MCP annotations are a UX layer, not a security layer

Published May 5, 2026 by gyorgy When the Model Context Protocol added tool annotations like readOnlyHint, destructiveHint, and idempotentHint, a lot of MCP server authors and host implementers read th