Gemini CLI patch discloses that MCP Plan Mode read-only is only server-declared
cybrdude · ghdev · 2026-07-27
- A PR to google-gemini/gemini-cli changes Plan Mode confirmation UI so it explicitly says when an MCP tool is marked read-only by the server, and that Gemini CLI has not verified the claim.
- The issue is that readOnlyHint is a server-supplied annotation; Gemini CLI used it to move tools out of the deny-all Plan Mode path into askuser, so a server could influence which of its tools become available for confirmation.
- The confirmation prompt still blocks execution, but the new disclosure makes the trust boundary visible to users.
- The patch adds a serverDeclaredReadOnly flag through the tool confirmation path and updates tests and layout handling.
More from coding & agent
- MyClaw adds $100 to $200 in AI credits on annual Pro, Max and Ultra plans — manishkhosiya · 2026-07-28
- MyClaw lets subscribers try OpenClaw and Hermes Max plans for 30 days — manishkhosiya · 2026-07-28
- MyClaw adds connectors for Gmail, Slack, GitHub, Shopify and more — manishkhosiya · 2026-07-28
- MyClaw pitches 30-second setup and 24/7 hosting for AI agents — manishkhosiya · 2026-07-28
- Microsoft open-sources a governance toolkit for autonomous AI agents — microsoft · 2026-07-28
- A Python repo turns technical book PDFs into Claude Code skills — virgiliojr94 · 2026-07-28