Tool Annotations as Risk Vocabulary: What Hints Can and Can't Do

MCP tool annotations were introduced nearly a year ago as a way for servers to describe the behavior of their tools — whether they’re read-only, destructive, idempotent, or reach outside their local environment.