Summary
In the MCP settings page (Access control > Teams and user groups), the “Choose teams” panel does not indicate which teams already have MCP access. Admins cannot see the current state or audit it without opening and checking each team individually.
Current behavior
- The “Choose teams” panel lists all teams with empty checkboxes, even when teams have already been added.
- There is no filter, sort, or separate list of enabled teams, and no export.
- With hundreds of teams in the list, an admin cannot verify the current configuration or tell what “Add teams” will change.
Requested behavior
- Show already-enabled teams as ticked in the “Choose teams” panel.
- Add a view or filter for “Selected / Enabled teams” on the Access control page.
- Allow removing teams directly from that view.
- Support export of the enabled-teams list (CSV) for audit and review.
Business justification
- Governance and security: We restrict MCP to approved teams, and we need to verify that scope at any time.
- Risk of error: Without visibility, admins may unknowingly add duplicates, miss teams, or leave MCP enabled for teams that should not have it.
- Audit readiness: Reviewers need evidence of which teams have MCP access.
Impact: Medium to high. This is a basic visibility gap in an access-control feature.
