X_ADMIN_TOOL_FORBIDDEN
Means
an admin MCP tool was called without permission
Typical cause
agent acting beyond its user
Fix
nothing to fix — the policy is correct
an admin MCP tool was called without permission
agent acting beyond its user
nothing to fix — the policy is correct