fix(mcp): openWorldHint false for read-only and closed-workflow tools - #663
Merged
Conversation
Directory validators require reads (readOnlyHint=true) to declare openWorldHint=false, and closed private workflows (download to local storage) likewise. Derive the compiled-catalog open-world hint from Safety instead of hardcoding true; auth_status keeps its platform-required open-world override.
Code Review Completed! 🔥The code review was successfully completed based on your current configurations. Kody Guide: Usage and ConfigurationInteracting with Kody
Current Kody ConfigurationReview OptionsThe following review options are enabled or disabled:
|
![kody-ai[bot]](https://avatars.githubusercontent.com/in/413034?s=60&v=4){kind=small}
Code Coverage ReportTotal Coverage: 50.1% Generated from commit: c22416b |
pcfreak30
marked this pull request as ready for review
September 1, 2026 22:32
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Derives the compiled-catalog
openWorldHintfromcatalog.Safetyinstead of hardcoding true, so read-only tools declareopenWorldHint=falsealongsidereadOnlyHint=true, as directory validators require.Sets
download_fileandvault_get_filetoopenWorldHint=false(closed workflows that pull content to a local sink and publish nothing);auth_statuskeeps its platform-required non-read, destructive, open-world override.This pull request fixes the
openWorldHintclassification for MCP tools to align with the Claude/MCP directory validator requirements. The key changes are:Read-only tools now correctly report
openWorldHint: false: Previously, all compiled MCP tools defaulted toopenWorldHint: trueregardless of their safety classification. Now, read-only operations (likepins_list) correctly setopenWorldHinttofalse, since reads don't change external state. This also prevents conflicts with thereadOnlyHint=truedesignation, as directory validators reject tools that are both read-only and open-world.Closed-workflow tools properly flagged: Tools like "Download IPFS content to a file" and "Download a file from the Pinner vault" now correctly report
openWorldHint: false. While they fetch content from external networks (IPFS/Sia), they represent closed workflows that pull data into local storage without publishing anything to the public internet.auth_statusoverride expanded: The special override forauth_statusnow includes an explicitopenWorld: trueflag, reflecting that this tool can trigger out-of-band SSO sign-in communication (emailed verification links) that cannot be undone.These changes ensure the tool hints accurately represent each tool's actual behavior on the internet, improving compliance with platform requirements for the Claude/MCP directory.