MCP tools are namespaced as
mcp__{server_name}__{tool_name} to avoid name collisions, and tools annotated with readOnlyHint are recognized as read-only by the permission system (auto-allowed in EXPLORE and ACCEPT_EDITS modes; in DEFAULT they still ASK unless an allow rule matches).
Register MCP Client
Build one or moreMCPClient instances and pass them to Toolkit(mcps=[...]). Stateful clients must be connected before the toolkit is constructed.
Filter Exposed Tools
To expose only a subset of an MCP server’s tools, setenable_tools or disable_tools on the client itself:
Use MCP Tools Outside a Toolkit
If you need to invoke MCP tools outside aToolkit, call await client.list_tools() to retrieve a list of MCPTool adapters and use them like any other ToolBase instance.