andrewyng--aisuite
6c2fb38d77
A descriptor can carry a vendor-hosted MCP server URL (mcp_url); its curated tools are ConnectorToolDefs named mcp__<connector>__<vendor tool>, so Access bullets, per-tool toggles, session gating, and read/write approval all ride the existing machinery. Connect seeds the server config (include_tools = the pin, re-derived at session build so stale config can only shrink the surface) and runs the local DCR OAuth flow — no cloud sign-in, no vendor app, no broker. Connector-backed servers are hidden from the Settings MCP tab; disconnect forgets tokens + registration + config. jira keeps its manual token path (the profile mode picks which tool set is live); monday.com is new and one-click only, with a custom brand glyph. asana's pins ship dormant — their V2 server rejects dynamic client registration, so its one-click waits on a broker-routed callback. Also: catalog typeahead aliases for jira/monday/asana.