{"version":"2.1.81","anchor":"mcp-tool-read-search-allowlist-in-development","canonical_anchor":"mcp-tool-read-search-allowlist-in-development","heading":"MCP Tool Read\/Search Allowlist [In Development]","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.81\/e\/mcp-tool-read-search-allowlist-in-development","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.81","markdown":"### MCP Tool Read\/Search Allowlist [In Development]\n\n**What**\n\nA comprehensive allowlist classifying hundreds of known MCP tool names as \"search\" or \"read\" operations, likely for auto-approving read-only MCP operations.\n\n**Status**\n\nInfrastructure added, not yet visibly wired to auto-approval logic.\n\n**Details**\n\n- Search tools: ~90 tools from Slack, GitHub, Datadog, Sentry, Google, Atlassian, Stripe, PubMed, Brave, and more\n- Read tools: ~270 tools covering Slack reads, GitHub detail views, Grafana dashboards, PagerDuty, Jira\/Confluence, Asana, MongoDB, Elasticsearch, Figma, Puppeteer screenshots, and more\n- Classification uses snake_case normalization of tool names\n\n**Evidence**\n\nMCP tool classification allowlist \u2014 `PT4()` at line ~327832 (search for `\"slack_search_public\"`)"}