Skip to content

Label MCP tools as read only or changes things

Changelog

Feature Platform Cloud CLIUI, API, CLI

On main, not yet released

Everruns cannot see inside a remote tool, so most MCP tools ask for approval by default. A saved label now decides it: Read only never asks, Changes things always asks. A label wins over the server’s own hints and survives tool list changes.

In the UI: open Settings > MCP catalog and click Tools on a server. Suggest labels asks a decision model to judge unlabeled tools; nothing changes until someone picks a choice or clicks Use suggestion.

In code: PUT /v1/mcp-servers/{id}/tools/{tool_name}/label with {"label": "read_only"}, or everruns mcp-servers label-tool and suggest-labels on the CLI. Label changes are in the server’s history.

See Which tools ask before they run and #4475, #4498.