modelcontextprotocol/experimental-ext-tool-annotations
Watch
1
0
Fork
You've already forked experimental-ext-tool-annotations
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: finalize intent comments and record posted links

Browse source 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
This commit is contained in:
Sam Morrow 2026-06-11 00:02:51 +02:00
commit 8a867d4bb9
No known key found for this signature in database
1 changed files with 16 additions and 24 deletions
Download patch file Download diff file Expand all files Collapse all files

40
docs/intent-comment.md
View file

@ -19,6 +19,7 @@ Kept here so it can be reviewed and stays in sync with
> they're a better fit for this work than a single Standards Track SEP.
>
> Two things pushed us here:
>
> - @localden's review ask for a **narrower first cut** — the concern that a
> broad taxonomy with array-or-scalar polymorphism is hard to remove or change
> once it lands.
@ -31,39 +32,30 @@ Kept here so it can be reviewed and stays in sync with
> independently-shippable extensions**, each with its own
> `io.modelcontextprotocol/…` identifier, reference implementation, and path to
> an Extensions Track SEP. Incubation is in
> [`experimental-ext-tool-annotations`](https://github.com/modelcontextprotocol/experimental-ext-tool-annotations):
> [`experimental-ext-tool-annotations`](https://github.com/modelcontextprotocol/experimental-ext-tool-annotations).
>
> Kicking off with a few draft extensions in the tool annotations repo — not
> sure yet whether they'd each need separate repos eventually, or whether
> grouping them in one is fine. That's part of what incubation is for.
>
> | Extension | Scope |
> |---|---|
> | `trust-annotations` | The narrow data-classification taxonomy (`sensitive`, `untrusted`) + an open-ended `evidenceRef` pointer for richer, out-of-band evidence. |
> | `action-metadata` | Tool I/O + outcome contract (folds in @rreichel3's SEP-2061). |
> | `ifc-fides` | Information-flow control ([arXiv:2505.23643](https://arxiv.org/abs/2505.23643)) as **one profile** of `evidenceRef`, not a wire root — the public/private-repo confidentiality case, with github-mcp-server as emitter candidate. |
> | `ifc-fides` | Information-flow control ([arXiv:2505.23643](https://arxiv.org/abs/2505.23643)) as **one profile** of `evidenceRef`, not a wire root — the public/private-repo confidentiality case, with github-mcp-server as an emitter example. |
>
> Deliberately **not** in the initial carve: `maliciousActivityHint` (the
> structural concerns raised here are unresolved) and session-level propagation
> rules. Those stay parked on this umbrella thread.
> Deliberately removed: `maliciousActivityHint` (the structural concerns raised
> here are unresolved) and session-level propagation rules.
>
> This follows the same Standards-Track → Extensions-Track refactor pattern as
> SEP-2127 (#2893). This PR stays open as the umbrella / problem-framing thread;
> the schema-bearing pieces move out. Feedback on the carve is very welcome —
> particularly on whether any parked item deserves its own extension sooner.
> SEP-2127 (#2893). This PR will eventually pivot to the `trust-annotations`
> piece itself, with the other schema-bearing pieces moving out into their own
> extensions. Everything is still in the incubation phase, so naming, design,
> and the choice of what to put forward as an extension are all open for
> discussion in the IG.
---
## For SEP-2061 (abbreviated pointer)
## For SEP-2061 (coordination note)
> Cross-linking for visibility: the Tool Annotations IG is carving the trust /
> privacy / action-metadata work into small experimental extensions in
> [`experimental-ext-tool-annotations`](https://github.com/modelcontextprotocol/experimental-ext-tool-annotations)
> (background: SEP-1913 comment
> [here](https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1913),
> and the [May 28 IG decision](https://github.com/modelcontextprotocol/modelcontextprotocol/discussions/2820)).
>
> This proposal maps directly onto the
> [`action-metadata`](https://github.com/modelcontextprotocol/experimental-ext-tool-annotations/blob/main/specification/draft/action-metadata.mdx)
> extension — `inputMetadata` / `returnMetadata` / outcomes, plus a
> `requiresReview` signal we pulled out of the trust taxonomy because it's a
> workflow concern, not a data property. The intent is to carry SEP-2061 forward
> as that extension rather than run a parallel proposal. @rreichel3 — flagging
> so we co-own it rather than diverge; happy to keep this thread as the home for
> the field semantics.
> @rreichel3 — carving this out into an independent extension as discussed: https://github.com/modelcontextprotocol/modelcontextprotocol/pull/1913#issuecomment-4675047154