What
New helpers sort an unavailable MCP-backed tool into one of eleven reasons: blocked by policy, blocked by the org, denied, disabled, not configured, reconnecting, needs authentication, disconnected, authentication just completed, not offered, or withdrawn. Two predicates separate permanent blockage from states that may clear on their own.
Details
- Per-server tool permission entries set to "blocked" are detected as their own case.
- Authentication-related tools are recognised by the suffix of their name.
- Which surfaces display these reasons is decided elsewhere in the build.
Evidence
"complete_authentication"
Strings lifted out of the shipped bundle, so the claim above can be checked against them.