• the initial chat prompt identifies a configured pending MCP server so the model can look for its tools during the same turn
• the initial chat tool allowlist enables ToolSearch and the pending server's wildcard tools during the same turn

Changed code: delegate-tool-scoping.ts.

• a rep’s research request has WebSearch and WebFetch available so the agent can return a result instead of failing
• a rep’s research request keeps each connected research server reachable instead of failing because its tools are omitted

• the bound turn's allowed-tool wildcards include the granted server but not an ungranted user server
• the bound turn's connected-server prompt line names only the granted MCP server
• the bound turn's server-derived surfaces stay aligned with the same narrowed grant

Changed code: delegate-tool-scoping.ts.

• ToolSearch is available for connected MCP servers while Cedar, native, and subagent tools remain available
• Cedar, native, and subagent tools remain available when no user MCP servers are connected

Changed code: delegate-tool-scoping.ts.