feat: add MCP server filter to MCP sessions sidebar

[Pratham-Mishra04]

Summary

Adds an "MCP Server" filter section to the MCP Sessions filter sidebar, allowing users to narrow sessions down to one or more specific MCP clients. The mcp_client_id filter is now fully integrated into the shared filter state rather than being managed separately through URL state.

Changes

• Added mcp_client_id to the MCPSessionFilters interface and EMPTY_FILTERS, bringing it in line with the other filter fields (kind, status, auth_mode) so it participates in filter count, reset, and URL sync correctly.
• Fixed a bug where mcp_client_id was being read directly from urlState for the query instead of from the unified filters object, causing it to be out of sync with the rest of the filter pipeline.
• Added MCPClientFilterSection to the filter sidebar — a collapsible section with a searchable checkbox list of MCP clients. The list is fetched lazily (only when the section is opened or a selection already exists) and scoped to per_user_oauth and/or per_user_headers auth types, narrowed automatically based on the active "Type" filter.
• Added SearchableCheckboxList, a reusable component combining a debounced search input with checkbox rows, supporting server-side search via an onSearch callback and a loading indicator.
• Added useAutoFocusOnOpen, a hook that focuses the search input when the section is explicitly opened by the user, skipping the initial mount to avoid stealing focus on page load.
• Extended FilterSection with an onOpenChange callback so parent components can react to collapse/expand events.
• Updated filtersActive and activeFilterCount to include mcp_client_id, ensuring the reset button and active filter badge reflect this filter correctly.

Type of change

• Bug fix
• Feature
• Refactor
• Documentation
• Chore/CI

Affected areas

• Core (Go)
• Transports (HTTP)
• Providers/Integrations
• Plugins
• UI (React)
• Docs

How to test

1. Navigate to the MCP Sessions page.
2. Open the filter sidebar and expand the "MCP Server" section.
3. Verify the search input focuses automatically on open.
4. Search for an MCP client by name and confirm results are filtered.
5. Select one or more clients and confirm the session list updates accordingly.
6. Verify the active filter count badge increments for each selected client.
7. Verify the "Type" filter (OAuth/Headers) narrows the available MCP clients in the list.
8. Reset filters and confirm mcp_client_id is cleared along with the other filters.
9. Reload the page with an mcp_client_id in the URL and confirm the section opens pre-populated.

cd ui
pnpm i || npm i
pnpm test || npm test
pnpm build || npm run build

Screenshots/Recordings

Add before/after screenshots of the filter sidebar showing the new "MCP Server" section.

Breaking changes

• Yes
• No

Related issues

Security considerations

No new auth or PII concerns. The MCP client list query is scoped to per-user auth types and respects existing access controls.

Checklist

• I read docs/contributing/README.md and followed the guidelines
• I added/updated tests where appropriate
• I updated documentation where needed
• I verified builds succeed (Go and UI)
• I verified the CI pipeline passes locally if applicable

[Pratham-Mishra04]

• docs: add token_exchange auth type, per-client TLS/sync/timeout fields, tool list persistence, and reconnect per-call clarifications to MCP docs and OpenAPI spec #5977
• docs: rename MCP states to healthy/unstable, add degraded and needs_session_stickiness, and expand 409/OAuth flow descriptions #5976
• docs: add connections page with full state table, connection-mode matrix, and per-auth-type lifecycle; rename connected→healthy, disconnected→unstable #5975
• docs: add needs_session_stickiness field, session stickiness behavior, and per-call vs sticky connection docs #5974
• fix: gate verify-headers replay guard on pre-request pending_verification state, project needs_reauth over unstable, and block premature shared-OAuth completion #5973
• fix: defer SetClientTools until after DB persistence to prevent runtime/DB state drift #5972
• feat: add tools-change callback funnel with content-hash gating and targeted DB persist for all MCP discovery paths #5971
• fix: enable per-call tool discovery for shared oauth/headers/none MCP clients and rename UpdateClientConnection to UpdateClientCredentials #5970
• feat: add virtual key and user identity filters to OAuth2 grants sidebar #5969
• feat: add virtual_key_id and user_id multi-select filters to MCP sessions #5921
• feat: add MCP state-change callback and degraded cluster-aggregate state with per-instance drill-down #5920
• feat: add compare-and-swap guard on refresh_token to RefreshOauthTokenFieldsIfActive #5919
• feat: add MCP server filter to MCP sessions sidebar #5918 👈 (View in Graphite)
• feat: replace OAuth grants filter bar with collapsible sidebar #5917
• feat: replace MCP sessions inline filter bar with collapsible sidebar #5916
• feat: add needs_session_stickiness to MCP HTTP clients for per-call vs persistent connection control #5915
• refactor: replace ClientHealthMonitor+ClientToolSyncer with unified ClientConnectionChecker and rename states connected→healthy, disconnected→unstable #5914
• refactor: extract shared SectionHeader, replace accordions with bordered sections in MCP client form #5913
• refactor: extract TLS, OAuth, and token exchange fields into shared components and reorganize MCP client sheet into tabs #5912
• feat: add tiered retry configs for MCP connect, per-call connect, and tool-call paths #5911
• refactor: replace OAuth2 token-expired text matching with errors.Is and preserve last-known tool map on disconnect #5910
• feat: add -jwt flag for JWT bearer auth to mcp-test-client #5909
• refactor: extract shared MCP authorizer dialog chrome into authorizerUi.tsx #5908
• feat: add shouldRun guard to skills orphan cleanup worker for multi-instance deployments #5813
• feat: add SetShouldRefreshGate to gate OAuth token sweep ticks #5812
• feat: add stack-absorb Claude skill for manual Graphite stack change distribution #5786 : 1 other dependent PR (#5787 )
• docs+feat: expand MCP connection states into reference table and add tooltip to State column header #5785
• feat: add token-exchange demo MCP server for testing against real identity providers #5730
• docs: add token exchange (on-behalf-of) MCP auth documentation #5729
• docs: document make-before-break reconnection and shared-client retry behavior #5728
• feat: make-before-break reconnect for HTTP/SSE MCP clients with generation-guarded stale write protection #5727
• feat: retry shared-connection MCP auth failures after bounded reconnect wait with concurrent dedup #5726
• feat: add ui for token_exchange (On-Behalf-Of) auth type MCP clients #5725
• feat: add token_exchange MCP auth type with delegated identity-provider token exchange #5724
• docs: add needs_reauth state, reauthorize endpoint, per-client tool sync/timeout, allowed_extra_headers, and OAuth config rotation to MCP OpenAPI spec #5723
• docs: add OAuth reauthorization, admin discovery credentials, auth failure recovery, and credential rotation docs #5722
• docs: add env./vault. reference support for OAuth client_id/client_secret and update OpenAPI EnvVar schema #4860
• docs: add pending_verification state and initiate-verification / verify-headers MCP client endpoints to OpenAPI spec #4858
• docs: add config.json bootstrap support for auth-aware MCP clients (oauth, per_user_oauth, per_user_headers) #3876
• feat: use *SecretVar for OAuth2Config credentials to preserve env./vault. #4859
• feat: add LRU credential cache to MCP headers provider with scoped eviction #5721
• feat: add in-memory LRU cache for per-user MCP OAuth access tokens with targeted eviction #5720
• feat: add generation-guarded LRU cache with single-flight fills and secondary index #5719
• feat: add per-user OAuth/headers admin discovery credential repair flow with registry needs_reauth projection #5718
• feat: retain admin bootstrap credential for periodic per-user MCP tool discovery refresh #5717
• feat: add MCPAuthModeAdmin + reauthorize endpoint for shared OAuth MCP clients #5716
• feat: replace OAuth config pin-and-warn with in-place rotation and needs_reauth cascade #5715
• feat: add needs_reauth state and replace per-user connection badge with sessions link #5714
• feat: add auth-failure retry with forced credential refresh for MCP tool calls #5713
• feat: add NeedsReauth MCP connection state for dead OAuth2 credentials #5712
• refactor: make GetExpiringOauthTokens auth modes caller-configurable via AuthModes field #5711
• refactor: unify shared and per-user OAuth refresh under a single RefreshAccessToken(tokenID) path, dropping oauth_configs.token_id FK shortcut #5710
• refactor: migrate OAuth flow state/PKCE fields from oauth_configs to new mcp_oauth_flows table #5709
• refactor: merge oauth_tokens/oauth_user_tokens into unified mcp_oauth_tokens table #5708
• feat: add per_user_headers bootstrap verification flow via submitHandler abstraction #3875
• feat: add verify-headers endpoint and pending_verification state for per-user-headers MCP clients #3874
• fix: extend pending_verification bootstrap path to cover per_user_oauth clients #3873
• feat: add OAuth authorization flow for config.json-bootstrapped pending_verification MCP clients #3872
• feat: add pending_verification state and initiate-verification endpoint for config.json shared-OAuth MCP clients #3871
• docs: document flow mode access rules, temp token toggle, and per-server tool manager overrides #3870 : 1 other dependent PR (#3882 )
• dev

This stack of pull requests is managed by Graphite. Learn more about stacking.

[coderabbitai]

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@ui/app/workspace/mcp-sessions/views/mcpSessionsFilterSidebar.tsx`:
- Around line 394-416: Update the useGetMCPClientsQuery usage in the MCP filter
sidebar to read its isError state and pass that failure state to
SearchableCheckboxList using the component’s existing error and retry APIs.
Ensure failed requests render an error message with a retry action instead of
the empty “No results” state, while preserving the current loading, empty, and
successful client-list behavior.
- Around line 386-411: The MCP client filter UI must keep every ID in
filters.mcp_client_id visible and removable even when authType, searchQuery, or
the offset-0 pagination excludes it. Update the mcpClients construction in the
MCP client filter section to merge selected clients into the fetched results,
resolving their labels as needed, while preserving the existing query results
and avoiding duplicates.

🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 310c035f-d94c-42b2-9973-54b08d6b827f

📥 Commits

Reviewing files that changed from the base of the PR and between ee6329e and e77affc.

📒 Files selected for processing (2)

• ui/app/workspace/mcp-sessions/page.tsx
• ui/app/workspace/mcp-sessions/views/mcpSessionsFilterSidebar.tsx

[coderabbitai]

Note

GitHub couldn't provide a complete incremental comparison for this pull request, so CodeRabbit is performing a full review instead. This review may take a little longer.

[Pratham-Mishra04]

Merge activity

• Aug 8, 10:33 AM UTC: A user started a stack merge that includes this pull request via Graphite.
• Aug 8, 11:22 AM UTC: Graphite rebased this pull request as part of a merge.
• Aug 8, 11:23 AM UTC: @Pratham-Mishra04 merged this pull request with Graphite.

The base branch was changed.