v0.4.3 — Read-only / Write-delete tool grouping

Tool permissions panel now groups Read-only and Write/delete

The Tool Permissions UI in Claude Desktop renders an MCP server's tools grouped by their readOnlyHint and destructiveHint annotations. Without those, every tool dumped into a single "Other tools" bucket — so users couldn't bulk-allow reads while keeping writes on Ask, and tool names were the raw accela_search_records form.

This release adds annotations + friendly titles to all 52 tools.

Changed

• Read-only tools (39) — discovery, all *_read tools, reference data, GIS, search, list reports, and accela_auth_status. Annotated readOnlyHint=true, destructiveHint=false, idempotentHint=true.
• Write/delete tools (13) — all *_write tools, admin escape hatch, run report, and accela_login. Annotated destructiveHint=true.
• Friendly titles on every tool (e.g. “Search Records” instead of accela_search_records) shown in the permissions UI alongside the toggle.
• accela_auth_status uses openWorldHint=false (reads only the local token store); everything else stays true.

Added

• read_only_annotations(title, *, open_world=True), destructive_annotations(title, *, idempotent=False), and auth_login_annotations(title) helpers in tools/_base.py. The destructive helper is named with the _annotations suffix to avoid a collision with accela_mcp.safety.write_tool — the existing dry-run / audit-log decorator that wraps each write tool's body.

Upgrading

• Claude Desktop: download accela-mcp-0.4.3.mcpb below and drag onto the Extensions panel — replaces 0.4.2 in place. After the bundle reloads, the Tool Permissions section splits into Read-only / Write/delete with the friendly titles.
• CLI: uv tool upgrade accela-mcp. Annotations are part of the MCP protocol payload; any host that respects them (Claude Desktop, recent Cursor builds) gets the grouping.