When adding new MCP tools to mcp_controller.rb, you MUST also add them to:
1. `/rails/mcp-bridge/src/tools/index.ts` - Register the tool with proper name, description, inputSchema, and execute handler
2. `/rails/config/tinker/mcp_permissions.yml` - Add to allowed list for each agent role that needs it
This has been forgotten multiple times:
- Ticket #94/95: get_terminal_logs, list_agent_sessions not exposed
- Previous instances: similar pattern
CHECKLIST after adding MCP tool:
[ ] Added handler to mcp_controller.rb
[ ] Registered in mcp-bridge/src/tools/index.ts
[ ] Added permissions to mcp_permissions.yml
[ ] Tested the tool is actually callable