MCP server moves write approval from the model to the user via elicitation

·1 views

A developer building an MCP server for a store's REST API found that the confirm flag guarding its write tools was set by the model itself, not by a person. The model could skip the dry-run preview or be steered by prompt injection into applying changes. A related problem was that a preview and its write were separate calls with nothing linking them, so the applied amount could differ from the previewed one. To fix this, the server now uses MCP's elicitation feature to show the user the real dry-run numbers and ask for approval directly. The model is not involved in that answer. The author notes that the server still falls back to applying changes when the client does not support elicitation.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Guide Offers Ideas for Using a VM/370 CE Mainframe Emulation Machine

A post on the Fun with Big Computers site describes enjoyable projects for owners of a VM/370 Community Edition system. The article is hosted on GitHub Pages and was shared on Hacker News, where it received 5 points and no comments at the time of capture. The available text consists only of the article link and metadata, so the specific activities it covers cannot be confirmed from this material. VM/370 is an IBM mainframe operating system from the 1970s, and the Community Edition allows enthusiasts to run it on modern hardware. The piece is aimed at hobbyists interested in exploring classic mainframe computing.

0 comments Read more at Hacker News

ProgrammingDEV Community ·

Sole Trader Builders Face Quarterly HMRC Reporting as Digital Receipts Become Necessary

Sole traders and landlords with qualifying income over fifty thousand pounds began Making Tax Digital for Income Tax on 6 April 2026. They must keep digital records of income and expenses and send quarterly updates to HMRC through compatible software instead of a single annual return. The threshold drops to thirty thousand pounds in April 2027 and twenty thousand pounds in April 2028, and it applies to turnover rather than profit. The rules require each transaction to be recorded digitally, which often means photographing receipts or forwarding invoices to bookkeeping apps. Suppliers serving trade customers are responding by offering emailed itemised receipts, automatic invoice delivery and importable transaction exports.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

AI Safety Agent Shows Gains From Memory in Drug Trial Review Demo

TrialSleuth AI is an agent that reviews a new drug before its first human trial and draws on past results. In a demo, a made-up cancer drug called HLV-772 was reviewed first with memory switched off, producing a generic answer without specific evidence. With memory enabled, the same review flagged concrete risks tied to recalled past studies, including liver impairment, drug interactions, and dosing timing. A new heart-safety finding was then added to memory, and the next review included a heart-monitoring recommendation without any code or prompt changes. The app presents flagged risks for human experts rather than declaring a drug safe.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Ridurre il peso di un PDF scansionato con il downsampling delle immagini in Python

Un PDF creato da foto di telefono è pesante soprattutto perché ogni pagina contiene un JPEG ad alta risoluzione disegnato su una superficie molto più piccola. Per alleggerirlo occorre individuare le immagini, calcolare la loro densità effettiva in pixel per pollice, ricampionarle a un valore adeguato e riscriverle nel file. L'autore propone una soluzione in circa trenta righe di Python con PyMuPDF e Pillow, testata su un contratto di sei pagine di oltre 30 MiB. Il controllo iniziale mostra che le immagini costituiscono quasi l'intero peso del file, mentre testo e struttura ne occupano una quota trascurabile. L'articolo confronta inoltre i risultati con quelli ottenuti dall'editor PDF di un'app desktop sullo stesso file.

0 comments Read more at DEV Community