Value Statement

ACM Search server created in  ACM-23306 exposes tools which require SQL to be passed on arguments. We should use a header flag to enable them (will be suppressed by default) because that is safer security wise (no risk of SQL injection etc). It can be used only when we use it internally. Of course we can do so, because we have created other tools that can be used ACM-25747

Definition of Done for Engineering Story Owner (Checklist)

• The MCP Server can be deployed on a Hub cluster and queried from OLS and this tools will be suppressed
• The MCP Server can be deployed on a Hub cluster and queried from claude code and these tools can be enabled
• Code is checked into a repo
• The minimal prompt required for OLS has been developed as well.

Development Complete

• The code is complete.
• Functionality is working.
• Any required downstream Docker file changes are made.

Tests Automated

• [ ] Unit/function tests have been automated and incorporated into the
  build.
• [ ] 100% automated unit/function test coverage for new or changed APIs.

Secure Design

• [ ] Security has been assessed and incorporated into your threat model.

Multidisciplinary Teams Readiness

• [ ] Create an informative documentation issue using the [Customer
  Portal_doc_issue template](
  https://github.com/stolostron/backlog/issues/new?assignees=&labels=squad%3Adoc&template=doc_issue.md&title=),
  and ensure doc acceptance criteria is met. Link the development issue to
  the doc issue.
• [ ] Provide input to the QE team, and ensure QE acceptance criteria
  (established between story owner and QE focal) are met.

Support Readiness

• [ ] The must-gather script has been updated.