Repository navigation
Code mode: inline code_execute and in-sandbox amcp.* discovery tools #1364
Description
Summary
The generic inline code tool and the in-sandbox discovery meta-tools. Depends on #1361, #1362, #1363.
Scope
code_execute: a tool that runs an ad-hoc program (model-authored) through the code-runner, read-only (bridge rejects write tools), with the invoker's rights. Offered only when the server'scodeMode = 'inline'and the caller's role has theinlineCodecapability.amcp.search/amcp.describe/amcp.runinside the sandbox: map to the existing shared-toolset search/describe/run so code discovers and calls tools the same way the model does over/mcp.runis read/write-gated exactly like a direct call.- Wire into both the shared
/mcptoolset and the per-server endpoint, honouring the same role scope, connector reach and shared-endpoint exclusions (payments read-only, crypto hidden).
Out of scope
Saved code tools (#1363); plan gating and Cloud quotas (gating issue).
Activity
helpcodeai commentedon Oct 31, 2026
Implemented on the per-server endpoint (commit 381582f): the
code_executetool and the in-sandboxamcp.search/describe/runbridge, read-only with the caller's own permissions, offered only when the server'scodeModeisinline, a runner is configured, and the caller's role carries theinlineCodecapability (RolesService.getCapabilities). Exposing inline code on the shared/mcpendpoint is deferred as an Enterprise-gated design (see #1365); code tools are currently excluded from the shared endpoint entirely.helpcodeai commentedon Oct 31, 2026
Delivered in PR #1366 (merged into main as be4742a). Code mode ships off by default; the agent-proposal follow-up is tracked in #1369, and the Cloud runner operations in this issue remain operational/out-of-repo.
Add inline code_execute tool and role capabilities
Never serve code tools on the shared /mcp endpoint
Document code mode