diff --git a/src/daemon/host.ts b/src/daemon/host.ts
index f7eaa24..78e6962 100644
--- a/src/daemon/host.ts
+++ b/src/daemon/host.ts
@@ -302,6 +302,7 @@ async function processRequest(
           const result = await runtime.callTool(params.server, params.tool, {
             args: params.args ?? {},
             timeoutMs: params.timeoutMs,
+            allowCachedAuth: params.allowCachedAuth ?? true,
           });
           markActivity(params.server, activity);
           if (loggable) {
@@ -327,6 +328,7 @@ async function processRequest(
           const result = await runtime.listTools(params.server, {
             includeSchema: params.includeSchema,
             autoAuthorize: params.autoAuthorize,
+            allowCachedAuth: true,
           });
           markActivity(params.server, activity);
           if (loggable) {
diff --git a/src/daemon/protocol.ts b/src/daemon/protocol.ts
index 86ee42f..d46a13a 100644
--- a/src/daemon/protocol.ts
+++ b/src/daemon/protocol.ts
@@ -28,6 +28,7 @@ export interface CallToolParams {
   readonly tool: string;
   readonly args?: Record<string, unknown>;
   readonly timeoutMs?: number;
+  readonly allowCachedAuth?: boolean;
 }
 
 export interface ListToolsParams {
diff --git a/src/daemon/runtime-wrapper.ts b/src/daemon/runtime-wrapper.ts
index da44b35..a840258 100644
--- a/src/daemon/runtime-wrapper.ts
+++ b/src/daemon/runtime-wrapper.ts
@@ -75,6 +75,7 @@ class KeepAliveRuntime implements Runtime {
           tool: toolName,
           args: options?.args,
           timeoutMs: options?.timeoutMs,
+          allowCachedAuth: options?.allowCachedAuth ?? true,
         })
       );
     }