TODO_TAGS_REVIEW

MCP Tool Scope & Revocation Auditor

Audit scoped and revocable MCP tool access per the new MCP specification: each granted tool must carry an explicit scope array, a revocation endpoint must be configured (https-scheme), and token rotation posture (max age vs elapsed time, next-key presence) must be healthy. Emits per-tool grant verdict and gap list. Feeds the on-behalf-of mandate validator (art-151). Zero network, zero PII.

Tool URL: https://ainumbers.co/chaingraph/art-150-mcp-tool-scope-revocation-auditor.html AP2/Policy Mandate export: yes

post/v1/tools/audit_mcp_tool_scope_revocation

Request

  • Base URL: https://ainumbers.co
  • URL: https://ainumbers.co/v1/tools/audit_mcp_tool_scope_revocation
  • Auth: none declared

Request body

max_token_age_sunknown
next_token_presentunknown
now_unixunknown
revocation_endpointunknown
token_created_unixunknown
tool_grantsunknown

Response

Successful tool execution result

audit_passboolean
revocableboolean
rotation_okboolean
scopes_okboolean
token_age_sinteger

Changes

No recorded changes to this operation across all 1 revision of this API.