diff --git a/charts/retool/values.yaml b/charts/retool/values.yaml
index 322f0d8..91e851d 100644
--- a/charts/retool/values.yaml
+++ b/charts/retool/values.yaml
@@ -731,8 +731,21 @@ mcp:
       annotations: {}
       labels: {}
 
-  # Public MCP routes, rendered before the main Retool route. External ingress
-  # must preserve this order and target mapping:
+  # Retool 4.0.7 and later support a simplified ingress setup: route all public
+  # paths, including /mcp and /.well-known, to the main Retool Service on port
+  # 3000. The main backend must also be able to relay /mcp to the in-cluster MCP
+  # Service. Set its internal URL through the top-level env block:
+  #
+  #   env:
+  #     MCP_SERVICE_INGRESS_DOMAIN: http://<fullname>-mcp:4010
+  #
+  # With that backend setting, omit or disable the MCP-specific ingress or
+  # HTTPRoute rules below and keep only the normal "/" route to
+  # <fullname>:3000. Replace <fullname> with this chart release's full name.
+  #
+  # Retool versions before 4.0.7 require the explicit MCP routes below,
+  # rendered before the main Retool route. External ingress must preserve this
+  # order and target mapping:
   #   Exact  /.well-known/oauth-authorization-server -> <fullname>-backend-internal:3001
   #   Exact  /.well-known/oauth-protected-resource    -> <fullname>-mcp:4010
   #   Prefix /mcp                                     -> <fullname>-mcp:4010
diff --git a/values.yaml b/values.yaml
index 322f0d8..91e851d 100644
--- a/values.yaml
+++ b/values.yaml
@@ -731,8 +731,21 @@ mcp:
       annotations: {}
       labels: {}
 
-  # Public MCP routes, rendered before the main Retool route. External ingress
-  # must preserve this order and target mapping:
+  # Retool 4.0.7 and later support a simplified ingress setup: route all public
+  # paths, including /mcp and /.well-known, to the main Retool Service on port
+  # 3000. The main backend must also be able to relay /mcp to the in-cluster MCP
+  # Service. Set its internal URL through the top-level env block:
+  #
+  #   env:
+  #     MCP_SERVICE_INGRESS_DOMAIN: http://<fullname>-mcp:4010
+  #
+  # With that backend setting, omit or disable the MCP-specific ingress or
+  # HTTPRoute rules below and keep only the normal "/" route to
+  # <fullname>:3000. Replace <fullname> with this chart release's full name.
+  #
+  # Retool versions before 4.0.7 require the explicit MCP routes below,
+  # rendered before the main Retool route. External ingress must preserve this
+  # order and target mapping:
   #   Exact  /.well-known/oauth-authorization-server -> <fullname>-backend-internal:3001
   #   Exact  /.well-known/oauth-protected-resource    -> <fullname>-mcp:4010
   #   Prefix /mcp                                     -> <fullname>-mcp:4010