The 2026-07-28 revision states that for trust and safety and security clients MUST consider tool annotations to be untrusted unless they come from trusted servers.

Checked 2026-09-05

clients MUST consider tool annotations to be untrusted unless they come from trusted servers
Vendor
Model Context Protocol project
Product
Model Context Protocol
Subsystem
protocol
Deployment
not restricted
Region
not restricted
Release range
specification revision 2026-07-28
Checked
2026-09-05

Sources

Cite this note

APA

WarmTransfer. (2026, September 5). Tool schema signature monitoring and drift handling: source note sigdrift-spec-annotations-untrusted. WarmTransfer. https://warmtransfer.net/knowledge/claims/sigdrift-spec-annotations-untrusted

BibTeX

@misc{warmtransfer-claim-sigdrift-spec-annotations-untrusted,
  title  = {Tool schema signature monitoring and drift handling: source note sigdrift-spec-annotations-untrusted},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/claims/sigdrift-spec-annotations-untrusted},
  note   = {Source note sigdrift-spec-annotations-untrusted, checked 2026-09-05}
}

Read in context