diff --git a/docs/Gemfile b/docs/Gemfile
index 683c50ae..c8da19a9 100644
--- a/docs/Gemfile
+++ b/docs/Gemfile
@@ -23,7 +23,7 @@ gem "pgbus", path: "..", require: "pgbus/version"
 # zoolutions docs fleet is consumed by agents. Pinned (pre-1.0, so ~> 0.22.0
 # tracks only 0.22.x patches) so a routine bundle update can't pull a breaking
 # release into this public endpoint.
-gem "mcp", "~> 0.22.0"
+gem "mcp", "~> 0.23.0"
 
 # Throttle the public, unauthenticated AI endpoints (/mcp, /llms*, /docs/search)
 # by IP — they're bare ActionController::Base controllers in the gem, so a
diff --git a/docs/Gemfile.lock b/docs/Gemfile.lock
index 04b7bde1..9b93a2b6 100644
--- a/docs/Gemfile.lock
+++ b/docs/Gemfile.lock
@@ -166,7 +166,7 @@ GEM
       net-pop
       net-smtp
     marcel (1.2.1)
-    mcp (0.22.0)
+    mcp (0.23.0)
       json_schemer (>= 2.4)
     mini_mime (1.1.5)
     minitest (6.0.6)
@@ -397,7 +397,7 @@ DEPENDENCIES
   debug
   docs-kit (~> 1.0.3)
   importmap-rails
-  mcp (~> 0.22.0)
+  mcp (~> 0.23.0)
   pgbus!
   phlex-rails
   propshaft
@@ -471,7 +471,7 @@ CHECKSUMS
   loofah (2.25.1) sha256=d436c73dbd0c1147b16c4a41db097942d217303e1f7728704b37e4df9f6d2e04
   mail (2.9.1) sha256=06574eca475253d6c18145dd70af80d0eb970182d55053497c5f4d797ea160e8
   marcel (1.2.1) sha256=1678e9360e32f9eafa917c80029e2f6d10b2715c66a4b87b6d0da9b9cd1f859f
-  mcp (0.22.0) sha256=e2ef603207c7e2c691bef4d8d8ab35d9740bedf315949fdb6d9a25318d1a7025
+  mcp (0.23.0) sha256=3667ee167384778cd81721799dc8060f4a792f63b23ba0804005afd29d7259bc
   mini_mime (1.1.5) sha256=8681b7e2e4215f2a159f9400b5816d85e9d8c6c6b491e96a12797e798f8bccef
   minitest (6.0.6) sha256=153ea36d1d987a62942382b61075745042a2b3123b1cd48f4c3675af9cc7d6f1
   net-imap (0.6.4.1) sha256=29f0360d75a7efd3539f16ac1957dea5c0a51ddeceb348db4553c3120914ea0d