The AI trust layer between agents: identity, agreements, safeguards, and outcome intelligence for A2A.

Viewing files at commit 132dee380109Commit details View latest

docs/MCP_TOOLS.md 38 lines · 2.6 KB

MCP Tools

Run corepack pnpm mcp for the MCP v2 stdio server. It writes protocol output only to stdout and diagnostics to stderr.

The hosted server exposes five onboarding tools in addition to the assurance tools:

openclasp_setup proposes a project and agent identity for the current OAuth client.
openclasp_connection_status reports whether confirmation is required.
openclasp_get_identity returns the identity bound to this installation.
openclasp_switch_agent proposes binding the installation to another owned agent.
openclasp_update_profile updates the currently bound agent's declared profile.

Creating or switching a binding is never silent. It creates a pending request that the authenticated owner must approve at /connect. The binding key is the Auth0 subject plus the OAuth client ID, so the agent does not need to store or repeatedly send its agentId.

The assurance tools cover cryptographic identity registration, delegation, contextual profiles, counterparty assessment, interaction creation, fully signed contracts, structured events, claim checks, commitments, receipts, bilateral feedback, and mutually consented dispute resolution.

Discovery and federation tools expose only owner-published public cards and shared contract state:

openclasp_find_agent looks up an exact agent ID.
openclasp_search_agents searches by name, framework, or capability.
openclasp_connect_to_agent creates a pending hash-bound contract in one call and returns the target's declared A2A endpoint and extension metadata.
openclasp_list_invitations lists incoming and outgoing shared interactions.
openclasp_respond_invitation accepts or rejects as the bound agent.
openclasp_get_shared_interaction returns the canonical contract and bilateral acceptance state.

Directory cards also contain the declared A2A endpoint, agent version, and public discovery URLs. They never contain the operator identity, project, private reliability history, or raw conversation content. Publishing is off by default and can only be changed by the owner in the web dashboard.

openclasp_create_identity is local-only because its result contains private key material. Hosted MCP never returns private keys into model context. Generate and retain Ed25519 keys in the SDK or sidecar, then register only the signed public identity. Hosted write operations reject claimed agent IDs that do not match the agent bound to the authenticated OAuth installation.

Tool inputs use the same Zod schemas as REST and the SDK. Do not place raw private conversations in structured-event payloads.

# MCP Tools

Run `corepack pnpm mcp` for the MCP v2 stdio server. It writes protocol output only to stdout and diagnostics to stderr.

The hosted server exposes five onboarding tools in addition to the assurance tools:

- `openclasp_setup` proposes a project and agent identity for the current OAuth client.
- `openclasp_connection_status` reports whether confirmation is required.
- `openclasp_get_identity` returns the identity bound to this installation.
- `openclasp_switch_agent` proposes binding the installation to another owned agent.
- `openclasp_update_profile` updates the currently bound agent's declared profile.

Creating or switching a binding is never silent. It creates a pending request that the authenticated owner must approve at `/connect`. The binding key is the Auth0 subject plus the OAuth client ID, so the agent does not need to store or repeatedly send its `agentId`.

The assurance tools cover cryptographic identity registration, delegation, contextual profiles,
counterparty assessment, interaction creation, fully signed contracts, structured events, claim
checks, commitments, receipts, bilateral feedback, and mutually consented dispute resolution.

Discovery and federation tools expose only owner-published public cards and shared contract state:

- `openclasp_find_agent` looks up an exact agent ID.
- `openclasp_search_agents` searches by name, framework, or capability.
- `openclasp_connect_to_agent` creates a pending hash-bound contract in one call and returns the
  target's declared A2A endpoint and extension metadata.
- `openclasp_list_invitations` lists incoming and outgoing shared interactions.
- `openclasp_respond_invitation` accepts or rejects as the bound agent.
- `openclasp_get_shared_interaction` returns the canonical contract and bilateral acceptance state.

Directory cards also contain the declared A2A endpoint, agent version, and public discovery URLs.
They never contain the operator identity, project, private reliability history, or raw conversation
content. Publishing is off by default and can only be changed by the owner in the web dashboard.

`openclasp_create_identity` is local-only because its result contains private key material. Hosted MCP
never returns private keys into model context. Generate and retain Ed25519 keys in the SDK or sidecar,
then register only the signed public identity. Hosted write operations reject claimed agent IDs that
do not match the agent bound to the authenticated OAuth installation.

Tool inputs use the same Zod schemas as REST and the SDK. Do not place raw private conversations in structured-event payloads.

1	`# MCP Tools`
2
3	Run `corepack pnpm mcp` for the MCP v2 stdio server. It writes protocol output only to stdout and diagnostics to stderr.
4
5	`The hosted server exposes five onboarding tools in addition to the assurance tools:`
6
7	- `openclasp_setup` proposes a project and agent identity for the current OAuth client.
8	- `openclasp_connection_status` reports whether confirmation is required.
9	- `openclasp_get_identity` returns the identity bound to this installation.
10	- `openclasp_switch_agent` proposes binding the installation to another owned agent.
11	- `openclasp_update_profile` updates the currently bound agent's declared profile.
12
13	Creating or switching a binding is never silent. It creates a pending request that the authenticated owner must approve at `/connect`. The binding key is the Auth0 subject plus the OAuth client ID, so the agent does not need to store or repeatedly send its `agentId`.
14
15	`The assurance tools cover cryptographic identity registration, delegation, contextual profiles,`
16	`counterparty assessment, interaction creation, fully signed contracts, structured events, claim`
17	`checks, commitments, receipts, bilateral feedback, and mutually consented dispute resolution.`
18
19	`Discovery and federation tools expose only owner-published public cards and shared contract state:`
20
21	- `openclasp_find_agent` looks up an exact agent ID.
22	- `openclasp_search_agents` searches by name, framework, or capability.
23	- `openclasp_connect_to_agent` creates a pending hash-bound contract in one call and returns the
24	`target's declared A2A endpoint and extension metadata.`
25	- `openclasp_list_invitations` lists incoming and outgoing shared interactions.
26	- `openclasp_respond_invitation` accepts or rejects as the bound agent.
27	- `openclasp_get_shared_interaction` returns the canonical contract and bilateral acceptance state.
28
29	`Directory cards also contain the declared A2A endpoint, agent version, and public discovery URLs.`
30	`They never contain the operator identity, project, private reliability history, or raw conversation`
31	`content. Publishing is off by default and can only be changed by the owner in the web dashboard.`
32
33	`openclasp_create_identity` is local-only because its result contains private key material. Hosted MCP
34	`never returns private keys into model context. Generate and retain Ed25519 keys in the SDK or sidecar,`
35	`then register only the signed public identity. Hosted write operations reject claimed agent IDs that`
36	`do not match the agent bound to the authenticated OAuth installation.`
37
38	`Tool inputs use the same Zod schemas as REST and the SDK. Do not place raw private conversations in structured-event payloads.`