Highlights

• Capability toggles in the host UI. The MCPB extension's settings panel now exposes Agency, Environment, a boolean toggle per capability group (Records — Read, Records — Write, Inspections — Read, …, Reports, Admin Escape Hatch), and the Allow Write Tools / Allow Real-Money Payments master kill-switches. No more dropping to a terminal to edit capabilities.yaml for a one-line change.
• MCPB UI is authoritative. A new apply_env_overrides layer in capabilities.py overlays these env vars on top of any loaded capabilities.yaml. CLI users who don't pass env vars see no change.
• Official Accela logo as the extension icon.

Added

• ~20 new user_config fields in manifest.json covering agency, environment, every non-always-on capability group, and the two write kill-switches.
• apply_env_overrides(config) in capabilities.py — reads ACCELA_AGENCY, ACCELA_ENVIRONMENT, ACCELA_GROUP_<NAME>, ACCELA_WRITES_ENABLED, and ACCELA_PAYMENTS_REAL_MONEY_ALLOWED and re-validates the merged config so cross-field rules (kill-switch, admin allowlist, payments friction) re-fire.
• env_group_var(group_id) helper that produces the canonical env-var name (records_write → ACCELA_GROUP_RECORDS_WRITE).
• accela_login now falls back to ACCELA_AGENCY / ACCELA_ENVIRONMENT env vars when neither an explicit arg nor a loaded config provides them — so MCPB users don't have to repeat values they already entered in the host UI when calling the tool from chat.
• 12 new tests covering the override layer, kill-switch validation under overrides, blank-string handling, and the auth env-var fallback.

Changed

• Friendly Title-Case labels on every existing user_config field (App ID, App Secret, OAuth Redirect URI, Encryption Key).
• bundle/icon.png replaced with the official Accela logomark (256×256). Used with permission.

Upgrading

• Claude Desktop: download accela-mcp-0.4.0.mcpb below and drag onto the Extensions panel — it replaces 0.3.1 in place. Existing settings (App ID, Secret, Redirect URI, encryption key) carry over; the new toggle defaults match the previous behavior so nothing turns on automatically.
• CLI: uv tool upgrade accela-mcp. No capabilities.yaml migration required.

How the new toggles interact with capabilities.yaml

If you set ACCELA_GROUP_REPORTS=true in the host UI, that group is enabled even if the YAML doesn't list it. If the YAML lists records_write but the UI flips Records — Write off, the group is dropped. The kill-switch validators still apply: enabling a *_write group without Allow Write Tools fails loud at startup with a clear error.