If your agent called a tool you thought was off, one of a few things is usually happening. Here is how tool selection really works and how to block a tool for good.
Did you click Save selection?
Unchecking a tool only changes the list on screen. Until you click Save selection, the agent still uses the set you saved last. Reopen the card, confirm the boxes match what you want, and save.
Unchecking every tool turns them all back on
This is the most common surprise. If you uncheck all tools and save, Mando reads that as no filter and lets the agent use every tool. To block one tool, leave at least one other tool checked. To block all tools, disconnect the server instead.
The Enable MCP switch does not block tools
Turning off Enable MCP hides the card but leaves the connection active, so the agent can still call tools. Only a saved selection with at least one tool checked, or disconnecting the server, changes what the agent can do.
Confirm the current allowed set
- Open the connected MCP card.
- Read the header: Tools the AI can use, with the allowed count of the total.
- The checked tools are the live set applied on the next message.