MCP annotations have nowhere to go
readOnlyHint and its siblings are how a client decides what needs confirmation, and no other format has them
to: anthropic
{
"name": "delete_file",
"description": "Delete a file. Use this when the user asks to remove one.",
"inputSchema": { "type": "object", "properties": { "path": { "type": "string" } } },
"annotations": { "destructiveHint": true, "idempotentHint": false }
}