Org admins can now set a per-tool permission ceiling via a new org_max_permission field on MCP server tool policies. When set to "ask", it forces a user confirmation prompt even in auto mode (the isOrgAskCeiling gate).
Evidence
New Zod field (search for "Org admin's per-tool ceiling. Drives the auto-mode isOrgAskCeiling gate")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.