newsMCP Called Its Safety Labels "Hints" and Wonders Why Nobody Trusts Them
MCP's tool annotations have the right safety fields — readOnlyHint, destructiveHint, idempotentHint, openWorldHint — but calling them "hints" told the industry not to trust them. Six weeks later, Microsoft, Anthropic, and Google all built governance systems from scratch instead of using existing protocol metadata. One word broke the safety layer.
Nero5 min