MCP tool lists are capped per server, and file-grant tools get special handling

What

MCP servers are outside programs that give Claude Code extra tools. This release changes how Claude Code lists those tools and how it calls some of them:

• Per-server tool limit: when a server lists more tools than allowed, Claude Code counts how many it skipped and logs a warning for that server, recording the reason tool_listing_over_limit with a skippedCount. Before, every tool a server returned was listed.
• File-grant tools: a tool whose _meta field (extra details the server attaches to a tool) carries a particular key now gets a special input wrapper. The wrapper calls the server directly and returns the server's structuredContent, which is data in a fixed shape.
• XML-tag stripping: calls to such a tool check hasFileGrants. When file grants exist, the call skips the trailing-XML-tag stripping that sits behind the tengu_mcp_strip_trailing_xml_tags switch. Before, that stripping was always applied. The switch still defaults to off in the code.
• Per-message tool state: tool-call results can now also record tool state for each message.

Why

If you connect a server with a very large tool list, some of its tools may no longer be listed, and the warning in the logs tells you how many were skipped. The _meta file-grant handling looks like groundwork for MCP tools that work with files, and those tools now have their results passed back without the trailing tags being trimmed.