diff --git a/apps/server/src/mcp/McpToolAccess.test.ts b/apps/server/src/mcp/McpToolAccess.test.ts
index ecfb8a9993b3..d1a21fbb7195 100644
--- a/apps/server/src/mcp/McpToolAccess.test.ts
+++ b/apps/server/src/mcp/McpToolAccess.test.ts
@@ -165,7 +165,7 @@ export const refusedAtCompileTime = () => {
   // @ts-expect-error a declaration built outside McpToolAccess
   McpToolAccess.Declaration.make(unchecked);
   // @ts-expect-error a declaration constructed directly
-  new McpToolAccess.Declaration(unchecked);
+  new McpToolAccess.Declaration(unchecked); // oxlint-disable-line eslint/no-new -- This type-contract test checks direct construction.
   // @ts-expect-error a handlers layer built outside McpToolAccess
   McpToolAccess.HandlersLayer.make(Layer.empty);
   // @effect-diagnostics-next-line anyUnknownInErrorContext:off
diff --git a/vite.config.ts b/vite.config.ts
index 6ff3354760db..012a31f4d03b 100644
--- a/vite.config.ts
+++ b/vite.config.ts
@@ -216,6 +216,7 @@ export default defineConfig({
       perf: "warn",
     },
     rules: {
+      "eslint/no-new": "error",
       "unicorn/no-useless-spread": "error",
       "eslint/no-unused-vars": [
         "error",