feat: synchronize-openapi-schema-with-gram

[Zaimwa9]

Thanks for submitting a PR! Please check the boxes below:

• I have read the Contributing Guide.
• I have added information to docs/ if required so people know about the feature.
• I have filled in the "Changes" section below.
• I have filled in the "How did you test this code" section below.

Changes

Contributes to #6488

• Added x-gram extensions to tag and describe API endpoints for MCP OpenAPI specs
• Tagged endpoints with "mcp" tag to include them in the filtered MCP schema
• Created MCPSchemaGenerator that filters to only MCP-tagged operations
• Exposed /api/v1/mcp-schema/ endpoint serving the filtered OpenAPI spec
• Security scheme uses Organisation API Key (Api-Key format)
• Added makefile command generate-mcp-spec to generate it locally
• Added CI step to push the MCP specs directly to gram (3 new secrets GRAM_PROJECT, GRAM_ORG, GRAM_API_KEY

Tag a new endpoint

  1. Add tags=["mcp"] to the @extend_schema decorator
  2. Add x-gram extension with name and description:
  @extend_schema(
      tags=["mcp"],
      extensions={
          "x-gram": {
              "name": "list_organisation_projects",
              "description": "Retrieves all the project of a given organisation",
          },
      },
  )
  3. Go to gram and add the tool to the toolsets (MCP)

How did you test this code?

• Compared current schema generated with existing tools in gram
• Fully configured Gram on those specs => running with them as we speak
• Added tests

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

3 Skipped Deployments

Project	Deployment	Review	Updated (UTC)
docs	Ignored	Preview	Jan 21, 2026 4:11pm
flagsmith-frontend-preview	Ignored	Preview	Jan 21, 2026 4:11pm
flagsmith-frontend-staging	Ignored	Preview	Jan 21, 2026 4:11pm

[github-actions]

Docker builds report

Image	Build Status	Security report
ghcr.io/flagsmith/flagsmith-e2e:pr-6499	Finished ✅	Skipped
ghcr.io/flagsmith/flagsmith-api-test:pr-6499	Finished ✅	Skipped
ghcr.io/flagsmith/flagsmith-frontend:pr-6499	Finished ✅	Results ✅
ghcr.io/flagsmith/flagsmith-api:pr-6499	Finished ✅	Results ✅
ghcr.io/flagsmith/flagsmith:pr-6499	Finished ✅	Results ✅
ghcr.io/flagsmith/flagsmith-private-cloud:pr-6499	Finished ✅	Results ✅

[Zaimwa9]

Adding a push to gram CI step - testing it with platform-pull-request

[cursor]

This PR is being reviewed by Cursor Bugbot

Details

Your team is on the Bugbot Free tier. On this plan, Bugbot will review limited PRs each billing cycle for each member of your team.

To receive Bugbot reviews on all of your PRs, visit the Cursor dashboard to activate Pro and start your 14-day free trial.

[emyller]

Approved for the sake of unblocking.
There is one followup [potentially] necessary: #6573