Tool Annotations
MCP tool annotations drive Skyflo's approval policy. Each tool declares whether it is read-only (auto-execute) or mutating (approval required), and whether it is destructive (flagged for extra caution).
Core Annotations
| Annotation | Type | Purpose |
|---|---|---|
readOnlyHint | boolean | true = auto-execute, no approval. false = requires approval. |
destructiveHint | boolean | true = flagged for extra caution (delete, drain, uninstall, abort). Still requires approval. |
title | string | Human-readable tool name for the UI. |
tags | string[] | Category tags: k8s, helm, argo, jenkins. Used for filtering and display. |
Approval Policy
| readOnlyHint | destructiveHint | Behavior |
|---|---|---|
true | any | Auto-execute. No approval. |
false | false | Pause for approval. Standard mutation. |
false | true | Pause for approval. UI flags as destructive. |
Example Annotations
| Tool | readOnlyHint | destructiveHint | Tags |
|---|---|---|---|
k8s_list_pods | true | false | k8s |
k8s_get_pod_logs | true | false | k8s |
k8s_apply | false | false | k8s |
k8s_scale_deployment | false | false | k8s |
k8s_drain_node | false | true | k8s |
k8s_delete | false | true | k8s |
helm_search | true | false | helm |
helm_install | false | false | helm |
helm_uninstall | false | true | helm |
argo_promote | false | false | argo |
argo_abort | false | true | argo |
jenkins_list_jobs | true | false | jenkins |
jenkins_trigger_build | false | false | jenkins |
Destructive Operations
Operations with destructiveHint: true are flagged in the UI. They still require approval. The flag signals: "This operation is irreversible or high-impact." Examples:
k8s_delete: Removes resources.k8s_drain_node: Evicts all pods from a node.helm_uninstall: Removes a release and its resources.argo_abort: Aborts a rollout, reverts to previous stable.
Tags
Tags group tools by domain. Used for:
- Sidebar and docs organization.
- Filtering in the Command Center.
- Audit trail categorization.
Standard tags: k8s, helm, argo, jenkins.