DRU-673 -- Give the operator's chat the enabled MCP servers

[czpython]

An operator's chat now reaches every MCP server that is enabled in Settings → MCP servers, the same servers a workflow agent reaches. Before, the chat agent had only the Druks server.

• Chat resolves the enabled servers through Workspace.get_all_mcp_servers for an operator account. Their secret refs join the chat sandbox's refs, so enabling or disabling a server gives the next turn a new sandbox.
• The bridge's start request carries the servers. The bridge adds them to the ACP session's mcpServers beside druks and fills each ${VAR} header from the sandbox environment.
• McpServer.get_request_headers() builds the headers with ${VAR} placeholders for secrets. The Claude and Pi harnesses and chat use it.
• Chat leaves out a server that cannot authenticate for the operator, such as an OAuth server they have not connected: get_all_mcp_servers(..., skip_unauthenticated=True) filters on the server's has_token. Workflows still fail loudly on such a server.
• A Bot's users and admins still reach only the Druks server.

[mintlify]

Preview deployment for your docs. Learn more about Mintlify Previews.

Project	Status	Preview	Updated
druks	🟢 Ready	View Preview	Sep 29, 2026, 1:49 PM

💡 Tip: Enable Automations to automatically generate PRs for you.