docs: add admin UI hide vars to env, docker-compose, charts, schema, and docs

Signed-off-by: Madhav Kandukuri <madhav165@gmail.com>

Author: madhav165

.env.example

@@ -1195,6 +1195,14 @@ OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:4317
 # Example: MCPGATEWAY_UI_HIDE_HEADER_ITEMS=logout,team_selector
 # MCPGATEWAY_UI_HIDE_HEADER_ITEMS=
 
+# Admin-specific UI section/header hiding (separate from non-admin lists above)
+# When unset, admins see all sections. Embedded mode defaults do NOT apply to admins.
+# Same valid values as MCPGATEWAY_UI_HIDE_SECTIONS / MCPGATEWAY_UI_HIDE_HEADER_ITEMS
+# Example: MCPGATEWAY_UI_HIDE_SECTIONS_ADMIN=maintenance
+# MCPGATEWAY_UI_HIDE_SECTIONS_ADMIN=
+# Example: MCPGATEWAY_UI_HIDE_HEADER_ITEMS_ADMIN=theme_toggle
+# MCPGATEWAY_UI_HIDE_HEADER_ITEMS_ADMIN=
+
 # Enable bulk import feature for mass tool/resource registration
 # Options: true (default), false
 # Allows importing multiple tools/resources in a single API call

charts/mcp-stack/values.schema.json

@@ -740,6 +740,16 @@
               "description": "CSV/JSON list of header items to hide (logout, team_selector, user_identity, theme_toggle)",
               "default": ""
             },
+            "MCPGATEWAY_UI_HIDE_SECTIONS_ADMIN": {
+              "type": "string",
+              "description": "CSV/JSON list of UI sections to hide for admin users. When empty, admins see all sections. Same valid values as MCPGATEWAY_UI_HIDE_SECTIONS.",
+              "default": ""
+            },
+            "MCPGATEWAY_UI_HIDE_HEADER_ITEMS_ADMIN": {
+              "type": "string",
+              "description": "CSV/JSON list of header items to hide for admin users. Same valid values as MCPGATEWAY_UI_HIDE_HEADER_ITEMS.",
+              "default": ""
+            },
             "MCPGATEWAY_ADMIN_API_ENABLED": {
               "type": "string",
               "enum": ["true", "false"],

charts/mcp-stack/values.yaml

@@ -337,6 +337,8 @@ mcpContextForge:
     MCPGATEWAY_UI_EMBEDDED: "false"          # embedded UI mode (hides logout + team selector by default)
     MCPGATEWAY_UI_HIDE_SECTIONS: ""          # CSV/JSON list of UI sections to hide (e.g. prompts,resources,teams)
     MCPGATEWAY_UI_HIDE_HEADER_ITEMS: ""      # CSV/JSON list of header items to hide (e.g. logout,team_selector)
+    MCPGATEWAY_UI_HIDE_SECTIONS_ADMIN: ""    # CSV/JSON list of UI sections to hide for admin users (empty = admins see all)
+    MCPGATEWAY_UI_HIDE_HEADER_ITEMS_ADMIN: "" # CSV/JSON list of header items to hide for admin users
 
     # ─ ToolOps Feature ─
     TOOLOPS_ENABLED: "false"            # enable ToolOps feature

docker-compose-embedded.yml

@@ -50,6 +50,9 @@ services:
       # ── Embedded UI ──
       - MCPGATEWAY_UI_EMBEDDED=true
       - MCPGATEWAY_UI_HIDE_SECTIONS=overview,logs,maintenance,mcp-registry,plugins,roots,llm-settings,teams,tokens,users
+      # Admin users see all sections by default in embedded mode
+      - MCPGATEWAY_UI_HIDE_SECTIONS_ADMIN=
+      - MCPGATEWAY_UI_HIDE_HEADER_ITEMS_ADMIN=
 
       # ── CORS & iframe embedding ──
       - CORS_ENABLED=true

docker-compose.yml

@@ -296,6 +296,9 @@ services:
       # CSV list (or JSON array) of UI sections/header items to hide for embedded contexts
       - MCPGATEWAY_UI_HIDE_SECTIONS=
       - MCPGATEWAY_UI_HIDE_HEADER_ITEMS=
+      # Admin-specific UI hide lists (empty = admins see all; embedded defaults skip admins)
+      - MCPGATEWAY_UI_HIDE_SECTIONS_ADMIN=
+      - MCPGATEWAY_UI_HIDE_HEADER_ITEMS_ADMIN=
       # Security configuration (using defaults)
       - ENVIRONMENT=development
       - SECURITY_HEADERS_ENABLED=true

docs/docs/config.schema.json

@@ -1423,6 +1423,22 @@
       "title": "Mcpgateway Ui Hide Header Items",
       "type": "array"
     },
+    "mcpgateway_ui_hide_sections_admin": {
+      "description": "CSV/JSON list of UI sections to hide for admin users. Same valid values as mcpgateway_ui_hide_sections. When unset, admins see all sections.",
+      "items": {
+        "type": "string"
+      },
+      "title": "Mcpgateway Ui Hide Sections Admin",
+      "type": "array"
+    },
+    "mcpgateway_ui_hide_header_items_admin": {
+      "description": "CSV/JSON list of header items to hide for admin users. Same valid values as mcpgateway_ui_hide_header_items.",
+      "items": {
+        "type": "string"
+      },
+      "title": "Mcpgateway Ui Hide Header Items Admin",
+      "type": "array"
+    },
     "mcpgateway_bulk_import_enabled": {
       "default": true,
       "title": "Mcpgateway Bulk Import Enabled",

docs/docs/manage/admin-ui-customization.md

@@ -105,6 +105,42 @@ MCPGATEWAY_UI_EMBEDDED=true
 
 This is equivalent to setting `MCPGATEWAY_UI_HIDE_HEADER_ITEMS=logout,team_selector` but communicates intent more clearly. If both are set, the values are merged.
 
+## Role-Based Visibility
+
+By default, the hide settings above apply to **non-admin users only**. Admin users have separate configuration:
+
+### `MCPGATEWAY_UI_HIDE_SECTIONS_ADMIN`
+
+Comma-separated or JSON list of sections to hide for admin users. Accepts the same values and aliases as `MCPGATEWAY_UI_HIDE_SECTIONS`.
+
+When unset (empty), admins see all sections — even if `MCPGATEWAY_UI_HIDE_SECTIONS` hides sections for non-admins.
+
+```bash
+# Admins see everything except maintenance
+MCPGATEWAY_UI_HIDE_SECTIONS_ADMIN=maintenance
+```
+
+### `MCPGATEWAY_UI_HIDE_HEADER_ITEMS_ADMIN`
+
+Comma-separated or JSON list of header items to hide for admin users.
+
+```bash
+MCPGATEWAY_UI_HIDE_HEADER_ITEMS_ADMIN=theme_toggle
+```
+
+### Embedded Mode and Admins
+
+When `MCPGATEWAY_UI_EMBEDDED=true`, the automatic hiding of `logout` and `team_selector` **only applies to non-admin users**. Admins retain full header controls unless explicitly configured via `MCPGATEWAY_UI_HIDE_HEADER_ITEMS_ADMIN`.
+
+### Example: Embedded deployment with admin access
+
+```bash
+MCPGATEWAY_UI_EMBEDDED=true
+MCPGATEWAY_UI_HIDE_SECTIONS=users,teams,tokens,settings
+# Admins see everything (default empty = no hiding)
+# MCPGATEWAY_UI_HIDE_SECTIONS_ADMIN=
+```
+
 ## Per-Request Hiding with `?ui_hide=`
 
 For embedded contexts where different pages need different views, use the `?ui_hide=` query parameter: