classifyMcpTool
@forge/monorepo / backend/src / classifyMcpTool
Function: classifyMcpTool()
classifyMcpTool(
hints,administratorEffect?):McpToolClassification
Defined in: backend/src/mcp/index.ts:67
Safe default: anything not explicitly classified by an administrator is treated as an
external write and requires approval. A remote server cannot talk its way down to
read — a readOnlyHint alone is not enough, because the hint is attacker-controlled
when the server is.
Parameters
hints
administratorEffect?
"read" | "internal-write" | "external-write" | "destructive"