Under the hood
Tool permission events now record which MCP server a tool belongs to
What
The event schemas used for tool-use permission requests, denials, and asks (which record things like tool_name, tool_input, tool_use_id, and permission_suggestions) now include an optional mcp_server field. A new helper function fills this field in by looking up the tool in the MCP (Model Context Protocol) tool registry when a permission decision is made.
Why
This lets permission-related records show which MCP server a tool came from, which is useful for tracking or auditing permission decisions involving tools provided by MCP servers rather than built-in tools.