diff --git a/Dockerfile b/Dockerfile
index 23e8b7c..1320aa4 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,6 @@
 # Base runs as USER authorizer (uid 1000). For SQLite, ensure mounted /data is writable by that user.
 # Pinned to the 2.4.0 release candidate because it is the first published
-# image with the current CLI flag surface (--url, --oauth2-1-strict,
+# image with the current CLI flag surface (--url, --mcp-enabled, --oauth2-1-strict,
 # --enable-org-discovery, --disable-totp-login/-webauthn-mfa/-email-otp/
 # -sms-otp/-mfa). Re-pin to the stable 2.4.0 tag once it ships.
 FROM quay.io/authorizer/authorizer:2.4.0-rc.18
@@ -54,6 +54,7 @@ CMD ["exec ./authorizer \\\n\
   --grpc-insecure=\"${GRPC_INSECURE:-true}\" \\\n\
   --grpc-tls-cert=\"${GRPC_TLS_CERT}\" \\\n\
   --grpc-tls-key=\"${GRPC_TLS_KEY}\" \\\n\
+  --mcp-enabled=\"${MCP_ENABLED:-false}\" \\\n\
   --rate-limit-rps=\"${RATE_LIMIT_RPS:-30}\" \\\n\
   --rate-limit-burst=\"${RATE_LIMIT_BURST:-20}\" \\\n\
   --rate-limit-fail-closed=\"${RATE_LIMIT_FAIL_CLOSED:-false}\" \\\n\
diff --git a/render.yaml b/render.yaml
index be90741..870f347 100644
--- a/render.yaml
+++ b/render.yaml
@@ -31,6 +31,13 @@ services:
         generateValue: true
       - key: JWT_TYPE
         value: HS256
+      - key: MCP_ENABLED
+        # Serve the MCP tool surface over HTTP at POST <AUTHORIZER_URL>/mcp as
+        # an OAuth 2.1 resource server for AI agents. REQUIRES AUTHORIZER_URL:
+        # the audience every MCP token is checked against is derived from it, so
+        # the server exits at boot if this is true without one. Off by default —
+        # it is a new internet-facing authenticated surface.
+        value: "false"
       - key: AUTHORIZER_URL
         # Canonical/trusted base URL of this deployment (e.g. your Render
         # service URL). When set, it is the only source used to build