# X_ADMIN_TOOL_FORBIDDEN

## Means

an admin MCP tool was called without permission

## Typical cause

agent acting beyond its user

## Fix

nothing to fix — the policy is correct

[Admin and manifest](/error-codes#admin-and-manifest)