in follow up, looks like issue was in not specifying the host parameter in FastMCP(...). without this param server must be taking some short-circuit to 127.0.0.1, for instance tcp was only reachable locally and even that through 127.0.0.1 only.

once I supplied host parameter I was able to make remote calls.