The default policy for an mcp-z server: catalogs are shareable, anything
derived from a user's account is not.
cacheScope: 'public' permits a shared cache to serve one client's copy to
another, so it is only ever correct for a result identical for every caller.
A tool, prompt or resource-template catalog is fixed at registration and does
not vary by who is asking. A resource list or read does — a Drive file listing
or a spreadsheet's contents belongs to one account — so those stay private,
and marking them public would hand one user's data to another. That is the
one value in this file where a mistake is a data leak rather than a slow cache.
Spread it into new McpServer(info, { ...defaultCacheHints }), or pass a
merged object to override a single operation.
The default policy for an mcp-z server: catalogs are shareable, anything derived from a user's account is not.
cacheScope: 'public'permits a shared cache to serve one client's copy to another, so it is only ever correct for a result identical for every caller. A tool, prompt or resource-template catalog is fixed at registration and does not vary by who is asking. A resource list or read does — a Drive file listing or a spreadsheet's contents belongs to one account — so those stayprivate, and marking thempublicwould hand one user's data to another. That is the one value in this file where a mistake is a data leak rather than a slow cache.Spread it into
new McpServer(info, { ...defaultCacheHints }), or pass a merged object to override a single operation.