Markets
webmcp-stack Generates Agent Tool Surfaces From an OpenAPI Spec So the Safety Decisions Survive Regeneration
Posted to Show HN 2026-09-06, MIT-licensed, @webmcp-stack/codegen classifies every endpoint as read, write or destructive from its HTTP verb, emits one .webmcp.ts file per tool, embeds user confirmations for mutating operations inside regenerated code regions, and flags untrusted content and possible PII exposure. The argument is that hand-registering tools or asking an LLM to write them yields a different safety posture every time, whereas codegen applies one policy uniformly across the whole API and holds it across regenerations.
↳ Follow the thread