---
title: "MCP Tool Scope & Revocation Auditor"
method: POST
path: "/v1/tools/audit_mcp_tool_scope_revocation"
tags: ["TODO_TAGS_REVIEW"]
---

# MCP Tool Scope & Revocation Auditor

`POST /v1/tools/audit_mcp_tool_scope_revocation`

## Request

- Base URL: `https://ainumbers.co`
- URL: `https://ainumbers.co/v1/tools/audit_mcp_tool_scope_revocation`
- Auth: none declared

Audit scoped and revocable MCP tool access per the new MCP specification: each granted tool must carry an explicit scope array, a revocation endpoint must be configured (https-scheme), and token rotation posture (max age vs elapsed time, next-key presence) must be healthy. Emits per-tool grant verdict and gap list. Feeds the on-behalf-of mandate validator (art-151). Zero network, zero PII.

**Tool URL:** https://ainumbers.co/chaingraph/art-150-mcp-tool-scope-revocation-auditor.html
**AP2/Policy Mandate export:** yes

## Request body

- object
  - `max_token_age_s` unknown
  - `next_token_present` unknown
  - `now_unix` unknown
  - `revocation_endpoint` unknown
  - `token_created_unix` unknown
  - `tool_grants` unknown

## Response `200`

Successful tool execution result

- object
  - `audit_pass` boolean
  - `revocable` boolean
  - `rotation_ok` boolean
  - `scopes_ok` boolean
  - `token_age_s` integer
  - `ungated_tools` unknown[]
    - unknown

---

[API](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite.md) · [All operations](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite/llms.txt) · [OpenAPI document](https://skmtc.dev/ainumbers/apis/ainumbers-co-fintech-intelligence-suite/revisions/b462e4f5bb28?raw)