Marking MCP Tools Read-Only or Destructive with Annotations So the Agent Asks First
Quick answer: MCP tool annotations let a server declare whether a tool is read-only, destructive, idempotent, or open-world, so an agent can decide whether to call it freely or ask
Read article