added mcp ui as tool

app/src/modules/mcp/$object.ts

@@ -53,6 +53,10 @@ export class ObjectToolSchema<
                   })
                   .optional(),
             }),
+            annotations: {
+               readOnlyHint: true,
+               destructiveHint: false,
+            },
          },
          async (params, ctx: AppToolHandlerCtx) => {
             const configs = ctx.context.app.toJSON(params.secrets);

app/src/modules/mcp/$record.ts

@@ -69,6 +69,10 @@ export class RecordToolSchema<
                   })
                   .optional(),
             }),
+            annotations: {
+               readOnlyHint: true,
+               destructiveHint: false,
+            },
          },
          async (params, ctx: AppToolHandlerCtx) => {
             const configs = ctx.context.app.toJSON(params.secrets);

app/src/modules/server/AdminController.tsx

@@ -91,7 +91,7 @@ export class AdminController extends Controller {
          logout: "/api/auth/logout",
       };
 
-      const paths = ["/", "/data/*", "/auth/*", "/media/*", "/flows/*", "/settings/*"];
+      const paths = ["/", "/data/*", "/auth/*", "/media/*", "/flows/*", "/settings/*", "/tools/*"];
       if (isDebug()) {
          paths.push("/test/*");
       }

app/src/modules/server/SystemController.ts

@@ -131,7 +131,11 @@ export class SystemController extends Controller {
             summary: "Get the config for a module",
             tags: ["system"],
          }),
-         mcpTool("system_config"), // @todo: ":module" gets not removed
+         mcpTool("system_config", {
+            annotations: {
+               readOnlyHint: true,
+            },
+         }), // @todo: ":module" gets not removed
          jsc("param", s.object({ module: s.string({ enum: MODULE_NAMES }).optional() })),
          jsc("query", s.object({ secrets: s.boolean().optional() })),
          async (c) => {