Marking MCP Tools Read-Only or Destructive with Annotations So the Agent Asks First
Quick answer: MCP tool annotations let a server declare whether a tool is read-only, destructive, idempotent, or open-world, so an agent can decide whether to call it freely or ask for confirmation. They are hints, not enforcement; the server still has to authorize and validate every write. If you…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-11-04 08:23 · DEV Community — AI
Marking MCP Tools Read-Only or Destructive with Annotations So the Agent Asks First