Check a denied or missing MCP tool
Check the connection grant, organization policy and project access for customer Cloud read tools.
If a customer Cloud MCP call returns HTTP 403, or a read tool is missing, check the exact tool and the current connection.
Check the tool and access
Refresh the client's tool list and check the exact tool name. Use the tools discovered for this connection.
Check the account and organization used for consent, then confirm your current access to the intended project.
Ask your organization administrator to check the current policy for that exact tool. A connection grant and organization permission are both required.
After the required tool is allowed, reconnect and review fresh consent for it. Refresh the tool list and verify a small saved-file read in a project you may access.
Review fresh consent
New tool names need fresh consent, including new tools within an existing permission. Refreshing an old token does not add them.
Use the project list returned by your connection to choose the target project. Reconnection alone does not restore project access or enable a tool disabled by policy.