diff --git a/scripts/ci/module-pin-exemptions.json b/scripts/ci/module-pin-exemptions.json
index 6cd6c32eea7..bd37fe41c20 100644
--- a/scripts/ci/module-pin-exemptions.json
+++ b/scripts/ci/module-pin-exemptions.json
@@ -27,8 +27,8 @@
     {
       "id": "tinymcp",
       "submodule": "vendor/tinymcp",
-      "expect": "v0.3.2-13-gfe34f5b8",
-      "reason": "The host compiles the MCP contract against the current tinymcp main, which includes the v0.3.2 follow-up dependency and vendor-sync commits. The registry retains the published v0.3.2 artifact. This is compile-only: the tinymcp module is registry-entered but not wired (AGENTS.md, 'step two of the extraction'), so no build downloads or loads that artifact. Delete this entry when tinymcp cuts its next release and the registry pin moves onto it."
+      "expect": "v0.3.2-15-g10786a47",
+      "reason": "The host compiles the MCP contract against the current tinymcp main, which includes the v0.3.2 follow-up dependency and vendor-sync commits plus the reconnect-supervisor fix that parks a server whose credential was rejected instead of retrying it forever (tinymcp#20, openhuman#6412). The registry retains the published v0.3.2 artifact. This is compile-only: the tinymcp module is registry-entered but not wired (AGENTS.md, 'step two of the extraction'), so no build downloads or loads that artifact. Delete this entry when tinymcp cuts its next release and the registry pin moves onto it."
     },
     {
       "id": "tinyjuice",
diff --git a/vendor/tinymcp b/vendor/tinymcp
index fe34f5b8c89..10786a472e3 160000
--- a/vendor/tinymcp
+++ b/vendor/tinymcp
@@ -1 +1 @@
-Subproject commit fe34f5b8c89a49e6f7ca05c2da791bb34550f85f
+Subproject commit 10786a472e3c17b796c4c173a0e4647ed916b120