Tool-calling patterns

Auto-approving read_resource moves MCP's retrieval decision into the model

MCP calls resources application-controlled because the mental model is a human attaching a file. Wrapping them as synthetic client-side tools fixes the context bloat and quietly relocates the gate that designation implied.