healthz unread · readyz unread
com.aleeth/authority-mcp
The first MCP that cannot act without permission.
Other MCP servers expose tools. This one governs them. Every call is risk-checked by Rail Guard before it runs and sealed with a signed L7 receipt after. Denied and halted calls never execute. Anonymous POST returns 401. That is the product, not an error.
Tools
54
27 read · 17 write · 10 control
Registry
com.aleeth/authority-mcp
version from /healthz
Endpoint
mcp.aleeth.com
streamable HTTP · TLS
Auth
OAuth 2.0
anonymous calls return 401
Connect
Point a host at the gate.
No scan. No theater. A bearer token, or nothing.
# Remote MCP · production
https://mcp.aleeth.com/mcp
# Discovery
https://mcp.aleeth.com/.well-known/oauth-protected-resource
# Registry
com.aleeth/authority-mcpThe catalog · 54 tools
Not a wrapper. A control surface.
Read 27
| Tool | What it is | Scope | Class |
|---|---|---|---|
list_frameworks | List Regulatory Frameworks | frameworks:read | read |
list_active_halts | List Quarantined Agents | agent:read | read |
list_governed_apis | List Governed APIs | catalog:read | read |
verify_receipt | Verify Receipt | ledger:read | read |
get_capability_matrix | Capability-Control Matrix | matrix:read | read |
get_agent_registry | Agent Registry | registry:read | read |
get_academy_file | Academy File by DID | registry:read | read |
list_skills_and_tools | Tools & Skills Registry | curriculum:read | read |
get_catalog_entry | Registry Entry | curriculum:read | read |
get_atc_incidents | ATC Incidents | incidents:read | read |
get_atc_coverage | ATC Sensor Coverage | coverage:read | read |
get_atc_health | ATC Engine Health | coverage:read | read |
get_atc_signals | ATC Raw Signals | incidents:read | read |
get_atc_overview | ATC Overview (fan-out) | incidents:read | read |
get_ledger_entries | Ledger Entries | ledger:read | read |
get_trust_score | Trust Score | ledger:read | read |
verify_receipt_chain | Verify Receipt Chain | ledger:read | read |
get_authority_uses | Authority Usage Log | authority:read | read |
get_authority_violations | Authority Violations | authority:read | read |
get_agent_scope | Agent Authority Scope | authority:read | read |
get_incident_lifecycle | Incident Lifecycle | incidents:read | read |
get_governance_fingerprint | Governance Fingerprint | governance:read | read |
simulate_governed_call | Simulate Governed Call | governance:simulate | recommend |
get_opfor_exam | My OPFOR Exam Items | exam:self | read |
get_task_contract | Get Task Contract | task:read | read |
list_holds | List Holds | hold:read | read |
get_payment_case | Get Payment Case | payments:read | read |
Write 17
| Tool | What it is | Scope | Class |
|---|---|---|---|
run_l7_audit | Run L7 Self-Audit | audit:run | prepare |
equip_agent | Equip Agent | academy:equip | prepare |
answer_opfor_exam | Answer My OPFOR Exam Item | exam:self | prepare |
graduate_agent | Graduate Agent | academy:graduate | execute |
intake_recruit | Intake Recruit | academy:intake | execute |
issue_receipt | Attest to Ledger | ledger:write | execute |
triage_incident | Triage Incident | incident:manage | prepare |
contain_incident | Contain Incident | incident:manage | prepare |
disclose_incident | Record Incident Disclosure | incident:manage | prepare |
close_incident | Close Incident | incident:manage | execute |
ratify_finding | Ratify Finding | disposition:manage | prepare |
dismiss_finding | Dismiss Finding | disposition:manage | prepare |
suppress_finding | Suppress Finding | disposition:manage | prepare |
escalate_finding | Escalate Finding | disposition:manage | prepare |
approve_rule_candidate | Approve Rule Candidate | rule:govern | execute |
reject_rule_candidate | Reject Rule Candidate | rule:govern | prepare |
open_task_contract | Open Task Contract | task:write | prepare |
Control 10
| Tool | What it is | Scope | Class |
|---|---|---|---|
stop_agent | STOP Agent (Halt) | agent:control | commit |
release_agent | RELEASE Agent | agent:control | commit |
execute_governed_payment | Execute Governed Payment | payment:execute | commit |
proxy_downstream_tool | Proxy Downstream Tool | downstream:proxy | commit |
approve_hold | Approve Hold | hold:approve | commit |
reject_hold | Reject Hold | hold:approve | commit |
request_destination_change | Request Destination Change | payments:destination | commit |
release_held_payment | Release Held Payment | payment:execute | commit |
reconcile_payment_intent | Reconcile Payment Intent | payment:reconcile | commit |
lift_payment_freeze | Lift Payment Freeze | freeze:lift | commit |
Astra plane unread until /planez answers.