The built-in backend guard's principal answers errScopeUnavailable, not a nil principal, when an admin personal token's stored scopes all fail to resolve (a scope's plugin was removed). MCPDispatch passes it through and dispatch maps it to the fixed tool error "pier: the token's scopes no longer grant this route" instead of claiming the administrator's account is unknown or deactivated; the listing check still treats it as a refusal, not as a failed check.
13 KiB
13 KiB