Nirmata guide classifies MCP tools by risk

The author outlines a practical method for classifying Model Context Protocol (MCP) tools into read, edit, and delete risk categories using tool hints and documentation review. Because tool annotations are untrusted hints rather than guarantees, the guide recommends treating unannotated tools as delete-class risks and mapping the final classes to client-side permission rules. Open article →