Struct ToolDescriptor 

pub struct ToolDescriptor {
    pub tool_id: String,
    pub source: ToolSource,
    pub verb: Verb,
    pub description: String,
    pub input_schema: Value,
    pub output_schema: Option<Value>,
    pub capabilities: Vec<String>,
    pub annotations: ToolAnnotations,
    pub usage: ToolUsage,
    pub embedding: Option<Vec<f32>>,
}

Fields

tool_id: String

source: ToolSource

verb: Verb

description: String

UNTRUSTED. When sourced from an MCP server this string is attacker-controllable (CVE-2025-54136 / “MCPoison” class — a hostile server can ship a description crafted to inject instructions into the user’s LLM context). Never inline this directly into a system prompt; route it through sanitization::render_tool_description_for_prompt which strips control bytes, caps length, and fences the body inside a labeled untrusted block. The hash-pin layer in brainos-mcphost detects rug-pull changes to this field; the sanitizer is what stops a single hostile description from landing as live system instructions.

input_schema: Value

output_schema: Option<Value>

capabilities: Vec<String>

annotations: ToolAnnotations

usage: ToolUsage

Reasoner-facing usage guidance. Optional + defaulted so existing producers/consumers stay wire-compatible.

embedding: Option<Vec<f32>>

Trait Implementations

impl Clone for ToolDescriptor

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ToolDescriptor

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ToolDescriptor

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ToolDescriptor

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.