inference-hooks-endpoint changedmanage-claude/inference-hooks-endpoint
Nearest release: v2.1.307, published an hour before this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Recorded here
Lines+30added
Lines−7removed
From line
258
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits17to this page, all time
The whole hunk
from line 258, old and new numbered
/
from line 258
258258
259259`tool_info` says who runs or provides the tool, not what the tool can reach. It is one of four kinds, told apart by its `type` field, and each kind carries its own fields. Anthropic sends the first of the following kinds that fits the tool. New kinds may appear: accept a `type` you don't recognize, and for such a kind rely only on `type`.
260260
261An optional field that doesn't apply is left out, never `null`, so a `tool_info` can be just `{"type": "client"}`. `tool_name` is chosen by whoever defined the tool, and a server's `toolset_name` by whoever wrote the request, so don't treat either as a trust boundary.
261An optional field that doesn't apply is left out, never `null`, so a `tool_info` can be just `{"type": "client"}`. `tool_name` is chosen by whoever defined the tool, and a server's `toolset_name` by whoever wrote the request or named the connector. Don't treat either as a trust boundary.
262262
263263### Platform tools
264264
from line 301
301301
302302A third-party tool is one on a server that Anthropic knows of, such as a claude.ai connector or an MCP server that the request names in `mcp_servers`. This doesn't mean Anthropic has vetted the server. In voice mode, a call to a claude.ai connector's tool is `"client"` instead.
303303
304| Field | Present | Description |
305| ----------------- | -------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
306| `type` | Always | `"third_party"` |
307| `toolset_name` | Optional | The name the request gives the server. |
308| `origin` | Optional | The scheme, host, and non-default port of the server's URL. It can be a private or local address, `localhost` included. An absent `origin` means unknown, not safe. |
309| `verified_origin` | Whenever `origin` is | `true` only when Anthropic's servers connect to the server themselves. Treat `false` as an origin that Anthropic hasn't confirmed. |
304| Field | Present | Description |
305| ----------------- | -------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
306| `type` | Always | `"third_party"` |
307| `toolset_name` | Optional | For a server in `mcp_servers`, the name the request gives the server. For any other server, such as a claude.ai connector, the server's name, copied from `tool_name`. |
308| `origin` | Optional | The scheme, host, and non-default port of the server's URL. It can be a private or local address, `localhost` included. An absent `origin` means unknown, not safe. |
309| `verified_origin` | Whenever `origin` is | `true` only when Anthropic's servers connect to the server themselves. Treat `false` as an origin that Anthropic hasn't confirmed. |
310310
311311A `tool_use` block for a tool on an MCP server that the request names `crm` in `mcp_servers`:
312312
from line 326
326326 }
327327}
328328```
329
330A `tool_use` block for a tool on a Gmail connector, called in a claude.ai chat:
331
332```json
333{
334 "type": "tool_use",
335 "id": "toolu_01DeFgHiJkLmNoPqRsTuVwXy",
336 "tool_name": "mcp__Gmail__search_threads",
337 "input": {
338 "query": "from:[email protected] newer_than:30d"
339 },
340 "tool_info": {
341 "type": "third_party",
342 "toolset_name": "Gmail",
343 "origin": "https://gmail.mcp.example.com",
344 "verified_origin": false
345 }
346}
347```
348
349For a claude.ai connector, `verified_origin` can be `false` even when Anthropic's servers connect to the server themselves.
350
351A name copied from `tool_name` can differ from the name the user sees: `mcp__Google_Drive__search_files` gives `Google_Drive`, not `Google Drive`. It can also end in a short suffix (`Gmail-1a2b3c4d`), for example when another of the user's connectors has the same name. The name isn't a stable identifier and doesn't prove which server the tool is on. When `tool_name` has no server name in it, `toolset_name` is left out.
329352
330353### Client tools
331354
No line in this hunk matches that.