Cloud sessions could withhold the older device shell tool, but no session on this build does.
The disallowed-tools request exists but the flag requesting it is compiled to false.
What's wrong with this entry?
Cloud and teleport session creation can send a disallowed-tools list naming mcp__remote-devices__device_bash, the older tool for running shell commands on a paired device. The flag that requests it comes from a helper compiled to return false, so no session on this build withholds it.
mcp__remote-devices__device_bash
Strings lifted out of the shipped bundle, so the claim above can be checked against them.