Frog-and-Toad meme nails why GET-only tool filters don't make agents read-only

jessi_cata · x · 2026-09-05

An AI-circle meme in Frog-and-Toad style: Frog adds a filter allowing only GET requests in tool calls, declaring 'Now we will not write anything to the Internet.' Toad replies, 'But we can use GET requests to write data to a wiki.'

The joke lands on a real security pitfall: restricting agents by HTTP verb doesn't guarantee read-only behavior, since many APIs produce side effects through GET parameters — a reminder that naive guardrail designs are easily bypassed.

Original post →

More from Fun

Fun channel →