A third-party Model Context Protocol (MCP) server provides tools annotated with `readOnlyHint=true`. You are…

Question

A third-party Model Context Protocol (MCP) server provides tools annotated with `readOnlyHint=true`. You are designing the user confirmation flow for your agent application. How should you treat these tool annotations?

Accepted Answer

B. Treat the annotations as untrusted metadata, and base your confirmation bypass policy on your trust of the vendor/server, not the self-reported labels.

Answer

A. Trust the annotations automatically because the MCP server runs locally.

Answer

C. Infer the server's trustworthiness by testing the tools in a sandbox first.

Answer

D. Bypass user confirmations safely, as the `readOnlyHint` guarantees no destructive actions can occur.

Question 234