diff --git a/Gemfile b/Gemfile
index 9a2e4d3..ca8c162 100644
--- a/Gemfile
+++ b/Gemfile
@@ -82,7 +82,7 @@ gem "doorkeeper", ">= 5.9.1", "< 6.0"
 
 # Official MCP Ruby SDK, used to implement the remote MCP server. Still 0.x and
 # changing shape release to release; pin to the 0.23.x patch line.
-gem "mcp", "~> 0.23.0"
+gem "mcp", "~> 0.24.0"
 
 # Trust Cloudflare's IP ranges so remote_ip (and the per-IP rate limits) see
 # real client addresses behind the CF proxy. Production-only: the gem fetches
diff --git a/Gemfile.lock b/Gemfile.lock
index 1b08e1e..c50129b 100644
--- a/Gemfile.lock
+++ b/Gemfile.lock
@@ -176,7 +176,7 @@ GEM
       net-smtp
     marcel (1.2.1)
     matrix (0.4.3)
-    mcp (0.23.0)
+    mcp (0.24.0)
       json_schemer (>= 2.4)
     meta-tags (2.23.0)
       actionpack (>= 6.0.0)
@@ -411,7 +411,7 @@ DEPENDENCIES
   doorkeeper (>= 5.9.1, < 6.0)
   jsbundling-rails
   kamal
-  mcp (~> 0.23.0)
+  mcp (~> 0.24.0)
   meta-tags (~> 2.23)
   pg (~> 1.1)
   propshaft
@@ -492,7 +492,7 @@ CHECKSUMS
   mail (2.9.0) sha256=6fa6673ecd71c60c2d996260f9ee3dd387d4673b8169b502134659ece6d34941
   marcel (1.2.1) sha256=1678e9360e32f9eafa917c80029e2f6d10b2715c66a4b87b6d0da9b9cd1f859f
   matrix (0.4.3) sha256=a0d5ab7ddcc1973ff690ab361b67f359acbb16958d1dc072b8b956a286564c5b
-  mcp (0.23.0) sha256=3667ee167384778cd81721799dc8060f4a792f63b23ba0804005afd29d7259bc
+  mcp (0.24.0) sha256=ef13596f13aad7720940a3fd6ab6f4f5e618d0b0fdb587549a90c22579626500
   meta-tags (2.23.0) sha256=ffe78b5bee398de4ff5ac3316f5a786049538a651643b8476def06c3acc762c1
   mini_mime (1.1.5) sha256=8681b7e2e4215f2a159f9400b5816d85e9d8c6c6b491e96a12797e798f8bccef
   minitest (6.0.6) sha256=153ea36d1d987a62942382b61075745042a2b3123b1cd48f4c3675af9cc7d6f1