Fouad Matin 32c4993c8a fix(core): default approval behavior for mcp missing annotations (#15519) ...

- Changed `requires_mcp_tool_approval` to apply MCP spec defaults when
annotations are missing.
- Unannotated tools now default to:
  - `readOnlyHint = false`
  - `destructiveHint = true`
  - `openWorldHint = true`
- This means unannotated MCP tools now go through approval/ARC
monitoring instead of silently bypassing it.
- Explicitly read-only tools still skip approval unless they are also
explicitly marked destructive.

**Previous behavior**
Failed open for missing annotations, which was unsafe for custom MCP
tools that omitted or forgot annotations.

---------

Co-authored-by: colby-oai <228809017+colby-oai@users.noreply.github.com>

2026-03-25 07:55:41 -07:00

..

src

fix(core): default approval behavior for mcp missing annotations (#15519)

2026-03-25 07:55:41 -07:00

tests

fix: keep rmcp-client env vars as OsString (#15363)

2026-03-24 23:32:31 +00:00

BUILD.bazel

feat: add support for building with Bazel (#8875)

2026-01-09 11:09:43 -08:00

Cargo.toml

client: extend custom CA handling across HTTPS and websocket clients (#14239)

2026-03-13 00:59:26 +00:00