Allow MCP keys to automatically access all tools

[ruibaby]

What changed

• Add an opt-in wildcard scope that allows an MCP access key to use all currently available and future tools.
• Apply the same authorization predicate to tool discovery and invocation.
• Hide individual tool selection while automatic access is enabled and show a persistent warning for third-party and destructive tools.
• Identify automatically authorized keys in the access key list.

Security

Automatic access is disabled by default, so existing and newly created keys retain explicit tool scopes unless the option is enabled. The UI warns that future tools, including contributed and destructive tools, will be authorized without additional confirmation.

Tests

• ./gradlew check --no-daemon
• corepack pnpm check
• git diff --check

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-04T09:48:34.752190Z	5523f95	New commits

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 5523f953c2

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".