3 ms·
From the spec: https://modelcontextprotocol.io/specification/2025-03-26/server/tools https://modelcontextprotocol.io/specification/2025-03-26/ser... “ For tru
by zambachi 1y ago
From the spec:
https://modelcontextprotocol.io/specification/2025-03-26/server/tools https://modelcontextprotocol.io/specification/2025-03-26/ser...
“ For trust & safety and security, there SHOULD always be a human in the loop with the ability to deny tool invocations.
Applications SHOULD:
Provide UI that makes clear which tools are being exposed to the AI model
Insert clear visual indicators when tools are invoked
Present confirmation prompts to the user for operations, to ensure a human is in the loop”
- lennoff 1y agokeep in mind that we have "vibe coding" now, where the goal is exactly to _not_ have a human in the loop (at least not constantly).
- simonw 1y agoNotable that they used SHOULD there, where they use MUST elsewhere in the same document. Thanks for the reference though, I'll quote that in my article.