Skip to content

Spec untrustedContentHint #169

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
domfarolino merged 1 commit into from
Apr 23, 2026
Merged

Spec untrustedContentHint #169

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 14 additions & 0 deletions index.bs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -155,6 +155,9 @@ A <dfn>tool definition</dfn> is a [=struct=] with the following [=struct/items=]

: <dfn>read-only hint</dfn>
:: a [=boolean=], initially false.

: <dfn>untrusted content hint</dfn>
:: a [=boolean=], initially false.
</dl>

<div algorithm>
Expand Down Expand Up @@ -263,6 +266,9 @@ The <dfn method for=ModelContext>registerTool(<var>tool</var>, <var>options</var
1. Let |read-only hint| be true if |tool|'s {{ModelContextTool/annotations}} [=map/exists=] and
its {{ToolAnnotations/readOnlyHint}} is true. Otherwise, let it be false.

1. Let |untrusted content hint| be true if |tool|'s {{ModelContextTool/annotations}} [=map/exists=] and
its {{ToolAnnotations/untrustedContentHint}} is true. Otherwise, let it be false.

1. Let |signal| be |options|'s {{ModelContextRegisterToolOptions/signal}}.

1. If |signal| [=map/exists=], then:
Expand Down Expand Up @@ -294,6 +300,9 @@ The <dfn method for=ModelContext>registerTool(<var>tool</var>, <var>options</var
: [=tool definition/read-only hint=]
:: |read-only hint|

: [=tool definition/untrusted content hint=]
:: |untrusted content hint|

1. Set [=this=]'s [=ModelContext/internal context=][|tool name|] to |tool definition|.

</div>
Expand All @@ -316,6 +325,7 @@ dictionary ModelContextTool {

dictionary ToolAnnotations {
boolean readOnlyHint = false;
boolean untrustedContentHint = false;
};

callback ToolExecuteCallback = Promise<any> (object input, ModelContextClient client);
Expand Down Expand Up @@ -362,6 +372,10 @@ The {{ToolAnnotations}} dictionary provides optional metadata about a tool:
<dl class="domintro" dfn-type=dict-member dfn-for=ToolAnnotations>
: <dfn>readOnlyHint</dfn>
:: If true, indicates that the tool does not modify any state and only reads data. This hint can help [=agents=] make decisions about when it is safe to call the tool.

: <dfn>untrustedContentHint</dfn>
:: If true, indicates that the tool's output contains data that is untrusted, from the perspective
of the author registering the tool.
</dl>

<h4 id="model-context-register-tool-options">ModelContextRegisterToolOptions Dictionary</h4>
Expand Down
Loading