Skip to main content

classifyMcpTool

@forge/monorepo


@forge/monorepo / backend/src / classifyMcpTool

Function: classifyMcpTool()

classifyMcpTool(hints, administratorEffect?): McpToolClassification

Defined in: backend/src/mcp/index.ts:67

Safe default: anything not explicitly classified by an administrator is treated as an external write and requires approval. A remote server cannot talk its way down to read — a readOnlyHint alone is not enough, because the hint is attacker-controlled when the server is.

Parameters

hints

McpToolHints

administratorEffect?

"read" | "internal-write" | "external-write" | "destructive"

Returns

McpToolClassification