Reviewing a Tool Contract

Adding a tool is adding a promise about what an agent may do. The review is small but it is the step that keeps an unreviewed server out of the running set.

Read the description for claims about other tools, for requests to forward credentials, and for text that addresses the agent rather than describing inputs and outputs. None of those are contracts, and each is a reason to keep the tool out until someone reads it properly.

def review(meta):
    problems = []
    if 'other tool' in (meta.get('description') or '').lower():
        problems.append('references other tools')
    return problems

Keep an allowlist of reviewed tools so a new server is quarantined by default rather than trusted on arrival.