mcpServers: in agent frontmatter is metadata. Claude Code ignores it for plugin agents; the actual capability grant is the tools: list. Body prose is what the agent reads about itself, so a prose-only mention tells the agent it can fetch library docs when it cannot.
What the body prose said
What the frontmatter granted
Counterintuitive and worth showing:
tools/list returns HTTP 200 for any auth state against https://mcp.context7.com/mcp. So "it connected" never proves the key is in use. Only tools/call discriminates. Byte sizes below were measured on one query-docs call.
An earlier revision of this change inserted the grant into the
keywords: list instead of tools:. That is a completely silent no-op: the file mentions the tools, the agent still cannot call them. tests/agents/test-mcp-declared-vs-granted.sh caught it. Pick a key and a spelling to run the gate's two assertions.