-
When tools became the interface: from a chat bot to 455 MCP tools
In March 2026 my lab ran on scripts and a chat bot. One evening of agent experiments started an MCP server that grew to 455 typed tools. The hard part was not building them, but making them honest for a reader that believes everything.
-
Typed risk annotations for 455 MCP tools
A name-based guess marked 40 mutating MCP tools as read-only. I replaced it with a server-side read/write/critical table published as MCP annotations, with argument-dependent flags and a build gate.
-
An MCP server for a private library, gated per user
Building an MCP connector so AI assistants can search and read my library: FastMCP's 421 Host trap, per-user tokens and role-filtered tools, reading long books, and gating restricted collections without regex bypasses.