diff --git a/server/src/security/board-key-route-inventory.ts b/server/src/security/board-key-route-inventory.ts
index dd822ac651..5fa2f666a0 100644
--- a/server/src/security/board-key-route-inventory.ts
+++ b/server/src/security/board-key-route-inventory.ts
@@ -258,6 +258,7 @@ export const BOARD_KEY_ROUTE_INVENTORY: readonly string[] = [
   "board_key_denied | deny | /api/invites/{*path}",
   "board_key_denied | deny | /api/join-requests/{*path}",
   "board_key_denied | deny | /api/llms/{*path}",
+  "board_key_denied | deny | /api/mcp/{*path}",
   "board_key_denied | deny | /api/openapi.json/{*path}",
   "board_key_denied | deny | /api/pipelines/{*path}",
   "board_key_denied | deny | /api/plugins/{*path}",
diff --git a/server/src/security/board-key-route-registry.ts b/server/src/security/board-key-route-registry.ts
index 552c7c1ad3..273b87df2c 100644
--- a/server/src/security/board-key-route-registry.ts
+++ b/server/src/security/board-key-route-registry.ts
@@ -381,6 +381,7 @@ export function lookupBoardKeyRoute(methodInput: string, rawPath: string): Board
     "get-session",
     "sidebar-preferences",
     "llms",
+    "mcp",
     "cloud",
     "stacks",
     "smoke-lab",