🧾 JSONmedium
3. Annotate a read-only tool
Add `annotations` to the "list_files" tool declaring it read-only and non-destructive: • annotations.readOnlyHint: true • annotations.destructiveHint: false (These are HINTS — a client must not trust them for security decisions.)
How to approach this
Tool `annotations` are OPTIONAL hints about behavior: `readOnlyHint` (doesn't modify anything), `destructiveHint`, `idempotentHint`, `openWorldHint`. A host can use them to, say, offer to auto-approve a read-only tool. But they come from a possibly-untrusted server, so they're HINTS, not guarantees — never make a security decision on them alone. Booleans, not strings.
config.json