PRODUCTION SCENARIO
An MCP server exposes banking operations: some tools read transaction history and others send wire transfers. The client host wants to require operator confirmation before the ones that move money.
Which part of a tool definition tells the host that a tool changes state?
Answering here is anonymous. Nothing is saved unless you sign in.
Show answer and explanation
Answer: The `annotations` object, an optional property of the tool definition.
A tool definition carries an optional annotations object describing tool behavior, which is what a host reads to decide where to insert a confirmation step. These are hints: the spec requires clients to consider annotations untrusted unless they come from a trusted server, so the deterministic control stays on the host side. inputSchema describes the arguments, and nothing requires a confirmation parameter. outputSchema describes the shape of a result, which read-only tools return too. And title is display text with no behavioral meaning.