Antigravity CLI 1.3.3 lets MCP servers mark tools as always loaded and blocks sandbox reads of macOS app data
MCP servers can now set _meta: {"antigravity/alwaysLoad": true} on a tool so the agent gets it directly instead of discovering it on demand, and plugins can declare subagents in a root-level agents.json. The macOS sandbox also now blocks commands from reading ~/Library/Application Support, where desktop apps keep credentials, unless you allow it.