Cowork (Team plan): custom remote MCP connector prompts on every tool call — "Allow all for this task" is disabled

### Problem Statement

Environment

Plan: Claude Team (verified domain)
Surface: Cowork (claude.ai)
Connector: a custom remote MCP connector (Streamable HTTP, optional OAuth), added via Organization settings → Connectors
Steps to reproduce

As org admin, add a custom remote MCP connector.
Use one of its tools inside Cowork.
Observe the permission dialog on every tool call.

The connector prompts for permission on every tool call.
"Allow all for this task" is disabled/greyed out.
In Organization settings → Connectors → the connector's detail panel, the only org-level control is "How your team connects" (Individual sign-in vs. Managed authorization [Beta]). There is no per-tool permission control (no Always allow / Needs approval / Blocked) for a custom connector.
Questions

Is there any way on the Team plan to pre-approve a custom MCP connector's tools org-wide so Cowork stops prompting?
Is the disabled "Allow all for this task" for custom connectors in Cowork a known limitation/bug or expected behavior?
Does Managed authorization (Beta) affect tool-call permission prompting, or is it authentication-only?
If org-managed tool approval for custom connectors requires Enterprise, please confirm.

### Proposed Solution

A way to pre-approve the connector's tools (or a working "Allow all for this task") so users aren't prompted on every call.

### Alternatives Considered

_No response_

### Area

Tool Discovery / Invocation

### Priority

High - Major improvement needed

### Additional Context

_No response_