From 54666faed39647037682b61f6b6a510b044e6c64 Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 6 Nov 2026 16:51:52 +0000 Subject: [PATCH] docs(skills): teach MCP delete_record's confirm: true in the objectstack-ai tools table The MCP delete_record tool refuses a call without confirm: true and answers ACTION_CONFIRMATION_REQUIRED (428). The objectstack-ai skill's tools table said only that delete_record is annotated destructive, so an agent following it sent no confirm and was refused. The row now names the member, the refusal code, and the ask-the-human-first step. Co-Authored-By: Claude Claude-Session: https://claude.ai/code/session_01J8VVAmcenQmYUv4fvtB68m --- .changeset/30863-skills-ai-delete-record-confirm.md | 8 ++++++++ skills/objectstack-ai/SKILL.md | 2 +- 2 files changed, 9 insertions(+), 1 deletion(-) create mode 100644 .changeset/30863-skills-ai-delete-record-confirm.md diff --git a/.changeset/30863-skills-ai-delete-record-confirm.md b/.changeset/30863-skills-ai-delete-record-confirm.md new file mode 100644 index 00000000000..764679cb9c1 --- /dev/null +++ b/.changeset/30863-skills-ai-delete-record-confirm.md @@ -0,0 +1,8 @@ +--- +'@objectstack/skills': patch +--- + +docs(skills): the `objectstack-ai` skill's MCP tools table now teaches that `delete_record` needs `confirm: true` — a call without it is refused with `ACTION_CONFIRMATION_REQUIRED` (428), so the agent asks the human first, then retries. The row said only that `delete_record` is annotated destructive, so an agent following it was refused since the MCP tool started requiring confirmation. + +Clause-②: no +Metadata-protocol: none diff --git a/skills/objectstack-ai/SKILL.md b/skills/objectstack-ai/SKILL.md index acf4002ffeb..0c825865a04 100644 --- a/skills/objectstack-ai/SKILL.md +++ b/skills/objectstack-ai/SKILL.md @@ -199,7 +199,7 @@ permissions and row-level security: | `query_records`, `get_record` | reads — filter, field selection, sorting, pagination | | `aggregate_records` | GROUP BY totals; registered only when the data bridge implements `aggregate` | | `validate_expression` | build-accurate CEL check before a formula is authored into metadata | -| `create_record`, `update_record`, `delete_record` | writes; `delete_record` is annotated destructive | +| `create_record`, `update_record`, `delete_record` | writes; `delete_record` is refused with `ACTION_CONFIRMATION_REQUIRED` (428) unless it sends `confirm: true` — ask the human first, then retry | | `list_actions`, `run_action` | your AI-exposed business Actions — the same `ai.exposed` opt-in as above | ---