tool-annotations

Maps every OpenAPI operation to r / w / x with a confidence, from HTTP-method semantics (RFC 9110) plus the verb in the path — tighter class on doubt, never a loosening without evidence. Emits MCP tool-annotation hints. Zero deps.

Static ast-based scanner that flags MCP tool definitions shipping without safety annotations (readOnlyHint/destructiveHint/idempotentHint/openWorldHint), so an agent can reason about a tool's blast radius before calling it. Reads FastMCP decorators and low-level types.Tool(...) in Python. Opinionated, low-FP MCP hygiene for CI. stdlib-only.

Generate least-privilege Claude Code permission rules for MCP tools from their live annotations: readOnlyHint tools go to allow, everything else to ask, one mcp__server__tool rule each, never a glob. Merges into settings files, prints a diff, and --check exits 1 when annotations drift. TypeScript CLI on npm.

Small local classifier that scopes r/w/x for API operations on the fly: Jev-shaped JSON answers, a drop-in companion to rwxmap.

Lint MCP tool schemas and annotations before clients reject them: flags non-2020-12 $schema dialects, boolean schemas, bad required lists and missing or contradictory annotations in tools/list, over stdio, Streamable HTTP, legacy SSE or a JSON file. Text, JSON and SARIF output, RFC 6902 --fix patch, GitHub Action.