mateo-berri 3c2138f037 fix(mcp): count agent toolsets in the agent MCP ceiling and tool grants ... An agent's object_permission.mcp_toolsets could be persisted through the new edit form and PATCH /v1/agents but never reached the request-time checks: _get_allowed_mcp_servers_for_agent read only mcp_servers and mcp_access_groups, so an agent granted a toolset alone resolved to [] and placed no ceiling on its keys, and _get_agent_tool_permissions_for_server ignored the tools those toolsets grant. Both helpers now resolve toolsets through the shared _toolset_tool_permissions / _toolset_tools_for_server helpers the key, team, and org levels already use, and a declared toolset that resolves to nothing raises UnloadableEntitlementError so the resolver denies instead of reading the agent as unrestricted		2026-09-01 19:12:24 -07:00
..
mcp_server	fix(mcp): count agent toolsets in the agent MCP ceiling and tool grants	2026-09-01 19:12:24 -07:00