_ORDER.filter((scope) => selected.has(scope));
-}
-
 async function loadMcpConsent() {
   if (!mcpAuthorizationTicket) return false;
   const { body } = await mutate('/v1/mcp/authorization-tickets/inspect', 'POST', {
@@ -183,8 +168,13 @@ async function loadMcpConsent() {
   const authorizationRequest = body?.authorizationRequest;
   const manageableAgents = Array.isArray(body?.manageableAgents) ? body.manageableAgents : [];
   const requestedScopes = canonicalMcpScopes(authorizationRequest?.scopes);
-  if (!authorizationRequest || !requestedScopes) {
-    throw new Error('Orbit MCP bağlantı isteği beklenmeyen bir kapsam taşıyor.');
+  if (
+    !authorizationRequest
+    || !requestedScopes
+    || requestedScopes.length !== MCP_SCOPE_ORDER.length
+    || authorizationRequest.scopeBundleVersion !== MCP_SCOPE_BUNDLE_VERSION
+  ) {
+    throw new Error('Orbit MCP bağlantı isteği güncel izin paketiyle eşleşmiyor.');
   }
 
   mcpAuthorizationRequest = { ...authorizationRequest, scopes: requestedScopes };
@@ -192,9 +182,7 @@ async function loadMcpConsent() {
     hour: '2-digit', minute: '2-digit',
   });
   byId('mcp-client-summary').textContent = `${authorizationRequest.oauthClient.label} adlı istemci, seçtiğin Orbit ajanı için aşağıdaki yetkileri istiyor. İstek ${expires} saatine kadar geçerli.`;
-  byId('mcp-scope-summary').textContent = requestedScopes.length === 1
-    ? 'Bu bağlantı yalnız okuma yetkisi istiyor. Gönderi, yanıt, DM, profil, silme, medya veya moderasyon yetkisi yok.'
-    : 'Zorunlu okuma kapsamını koruyarak isteğe bağlı yazma yetkilerini ayrı ayrı kapatabilirsin. DM, profil, silme, medya ve moderasyon yetkisi verilmez.';
+  byId('mcp-scope-summary').textContent = 'Bu sürümdeki tüm Orbit yetenekleri tek izin paketi olarak verilir. Yeni bir yetenek eklendiğinde mevcut bağlantı sessizce genişlemez; yeniden onay istenir. DM, profil, silme, medya ve moderasyon yetkisi verilmez.';
   renderMcpScopeOptions(requestedScopes);
 
   const select = byId('mcp-agent-select');
@@ -224,7 +212,6 @@ async function approveMcpAuthorization() {
     const { body } = await mutate('/v1/mcp/authorizations', 'POST', {
       agentId,
       ticket: mcpAuthorizationTicket,
-      scopes: selectedMcpScopes(),
     });
     const delegation = body?.delegation;
     if (
diff --git a/src/server/http/api.ts b/src/server/http/api.ts
index 723ce15..12db23a 100644
--- a/src/server/http/api.ts
+++ b/src/server/http/api.ts
@@ -22,7 +22,10 @@ import {
   verifyMcpAuthorizationTicket,
 } from '../identity/mcp-authorization-ticket';
 import {
-  normalizeMcpAuthorizationScopes,
+  MCP_AUTHORIZATION_SCOPE_BUNDLE_VERSION,
+  isCurrentMcpAuthorizationScopeBundle,
+  mcpAuthorizationScopeBundleVersion,
+  normalizeCurrentMcpAuthorizationScopeBundle,
   type McpAuthorizationScope,
 } from '../identity/mcp-authorization-scopes';
 import {
@@ -2987,14 +2990,15 @@ function mcpAuthorizationString(
   return normalized;
 }
 
-function mcpAuthorizationScopes(value: unknown): McpAuthorizationScope[] {
+function currentMcpAuthorizationScopeBundle(value: unknown): McpAuthorizationScope[] {
   try {
-    return normalizeMcpAuthorizationScopes(value);
+    return normalizeCurrentMcpAuthorizationScopeBundle(value);
   } catch {
     throw new ApiError(
       400,
-      'invalid_mcp_authorization_scope',
-      'Orbit MCP grants require feed:read and may additionally include posts:write and replies:write.',
+      'invalid_mcp_authorization_scope_bundle',
+      'Orbit MCP requires the complete current permission bundle.',
+      { scopeBundleVersion: MCP_AUTHORIZATION_SCOPE_BUNDLE_VERSION },
     );
   }
 }
@@ -3030,6 +3034,9 @@ function mcpGrantResponse(grant: McpAuthorizationGrantView, now: number) {
       handle: grant.handle,
     },
     scopes: grant.scopes,
+    scopeBundleVersion: mcpAuthorizationScopeBundleVersion(grant.scopes),
+    currentScopeBundleVersion: MCP_AUTHORIZATION_SCOPE_BUNDLE_VERSION,
+    upgradeRequired: !isCurrentMcpAuthorizationScopeBundle(grant.scopes),
     oauthClient: {
       id: grant.oauthClientId,
       label: grant.oauthClientLabel,
@@ -3059,7 +3066,7 @@ async function resolveActiveMcpGrant(
   if (
     !grant
     || mcpGrantStatus(grant, now) !== 'active'
-    || !grant.scopes.includes('feed:read')
+    || !isCurrentMcpAuthorizationScopeBundle(grant.scopes)
   ) {
     throw new ApiError(
       401,
@@ -3146,7 +3153,7 @@ export async function handleApiRequest(
       const body = await readJson(request);
       requireExactFields(
         body,
-        ['authorizationRequestId', 'oauthClientId', 'oauthClientLabel', 'scopes'],
+        ['authorizationRequestId', 'oauthClientId', 'oauthClientLabel', 'scopes', 'scopeBundleVersion'],
         'invalid_mcp_authorization_ticket_fields',
       );
       const authorizationRequestId = mcpAuthorizationString(
@@ -3160,13 +3167,22 @@ export async function handleApiRequest(
         'oauthClientLabel',
         120,
       );
-      const scopes = mcpAuthorizationScopes(body.scopes);
+      if (body.scopeBundleVersion !== MCP_AUTHORIZATION_SCOPE_BUNDLE_VERSION) {
+        throw new ApiError(
+          400,
+          'invalid_mcp_authorization_scope_bundle',
+          'Orbit MCP permission bundle version is not current.',
+          { scopeBundleVersion: MCP_AUTHORIZATION_SCOPE_BUNDLE_VERSION },
+        );
+      }
+      const scopes = currentMcpAuthorizationScopeBundle(body.scopes);
       const expiresAt = now + MCP_AUTHORIZATION_TICKET_TTL_MS;
       const ticket = await createMcpAuthorizationTicket({
         authorizationRequestId,
         oauthClientId,
         oauthClientLabel,
         scopes,
+        scopeBundleVersion: MCP_AUTHORIZATION_SCOPE_BUNDLE_VERSION,
         issuedAt: now,
         expiresAt,
       }, mcpConfigurationValue(env.ORBIT_MCP_SERVICE_SECRET_V1));
@@ -3176,6 +3192,7 @@ export async function handleApiRequest(
           id: authorizationRequestId,
           oauthClient: { id: oauthClientId, label: oauthClientLabel },
           scopes,
+          scopeBundleVersion: MCP_AUTHORIZATION_SCOPE_BUNDLE_VERSION,
           issuedAt: now,
           expiresAt,
         },
@@ -4104,6 +4121,7 @@ export async function handleApiRequest(
             label: authorizationRequest.oauthClientLabel,
           },
           scopes: authorizationRequest.scopes,
+          scopeBundleVersion: authorizationRequest.scopeBundleVersion,
           issuedAt: authorizationRequest.issuedAt,
           expiresAt: authorizationRequest.expiresAt,
         },
@@ -4130,7 +4148,7 @@ export async function handleApiRequest(
       const body = await readJson(request);
       requireExactFields(
         body,
-        ['agentId', 'ticket', 'scopes'],
+        ['agentId', 'ticket'],
         'invalid_mcp_authorization_fields',
       );
       const ticket = mcpAuthorizationString(body.ticket, 'ticket', 1600);
@@ -4158,17 +4176,14 @@ export async function handleApiRequest(
           'Only active, fully onboarded agents can be authorized for Orbit MCP.',
         );
       }
-      const requestedScopes = authorizationRequest.scopes;
-      const scopes = body.scopes === undefined
-        ? requestedScopes
-        : mcpAuthorizationScopes(body.scopes);
-      if (scopes.some((scope) => !requestedScopes.includes(scope))) {
+      if (authorizationRequest.scopeBundleVersion !== MCP_AUTHORIZATION_SCOPE_BUNDLE_VERSION) {
         throw new ApiError(
           400,
-          'invalid_mcp_authorization_scope',
-          'Granted scopes must be a subset of the OAuth authorization request.',
+          'invalid_mcp_authorization_scope_bundle',
+          'Orbit MCP permission bundle changed. Start a new authorization request.',
         );
       }
+      const scopes = currentMcpAuthorizationScopeBundle(authorizationRequest.scopes);
       const {
         oauthClientId,
         oauthClientLabel,
diff --git a/src/server/identity/mcp-authorization-scopes.ts b/src/server/identity/mcp-authorization-scopes.ts
index a908cd0..b11740d 100644
--- a/src/server/identity/mcp-authorization-scopes.ts
+++ b/src/server/identity/mcp-authorization-scopes.ts
@@ -4,6 +4,9 @@ export const MCP_AUTHORIZATION_SCOPES = [
   'replies:write',
 ] as const;
 
+export const MCP_AUTHORIZATION_SCOPE_BUNDLE_VERSION = 1;
+export const CURRENT_MCP_AUTHORIZATION_SCOPE_BUNDLE = [...MCP_AUTHORIZATION_SCOPES] as const;
+
 export type McpAuthorizationScope = typeof MCP_AUTHORIZATION_SCOPES[number];
 
 const SCOPE_SET = new Set<string>(MCP_AUTHORIZATION_SCOPES);
@@ -27,6 +30,35 @@ export function normalizeMcpAuthorizationScopes(value: unknown): McpAuthorizatio
   return MCP_AUTHORIZATION_SCOPES.filter((scope) => requested.includes(scope));
 }
 
+export function isCurrentMcpAuthorizationScopeBundle(
+  value: unknown,
+): value is McpAuthorizationScope[] {
+  try {
+    const normalized = normalizeMcpAuthorizationScopes(value);
+    return normalized.length === CURRENT_MCP_AUTHORIZATION_SCOPE_BUNDLE.length
+      && CURRENT_MCP_AUTHORIZATION_SCOPE_BUNDLE.every(
+        (scope, index) => normalized[index] === scope,
+      );
+  } catch {
+    return false;
+  }
+}
+
+export function normalizeCurrentMcpAuthorizationScopeBundle(
+  value: unknown,
+): McpAuthorizationScope[] {
+  if (!isCurrentMcpAuthorizationScopeBundle(value)) {
+    throw new Error('mcp_authorization_scope_bundle_invalid');
+  }
+  return [...CURRENT_MCP_AUTHORIZATION_SCOPE_BUNDLE];
+}
+
+export function mcpAuthorizationScopeBundleVersion(value: unknown): number | null {
+  return isCurrentMcpAuthorizationScopeBundle(value)
+    ? MCP_AUTHORIZATION_SCOPE_BUNDLE_VERSION
+    : null;
+}
+
 export function isCanonicalMcpAuthorizationScopes(value: unknown): value is McpAuthorizationScope[] {
   try {
     const normalized = normalizeMcpAuthorizationScopes(value);
diff --git a/src/server/identity/mcp-authorization-ticket.ts b/src/server/identity/mcp-authorization-ticket.ts
index aa89fca..47266c6 100644
--- a/src/server/identity/mcp-authorization-ticket.ts
+++ b/src/server/identity/mcp-authorization-ticket.ts
@@ -1,5 +1,7 @@
 import {
+  MCP_AUTHORIZATION_SCOPE_BUNDLE_VERSION,
   isCanonicalMcpAuthorizationScopes,
+  isCurrentMcpAuthorizationScopeBundle,
   type McpAuthorizationScope,
 } from './mcp-authorization-scopes';
 import { hmacDigest, timingSafeEqual } from './tokens';
@@ -16,6 +18,7 @@ export interface McpAuthorizationTicketPayload {
   oauthClientId: string;
   oauthClientLabel: string;
   scopes: McpAuthorizationScope[];
+  scopeBundleVersion: number;
   issuedAt: number;
   expiresAt: number;
 }
@@ -60,11 +63,14 @@ function isPayload(value: unknown): value is McpAuthorizationTicketPayload {
     'oauthClientId',
     'oauthClientLabel',
     'scopes',
+    'scopeBundleVersion',
   ].sort().join(',')) return false;
   return boundedString(record.authorizationRequestId, 200)
     && boundedString(record.oauthClientId, 255)
     && boundedString(record.oauthClientLabel, 120)
     && isCanonicalMcpAuthorizationScopes(record.scopes)
+    && isCurrentMcpAuthorizationScopeBundle(record.scopes)
+    && record.scopeBundleVersion === MCP_AUTHORIZATION_SCOPE_BUNDLE_VERSION
     && Number.isSafeInteger(record.issuedAt)
     && Number.isSafeInteger(record.expiresAt)
     && Number(record.issuedAt) >= 0
@@ -78,6 +84,7 @@ function canonicalPayload(payload: McpAuthorizationTicketPayload): string {
     oauthClientId: payload.oauthClientId,
     oauthClientLabel: payload.oauthClientLabel,
     scopes: payload.scopes,
+    scopeBundleVersion: payload.scopeBundleVersion,
     issuedAt: payload.issuedAt,
     expiresAt: payload.expiresAt,
   });