[waleedlatif1]

Summary

• MCP server edit modal let write-permission users change the server URL, which the server always refuses for non-admins (allowDestinationChange is admin-only). The URL field is now disabled with a hint for non-admins on edit; creating a server is unchanged (write)
• Table detail page Rename was enabled for read-only users while Delete beside it was gated; tables.update requires write. Rename now disables like the tables list and files do

Type of Change

• Bug fix

Testing

• bun run lint, check:source-conventions, check:comment-hygiene, pre-push type-check
• Verified both server policies before gating (PATCH api/mcp/servers/[id], tables.update write operation)

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing (new tests pass the test-audit authoring gate)
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
docs	Skipped		Nov 3, 2026 2:42am UTC

[greptile-apps]

Confidence Score: 5/5

[Medium impact] This PR appears safe to merge; both controls match the server’s permission rules.

Summary

This PR makes two controls match the server’s permission rules:

• MCP server editors can change URLs only when they are workspace admins.
• Table detail menus enable Rename only for users with edit access.

No actionable issues were found. Runtime and visual checks were not run because dependencies are absent from both the repository root and apps/sim.

_{Reviews (1) · Last reviewed commit: "fix(ui): disable MCP URL edits and table..." · Reviewed by Greptile}

[cubic-dev-ai]

No issues found across 3 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

_{Turn on auto-fix | Re-trigger cubic}