Server definition
- Hash
- sha256:4b8a2d2aca533c8b4b977d81162183fe8ea76e595b2cc9928d174754375ee012
- What it is
- What a remote MCP server returned when asked what it offers: 4 tools
The blob, as servednamed by its sha256
{
"instructions": null,
"tools": [
{
"description": "Analyze a proposed AI-agent tool call before execution and return a deterministic, policy-aware decision (allow, notice, confirm or block) covering destructive actions, sensitive-data exposure, external transmission, privilege changes and irreversible operations, under the applicable policy — permissive, balanced or strict, balanced by default. Filesystem paths outside a known workspace_root are treated as higher risk than paths inside it.",
"inputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"arguments": {
"anyOf": [
{
"additionalProperties": {},
"type": "object"
},
{
"items": {},
"type": "array"
},
{
"type": "string"
},
{
"type": "number"
},
{
"type": "boolean"
},
{
"type": "null"
}
],
"description": "The proposed tool arguments. They are analyzed as data and never executed."
},
"context": {
"additionalProperties": false,
"description": "Optional declarative context about the proposed operation.",
"properties": {
"description": {
"maxLength": 4096,
"type": "string"
},
"destination": {
"maxLength": 4096,
"type": "string"
},
"operation": {
"maxLength": 4096,
"type": "string"
},
"target_type": {
"maxLength": 4096,
"type": "string"
},
"workspace_root": {
"description": "Optional workspace root. Filesystem paths that resolve outside it are treated as higher risk than paths inside it.",
"maxLength": 4096,
"type": "string"
}
},
"type": "object"
},
"policy": {
"description": "Optional policy used to compute the decision: permissive, balanced or strict (default: balanced).",
"enum": [
"permissive",
"balanced",
"strict"
],
"type": "string"
},
"tool_name": {
"description": "The exact name of the proposed tool.",
"maxLength": 256,
"minLength": 1,
"type": "string"
}
},
"required": [
"tool_name",
"arguments"
],
"type": "object"
},
"name": "analyze_tool_call",
"outputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"checks": {
"additionalProperties": false,
"properties": {
"account_or_identity_action": {
"type": "boolean"
},
"code_execution": {
"type": "boolean"
},
"communication_action": {
"type": "boolean"
},
"destructive_action": {
"type": "boolean"
},
"external_destination": {
"type": "boolean"
},
"filesystem_mutation": {
"type": "boolean"
},
"financial_action": {
"type": "boolean"
},
"irreversible_action": {
"type": "boolean"
},
"network_action": {
"type": "boolean"
},
"permission_change": {
"type": "boolean"
},
"possible_exfiltration": {
"type": "boolean"
},
"possible_secret_exposure": {
"type": "boolean"
},
"privilege_change": {
"type": "boolean"
},
"sensitive_data_present": {
"type": "boolean"
}
},
"required": [
"destructive_action",
"irreversible_action",
"privilege_change",
"permission_change",
"sensitive_data_present",
"possible_secret_exposure",
"external_destination",
"possible_exfiltration",
"financial_action",
"communication_action",
"account_or_identity_action",
"code_execution",
"filesystem_mutation",
"network_action"
],
"type": "object"
},
"context_completeness": {
"enum": [
"full",
"partial",
"none"
],
"type": "string"
},
"decision": {
"enum": [
"allow",
"notice",
"confirm",
"block"
],
"type": "string"
},
"policy_applied": {
"enum": [
"permissive",
"balanced",
"strict"
],
"type": "string"
},
"risk": {
"enum": [
"safe",
"low",
"medium",
"high",
"critical"
],
"type": "string"
},
"risk_score": {
"type": "number"
},
"ruleset_version": {
"type": "string"
},
"schema_version": {
"type": "string"
},
"signals": {
"items": {
"additionalProperties": false,
"properties": {
"code": {
"type": "string"
},
"message": {
"type": "string"
},
"score": {
"type": "number"
},
"severity": {
"enum": [
"info",
"low",
"medium",
"high",
"critical"
],
"type": "string"
}
},
"required": [
"code",
"severity",
"score",
"message"
],
"type": "object"
},
"type": "array"
},
"tool_name": {
"type": [
"string",
"null"
]
},
"valid": {
"type": "boolean"
}
},
"required": [
"valid",
"tool_name",
"risk",
"risk_score",
"decision",
"policy_applied",
"ruleset_version",
"schema_version",
"context_completeness",
"signals",
"checks"
],
"type": "object"
}
},
{
"description": "Analyze a URL for structural and security risk signals and return a deterministic, policy-aware decision (allow, notice, confirm or block) under the applicable policy — permissive, balanced or strict, balanced by default.",
"inputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"context": {
"additionalProperties": false,
"description": "Optional declarative context.",
"properties": {
"workspace_root": {
"description": "Accepted for contract consistency; URL analysis has no filesystem paths to scope, so it has no effect here.",
"type": "string"
}
},
"type": "object"
},
"policy": {
"description": "Optional policy used to compute the decision: permissive, balanced or strict (default: balanced).",
"enum": [
"permissive",
"balanced",
"strict"
],
"type": "string"
},
"url": {
"description": "The absolute URL to analyze.",
"minLength": 1,
"type": "string"
}
},
"required": [
"url"
],
"type": "object"
},
"name": "analyze_url_risk",
"outputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"checks": {
"additionalProperties": false,
"properties": {
"cloud_metadata_host": {
"type": "boolean"
},
"dangerous_scheme": {
"type": "boolean"
},
"embedded_credentials": {
"type": "boolean"
},
"excessive_length": {
"type": "boolean"
},
"excessive_subdomains": {
"type": "boolean"
},
"executable_path": {
"type": "boolean"
},
"private_or_local_host": {
"type": "boolean"
},
"raw_ip_host": {
"type": "boolean"
},
"suspicious_keywords": {
"type": "boolean"
},
"suspicious_port": {
"type": "boolean"
},
"unicode_or_punycode_host": {
"type": "boolean"
},
"url_shortener": {
"type": "boolean"
}
},
"required": [
"dangerous_scheme",
"embedded_credentials",
"raw_ip_host",
"private_or_local_host",
"cloud_metadata_host",
"unicode_or_punycode_host",
"suspicious_port",
"excessive_subdomains",
"suspicious_keywords",
"executable_path",
"url_shortener",
"excessive_length"
],
"type": "object"
},
"context_completeness": {
"enum": [
"full",
"partial",
"none"
],
"type": "string"
},
"decision": {
"enum": [
"allow",
"notice",
"confirm",
"block"
],
"type": "string"
},
"domain": {
"type": [
"string",
"null"
]
},
"hostname": {
"type": [
"string",
"null"
]
},
"input": {
"type": "string"
},
"normalized_url": {
"type": [
"string",
"null"
]
},
"policy_applied": {
"enum": [
"permissive",
"balanced",
"strict"
],
"type": "string"
},
"port": {
"type": [
"string",
"null"
]
},
"protocol": {
"type": [
"string",
"null"
]
},
"public_suffix": {
"type": [
"string",
"null"
]
},
"risk": {
"enum": [
"safe",
"low",
"medium",
"high",
"critical"
],
"type": "string"
},
"risk_score": {
"type": "number"
},
"ruleset_version": {
"type": "string"
},
"schema_version": {
"type": "string"
},
"signals": {
"items": {
"additionalProperties": false,
"properties": {
"code": {
"type": "string"
},
"message": {
"type": "string"
},
"score": {
"type": "number"
},
"severity": {
"enum": [
"info",
"low",
"medium",
"high",
"critical"
],
"type": "string"
}
},
"required": [
"code",
"severity",
"score",
"message"
],
"type": "object"
},
"type": "array"
},
"subdomain": {
"type": [
"string",
"null"
]
},
"valid": {
"type": "boolean"
}
},
"required": [
"valid",
"input",
"normalized_url",
"hostname",
"domain",
"public_suffix",
"subdomain",
"protocol",
"port",
"risk",
"risk_score",
"decision",
"policy_applied",
"ruleset_version",
"schema_version",
"context_completeness",
"signals",
"checks"
],
"type": "object"
}
},
{
"description": "Analyze a shell command before execution and return a deterministic, policy-aware decision (allow, notice, confirm or block) without running it, under the applicable policy — permissive, balanced or strict, balanced by default. Paths outside a known workspace_root are treated as higher risk than paths inside it.",
"inputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"command": {
"description": "The complete command text to inspect without executing it.",
"maxLength": 16384,
"minLength": 1,
"type": "string"
},
"context": {
"additionalProperties": false,
"description": "Optional declarative context.",
"properties": {
"workspace_root": {
"description": "Optional workspace root. Paths that resolve outside it are treated as higher risk than paths inside it.",
"maxLength": 4096,
"type": "string"
}
},
"type": "object"
},
"cwd": {
"description": "Optional working-directory context. It is never accessed.",
"maxLength": 4096,
"type": "string"
},
"policy": {
"description": "Optional policy used to compute the decision: permissive, balanced or strict (default: balanced).",
"enum": [
"permissive",
"balanced",
"strict"
],
"type": "string"
},
"shell": {
"description": "The command shell, when known.",
"enum": [
"bash",
"sh",
"zsh",
"powershell",
"cmd",
"unknown"
],
"type": "string"
}
},
"required": [
"command"
],
"type": "object"
},
"name": "inspect_command",
"outputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"checks": {
"additionalProperties": false,
"properties": {
"command_chaining": {
"type": "boolean"
},
"destructive_filesystem": {
"type": "boolean"
},
"network_access": {
"type": "boolean"
},
"network_download": {
"type": "boolean"
},
"network_transfer": {
"type": "boolean"
},
"obfuscated_execution": {
"type": "boolean"
},
"permission_change": {
"type": "boolean"
},
"persistence_change": {
"type": "boolean"
},
"possible_exfiltration": {
"type": "boolean"
},
"privilege_escalation": {
"type": "boolean"
},
"remote_code_execution": {
"type": "boolean"
},
"root_target": {
"type": "boolean"
},
"sensitive_file_access": {
"type": "boolean"
},
"shell_spawning": {
"type": "boolean"
},
"system_modification": {
"type": "boolean"
}
},
"required": [
"destructive_filesystem",
"root_target",
"privilege_escalation",
"network_access",
"network_download",
"network_transfer",
"remote_code_execution",
"sensitive_file_access",
"possible_exfiltration",
"permission_change",
"persistence_change",
"system_modification",
"obfuscated_execution",
"command_chaining",
"shell_spawning"
],
"type": "object"
},
"command": {
"type": [
"string",
"null"
]
},
"context_completeness": {
"enum": [
"full",
"partial",
"none"
],
"type": "string"
},
"cwd": {
"type": [
"string",
"null"
]
},
"decision": {
"enum": [
"allow",
"notice",
"confirm",
"block"
],
"type": "string"
},
"policy_applied": {
"enum": [
"permissive",
"balanced",
"strict"
],
"type": "string"
},
"risk": {
"enum": [
"safe",
"low",
"medium",
"high",
"critical"
],
"type": "string"
},
"risk_score": {
"type": "number"
},
"ruleset_version": {
"type": "string"
},
"schema_version": {
"type": "string"
},
"shell": {
"enum": [
"bash",
"sh",
"zsh",
"powershell",
"cmd",
"unknown"
],
"type": "string"
},
"signals": {
"items": {
"additionalProperties": false,
"properties": {
"code": {
"type": "string"
},
"message": {
"type": "string"
},
"score": {
"type": "number"
},
"severity": {
"enum": [
"info",
"low",
"medium",
"high",
"critical"
],
"type": "string"
}
},
"required": [
"code",
"severity",
"score",
"message"
],
"type": "object"
},
"type": "array"
},
"valid": {
"type": "boolean"
}
},
"required": [
"valid",
"command",
"shell",
"cwd",
"risk",
"risk_score",
"decision",
"policy_applied",
"ruleset_version",
"schema_version",
"context_completeness",
"signals",
"checks"
],
"type": "object"
}
},
{
"description": "Inspect a Base64-encoded file locally for deterministic structural and security risk signals without executing it, and return a policy-aware decision (allow, notice, confirm or block) under the applicable policy — permissive, balanced or strict, balanced by default.",
"inputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"content_base64": {
"description": "The complete file content encoded as canonical Base64 (maximum decoded size: 1 MiB).",
"type": "string"
},
"context": {
"additionalProperties": false,
"description": "Optional declarative context.",
"properties": {
"workspace_root": {
"description": "Accepted for contract consistency; file inspection has no filesystem paths to scope, so it has no effect here.",
"type": "string"
}
},
"type": "object"
},
"filename": {
"description": "The original filename, including its extension.",
"minLength": 1,
"type": "string"
},
"policy": {
"description": "Optional policy used to compute the decision: permissive, balanced or strict (default: balanced).",
"enum": [
"permissive",
"balanced",
"strict"
],
"type": "string"
}
},
"required": [
"filename",
"content_base64"
],
"type": "object"
},
"name": "inspect_file",
"outputSchema": {
"$schema": "http://json-schema.org/draft-07/schema#",
"additionalProperties": false,
"properties": {
"checks": {
"additionalProperties": false,
"properties": {
"dangerous_extension": {
"type": "boolean"
},
"double_extension": {
"type": "boolean"
},
"empty_file": {
"type": "boolean"
},
"exceeds_size_limit": {
"type": "boolean"
},
"executable_content": {
"type": "boolean"
},
"extension_type_mismatch": {
"type": "boolean"
},
"suspicious_filename": {
"type": "boolean"
}
},
"required": [
"empty_file",
"exceeds_size_limit",
"dangerous_extension",
"double_extension",
"executable_content",
"extension_type_mismatch",
"suspicious_filename"
],
"type": "object"
},
"context_completeness": {
"enum": [
"full",
"partial",
"none"
],
"type": "string"
},
"decision": {
"enum": [
"allow",
"notice",
"confirm",
"block"
],
"type": "string"
},
"declared_extension": {
"type": [
"string",
"null"
]
},
"detected_type": {
"type": [
"string",
"null"
]
},
"filename": {
"type": [
"string",
"null"
]
},
"policy_applied": {
"enum": [
"permissive",
"balanced",
"strict"
],
"type": "string"
},
"risk": {
"enum": [
"safe",
"low",
"medium",
"high",
"critical"
],
"type": "string"
},
"risk_score": {
"type": "number"
},
"ruleset_version": {
"type": "string"
},
"schema_version": {
"type": "string"
},
"sha256": {
"type": [
"string",
"null"
]
},
"signals": {
"items": {
"additionalProperties": false,
"properties": {
"code": {
"type": "string"
},
"message": {
"type": "string"
},
"score": {
"type": "number"
},
"severity": {
"enum": [
"info",
"low",
"medium",
"high",
"critical"
],
"type": "string"
}
},
"required": [
"code",
"severity",
"score",
"message"
],
"type": "object"
},
"type": "array"
},
"size_bytes": {
"type": [
"number",
"null"
]
},
"valid": {
"type": "boolean"
}
},
"required": [
"valid",
"filename",
"detected_type",
"declared_extension",
"size_bytes",
"sha256",
"risk",
"risk_score",
"decision",
"policy_applied",
"ruleset_version",
"schema_version",
"context_completeness",
"signals",
"checks"
],
"type": "object"
}
}
]
}Verify it yourself
curl -s https://api.teppi.xyz/v1/evidence/sha256:4b8a2d2aca533c8b4b977d81162183fe8ea76e595b2cc9928d174754375ee012 | sha256sum