diff --git a/.gitea/workflows/mcp-acceptance-preview.yml b/.gitea/workflows/mcp-acceptance-preview.yml
index 2835bee7..79404782 100644
--- a/.gitea/workflows/mcp-acceptance-preview.yml
+++ b/.gitea/workflows/mcp-acceptance-preview.yml
@@ -43,7 +43,10 @@ jobs:
       run: |
         set -euo pipefail
         test "$DISPATCH_EVENT" = workflow_dispatch
-        test "$DISPATCH_REF" = refs/heads/codex/mcp-acceptance-current-20261103
+        case "$DISPATCH_REF" in
+          refs/heads/codex/mcp-acceptance-current-20261103|refs/heads/codex/mcp-portal-revoke-preview-20261115) ;;
+          *) printf 'Preview ref is not allowed: %s\n' "$DISPATCH_REF" >&2; exit 1 ;;
+        esac
         [[ "$EXPECTED_SHA" =~ ^[0-9a-f]{40}$ ]]
         test "$EXPECTED_SHA" = "$DISPATCH_SHA"
         test "$(git rev-parse HEAD)" = "$EXPECTED_SHA"
@@ -179,7 +182,10 @@ jobs:
       run: |
         set -euo pipefail
         test "$DISPATCH_EVENT" = workflow_dispatch
-        test "$DISPATCH_REF" = refs/heads/codex/mcp-acceptance-current-20261103
+        case "$DISPATCH_REF" in
+          refs/heads/codex/mcp-acceptance-current-20261103|refs/heads/codex/mcp-portal-revoke-preview-20261115) ;;
+          *) printf 'Preview ref is not allowed: %s\n' "$DISPATCH_REF" >&2; exit 1 ;;
+        esac
         [[ "$EXPECTED_SHA" =~ ^[0-9a-f]{40}$ ]]
         test "$EXPECTED_SHA" = "$DISPATCH_SHA"
         test "$(git rev-parse HEAD)" = "$EXPECTED_SHA"