MCP profile

Profile / auths.mcp/1

Verified MCP tool call● Executable

action

database.query

audience

mcp://analytics-service

authority

root → orchestrator → agent

constraints

analytics/orders · read-only · 500 rows

verified locallynetwork / 0

auths-profile-mcp maps MCP tool-call semantics to exact canonical bytes and an Auths permission. It does not verify proofs and does not depend on networking.

Enforcement flow

1. A server issues an audience- and profile-bound challenge.
2. The client authors a canonical MCP action and proof.
3. Exchange carries the bytes to the service.
4. The service verifies against its explicit context.
5. McpProfile decodes an McpCommand only from VerifiedAction.
6. Runtime claims replay and budget state atomically.
7. The executor receives the verified command.

Receipts

The reference runtime emits content-addressed canonical decision receipts for authorized, denied, and indeterminate evaluations. It emits a separate execution receipt after an authorized command succeeds or fails.

Caution

Prompt content and model intent are not authority. A tool call becomes executable only after the server resolves its proof against the exact canonical call.