A new discovered tool requests secret access. What happens?
Practice this question- The host should not automatically expose or execute it.
- Tool descriptions are untrusted unless reviewed; allowlists and execution policy block capabilities outside the task.
- I investigate the server/definition change and preserve an audit record.
Adapted from 13_AI.MD · “29.9 MCP”. Code examples are study fragments. Difficulty and core labels are editorial estimates; version-specific behavior should be checked against your project.