Gemini CLI patch discloses that MCP Plan Mode read-only is only server-declared
cybrdude · ghdev · 2026-07-27
- A PR to google-gemini/gemini-cli changes Plan Mode confirmation UI so it explicitly says when an MCP tool is marked read-only by the server, and that Gemini CLI has not verified the claim.
- The issue is that readOnlyHint is a server-supplied annotation; Gemini CLI used it to move tools out of the deny-all Plan Mode path into askuser, so a server could influence which of its tools become available for confirmation.
- The confirmation prompt still blocks execution, but the new disclosure makes the trust boundary visible to users.
- The patch adds a serverDeclaredReadOnly flag through the tool confirmation path and updates tests and layout handling.
More from coding & agent
- Dev claims 20k more commits coming: Opus 5.5 and GPT-6 Sol supercharge his output — doodlestein · 2026-09-23
- A JEV-powered Wireshark classifier accidentally uncovered real backdoors on a home network — multiply_matrix · 2026-09-23
- 299 real intents tested: classifier routing trails GLM-4-Flash by 3 points but is 6.5x faster — Sufficient_Flower860 · 2026-09-23
- OpenExecutive: open-source virtual executive team of 8 specialist AI agents hits 5.1k GitHub stars — tom_doerr · 2026-09-23
- Framer launches Skills: teach your design agent reusable workflows, design systems and CMS rules — soleio · 2026-09-23
- Cursor, OpenAI and Anthropic shipped coordinator-agent fleets in one week, but the review bottleneck stays — omidfarhang · 2026-09-23