[mfbx9da4]

Fixes DNO-1456

Why

An agent's gateway (/agent-mcp/{agentID}) listed every public MCP server in the organization, including ones nobody selected for the agent. The agent identity wizard says the agent "can reach nothing else".

Discussion

From the team thread:

• "Public" only skips Speakeasy sign-in. Most public servers need per-user upstream OAuth, so an agent can call one only with its own attached connection. Listing ungranted ones showed tools it could not use.
• The selection is stored as RBAC mcp:connect grants. So a key can now exclude a server with no upstream auth, which anyone can call. Slightly counterintuitive, but it matches the wizard.
• Open question: how people keep an agent's selection current after setup.

What changed

Before: Public servers skipped the mcp:connect check on every gateway.

After:

• admitMetaMembers takes publicNeedsGrant. Only the agent gateway sets it, so organization and stored gateways still include public servers.
• An ungranted public server is gone from list_servers and returns "unknown server" on drill-down.
• The admission shadow records each member's real visibility.
• Test fixtures add granted and ungranted public servers.

Agents that used an ungranted public server lose it.

🤖 Generated with Claude Code

[changeset-bot]

🦋 Changeset detected

Latest commit: e9d742f

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
server	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[linear-code]

DNO-1456

[cubic-dev-ai]

No issues found across 4 files

<sub>This PR changes authentication, authorization, or input validation. Ultrareviews find 2.4x more serious bugs than standard reviews. Comment @cubic-dev-ai ultrareview to run one.

View guided diff | Turn on auto-fix | Re-trigger cubic</sub>