Repository navigation
OAuth entry lists every tool up front; open-world and destructive hints per the directory scanner (26.10.2) - #80
Merged
Merged
Conversation
…ts per the directory scanner The plugin directory's tool scan returned three kinds of finding against 26.10.1: ethora-tools-enable 'executes operations that are not individually exposed', create/update tools 'interact with an independently controlled external system' while marked closed-world, and the crawl tool 'causes a hard-to-reverse change' while marked non-destructive. - OAuth connections get the whole offered catalogue at initialize and no ethora-tools-enable; keys, session, b2b and legacy-bot are removed there rather than hidden, so no callable tool is missing from tools/list. Open and personal-URL entries keep the compact core plus tools-enable. - openWorldHint true for every tool that calls the Ethora API or fetches a website; false only for in-server tools (status, help, app-select, search, fetch, session configuration, generators). - destructiveHint true for crawl, re-index, refresh and knowledge-rebuild, which replace stored pages or index entries (crawl only with force). - Tests: open-world rule, OAuth surface shape. 26.10.2.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The plugin directory's MCP tool scan on 26.10.1 returned:
ethora-tools-enable: "appears to execute operations that are not individually exposed; expose each model-callable operation upfront as a separate tool".ethora-app-create/-update,ethora-agent-create/-update: "marked openWorldHint: false, but interacts with an independently controlled external system".ethora-source-site-crawl-wait: "marked destructiveHint: false, but causes material loss or a hard-to-reverse change".Changes
/mcp/oauth, ChatGPT and Claude.ai):applyOAuthSurfacelists every offered tool at initialize and removesethora-tools-enable,OAUTH_HIDDEN_TOOLSand thekeys,session,b2b,legacy-botgroups, so nothing callable is absent from tools/list. About 65 tools. The open and personal-URL entries are unchanged (core + tools-enable). OAuth instructions say every tool is listed; the authenticated entry keeps the groups line.force).docs/TOOL_ANNOTATIONS.mdregenerated. Plugin description says every tool is listed up front. 26.10.2.