Tools changedspecification/2024-11-05/server/tools
Nearest release: v2.1.305, published under an hour before upstream edited the page. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Upstream edited this page at 20 Oct 2026 20:02 UTC, give or take a minute or two: the time comes from Anthropic’s own sitemap rather than from a commit. This site recorded the change at 20 Oct 2026 20:07 UTC.
Upstream edited
Recorded here
Lines+11added
Lines−11removed
From line
15
where the diff opens
First seen
26 Aug 2026
this site's first read of the page
Recorded edits2to this page, all time
The whole hunk
from line 15, old and new numbered
/
from line 15
1515suits their needs—the protocol itself does not mandate any specific user
1616interaction model.
1717
18<Warning>
19 For trust & safety and security, there **SHOULD** always
20 be a human in the loop with the ability to deny tool invocations.
21
22 Applications **SHOULD**:
23
24 * Provide UI that makes clear which tools are being exposed to the AI model
25 * Insert clear visual indicators when tools are invoked
26 * Present confirmation prompts to the user for operations, to ensure a human is in the
27 loop
28</Warning>
18> [!WARNING]
19>
20> For trust & safety and security, there **SHOULD** always
21> be a human in the loop with the ability to deny tool invocations.
22>
23> Applications **SHOULD**:
24>
25> * Provide UI that makes clear which tools are being exposed to the AI model
26> * Insert clear visual indicators when tools are invoked
27> * Present confirmation prompts to the user for operations, to ensure a human is in the
28> loop
2929
3030## Capabilities
3131
No line in this hunk matches that.