feat(mcp): enable optional code execution tool on http mcp servers

Author: stainless-app[bot]

packages/mcp-server/src/options.ts

@@ -284,8 +284,10 @@ const coerceArray = <T extends z.ZodTypeAny>(zodType: T) =>
   );
 
 const QueryOptions = z.object({
-  tools: coerceArray(z.enum(['dynamic', 'all', 'docs'])).describe('Use dynamic tools or all tools'),
-  no_tools: coerceArray(z.enum(['dynamic', 'all', 'docs'])).describe('Do not use dynamic tools or all tools'),
+  tools: coerceArray(z.enum(['dynamic', 'all', 'code', 'docs'])).describe('Specify which MCP tools to use'),
+  no_tools: coerceArray(z.enum(['dynamic', 'all', 'code', 'docs'])).describe(
+    'Specify which MCP tools to not use.',
+  ),
   tool: coerceArray(z.string()).describe('Include tools matching the specified names'),
   resource: coerceArray(z.string()).describe('Include tools matching the specified resources'),
   operation: coerceArray(z.enum(['read', 'write'])).describe(
@@ -385,11 +387,16 @@ export function parseQueryOptions(defaultOptions: McpOptions, query: unknown): M
     : queryOptions.tools?.includes('docs') ? true
     : defaultOptions.includeDocsTools;
 
+  let codeTools: boolean | undefined =
+    queryOptions.no_tools && queryOptions.no_tools?.includes('code') ? false
+    : queryOptions.tools?.includes('code') && defaultOptions.includeCodeTools ? true
+    : defaultOptions.includeCodeTools;
+
   return {
     client: queryOptions.client ?? defaultOptions.client,
     includeDynamicTools: dynamicTools,
     includeAllTools: allTools,
-    includeCodeTools: undefined,
+    includeCodeTools: codeTools,
     includeDocsTools: docsTools,
     filters,
     capabilities: clientCapabilities,

packages/mcp-server/tests/options.test.ts

@@ -171,6 +171,7 @@ describe('parseQueryOptions', () => {
   const defaultOptions = {
     client: undefined,
     includeDynamicTools: undefined,
+    includeCodeTools: undefined,
     includeAllTools: undefined,
     filters: [],
     capabilities: {
@@ -383,6 +384,27 @@ describe('parseQueryOptions', () => {
       { type: 'tool', op: 'exclude', value: 'exclude-tool' },
     ]);
   });
+
+  it('code tools are enabled on http servers with default option set', () => {
+    const query = 'tools=code';
+    const result = parseQueryOptions({ ...defaultOptions, includeCodeTools: true }, query);
+
+    expect(result.includeCodeTools).toBe(true);
+  });
+
+  it('code tools are prevented on http servers when no default option set', () => {
+    const query = 'tools=code';
+    const result = parseQueryOptions(defaultOptions, query);
+
+    expect(result.includeCodeTools).toBe(undefined);
+  });
+
+  it('code tools are prevented on http servers when default option is explicitly false', () => {
+    const query = 'tools=code';
+    const result = parseQueryOptions({ ...defaultOptions, includeCodeTools: false }, query);
+
+    expect(result.includeCodeTools).toBe(false);
+  });
 });
 
 describe('parseEmbeddedJSON', () => {