Merge branch 'main' into update-toolhive-reference-v0.2.1

Author: dmjb

docs/toolhive/_partials/_client-compat-table.md

@@ -5,6 +5,8 @@
 | Roo Code (VS Code)         |    ✅     |         ✅         | v3.19.2+                                       |
 | Cline (VS Code)            |    ✅     |         ✅         | v3.8.5+ (sse only; streamable-http [issue][2]) |
 | Claude Code CLI            |    ✅     |         ✅         | v1.0.27+                                       |
+| Windsurf IDE               |    ✅     |         ✅         |                                                |
+| Windsurf (JetBrains)       |    ✅     |         ✅         |                                                |
 | GitHub Copilot (JetBrains) |    ✅     |         ❌         | v1.5.47+                                       |
 | Continue (VS Code)         |    ✅     |         ❌         | v1.0.14+                                       |
 | Continue (JetBrains)       |    ✅     |         ❌         | v1.0.23+                                       |

docs/toolhive/guides-cli/run-mcp-servers.mdx

@@ -142,6 +142,36 @@ specific proxy port instead, use the `--proxy-port` flag:
 thv run --proxy-port <PORT_NUMBER> <SERVER>
 ```
 
+### Run a server exposing only selected tools
+
+ToolHive can filter the tools returned to the client as result of a `tools/list`
+command as well as block calls to tools that you don't want to expose.
+
+This can help reduce the amount of tools sent to the LLM while still using the
+same MCP server, but it is not meant as a security feature.
+
+To filter the list of tools, use the `--tools` flag either once
+
+```bash
+thv run --tools <TOOL_1>,<TOOL_2> <SERVER>
+```
+
+Or multiple times
+
+```bash
+thv run --tools <TOOL_1> --tools <TOOL_2> <SERVER>
+```
+
+For example:
+
+```bash
+thv run --tools list_issues,get_issue github
+```
+
+If the server comes from the registry, ToolHive can validate the tool names
+against the list advertised in the image reference. An error is returned in case
+ToolHive cannot find one of the specified tools.
+
 ## Run a custom MCP server
 
 To run an MCP server that isn't in the registry, you can use a