Tools changedspecification/2025-03-26/server/tools
Nearest release: v2.1.305, published under an hour before upstream edited the page. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Upstream edited this page at 20 Oct 2026 20:02 UTC, give or take a minute or two: the time comes from Anthropic’s own sitemap rather than from a commit. This site recorded the change at 20 Oct 2026 20:07 UTC.
Upstream edited
Recorded here
Lines+15added
Lines−15removed
From line
15
where the diff opens
First seen
26 Aug 2026
this site's first read of the page
Recorded edits2to this page, all time
The whole hunk
from line 15, old and new numbered
/
from line 15
1515suits their needs—the protocol itself does not mandate any specific user
1616interaction model.
1717
18<Warning>
19 For trust & safety and security, there **SHOULD** always
20 be a human in the loop with the ability to deny tool invocations.
18> [!WARNING]
19>
20> For trust & safety and security, there **SHOULD** always
21> be a human in the loop with the ability to deny tool invocations.
22>
23> Applications **SHOULD**:
24>
25> * Provide UI that makes clear which tools are being exposed to the AI model
26> * Insert clear visual indicators when tools are invoked
27> * Present confirmation prompts to the user for operations, to ensure a human is in the
28> loop
2129
22 Applications **SHOULD**:
23
24 * Provide UI that makes clear which tools are being exposed to the AI model
25 * Insert clear visual indicators when tools are invoked
26 * Present confirmation prompts to the user for operations, to ensure a human is in the
27 loop
28</Warning>
29
3030## Capabilities
3131
3232Servers that support tools **MUST** declare the `tools` capability:
from line 179
179179* `inputSchema`: JSON Schema defining expected parameters
180180* `annotations`: optional properties describing tool behavior
181181
182<Warning>
183 For trust & safety and security, clients **MUST** consider
184 tool annotations to be untrusted unless they come from trusted servers.
185</Warning>
182> [!WARNING]
183>
184> For trust & safety and security, clients **MUST** consider
185> tool annotations to be untrusted unless they come from trusted servers.
186186
187187### Tool Result
188188
No line in this hunk matches that.