Looks like MCP calls are still coming from dynamic IPs, not your allowlisted range, so a different egress path is likely being used. Routing them through your own backend should fix it by forcing a fixed IP. Are your MCP requests running server-side or client-side? @James