OptionalargumentOptional MCP-facing argument contract for this capability.
Deployment families where this capability is functional. Defaults to ['any'].
OptionalidentityIdentity surface this capability operates on. Set from OperationCapabilityMeta.identitySurface when available.
OptionalirreversibleWhether this capability has no platform-native undo once it completes. Set from OperationCapabilityMeta.irreversible when declared; absent otherwise (not inferred, unlike destructive/riskClass — there's no reliable naming-convention signal for irreversibility).
OptionalnotesOptional human-readable note surfaced in discovery and validation output.
OptionalobjectGlob-style object type patterns this capability applies to. Set from OperationCapabilityMeta.objectTypePatterns when available.
OptionalparametersOptional ordered/named parameter metadata for this capability.
OptionalpreferredDeployment families where this capability is the preferred/optimal choice. Set from OperationCapabilityMeta.preferredDeploymentTypes when available; absent when no explicit preference has been declared.
OptionalrequiredA credential beyond the standard AM/IDM bearer token this capability requires. When set, the runtime verifies it's present on the dispatching Frodo instance's state before invoking the descriptor, and fails fast with an actionable error instead of letting the underlying API call 401. Set from OperationCapabilityMeta.requiredCredential when available.
OptionalscopeOptional selector value used to disambiguate generic capabilities.
OptionalsemanticCurated natural-language phrases used to retrieve this capability.
OptionalsupportsWhether the generic tool supports includeTotal for this capability.
OptionalsupportsWhether the generic tool supports paging hints for this capability.
OptionalsupportsWhether the generic tool supports realm override for this capability.
Caller-privilege tier this capability is safe to expose to. Defaults to
'full-trust' (see McpCapabilityTrustTier) — a conservative
allow-list posture where every capability requires the maintainer to
deliberately opt in a narrower tier, mirroring how deploymentTypes
always resolves to at least ['any'] rather than being left unset.
Set from OperationCapabilityMeta.trustTier when declared.
Canonical capability descriptor produced by inventory/registry builders.