AgentTool — the model can call it, the runtime renders it as a card, and you don’t need any custom glue on the agent side.
Register a server
MCP servers are exposed through the extension runtime (packages/coding-agent/src/core/extensions/). Register an MCP-capable extension the same way you register any other extension:
How it looks to the model
Once registered, the MCP server’s tools appear in the model’s tool list. Each tool implements the standardAgentTool interface (execute, prepareArguments) so the model treats it identically to a built-in tool. Tool cards render the same way as tool cards for shell or IPython.
Capability gating
If an MCP extension affects daemon behavior (not just adds tools), it must sit behind a negotiated capability gate. The daemon protocol won’t send new commands to clients that didn’t advertise the capability, so mixed old-client / new-daemon setups keep working. See Daemon protocol.Related
- Tools, skills, and extensions — the three-tier capability model.
- Extensions — the general mechanism MCP builds on.