Loading…
Deterministic AI governance: validates outputs, discovers patterns, and solves math problems.
Do not connect
A critical issue was found. Do not connect this server as-is.
Scanned 1 month ago Due for re-check
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The GeodesicAI MCP server exposes 37 tools, focused primarily on AI, developer, and filesystem capabilities. Its published description reads: "Deterministic AI governance: validates outputs, discovers patterns, and solves math problems". It communicates over Streamable HTTP using the 2025-06-18 protocol revision, and does not require authorization to connect. MCPGrade currently rates GeodesicAI F — a critical issue was found and the server should not be connected as-is. Its most notable findings include "Cross-tool shadowing" and "Tool input schema requests a secret". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check GeodesicAI's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add GeodesicAI to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://app.geodesiclabs.ai/mcpStreamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
Validate structured data against a Blueprint's rules BEFORE the result is used. Returns PASS, FAIL, or REVIEW with plain-language findings, repair suggestions, a determinism hash, and a re-verifiable
Validate structured data against a Blueprint and, when it fails, include repair suggestions (corrected values with the rule each fix is based on) in the same call. Same verdicts as validate: PASS, FAI
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: validate
A tool description tries to alter the model’s use of another tool.
e findings, repair suggestions, a determinism hash, and a re-verifRecommendationDescriptions must describe only their own tool.
tool: validate
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: validate_repair
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
{"properties":{"api_key":{"description":"GeodesicAI API key (gai_...)",RecommendationRemove side-channel parameters; constrain tool inputs.
tool: validate_repair
A tool description tries to alter the model’s use of another tool.
Validate structured data against a Blueprint and, when iRecommendationDescriptions must describe only their own tool.
tool: validate_repair
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: create_blueprint
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
new Blueprint's API key. {"properties":{"api_key":{"description":"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: create_blueprint
A tool description tries to alter the model’s use of another tool.
ad_rule_pack or discover_patterns if you have no rules yet; invoke the blueprRecommendationDescriptions must describe only their own tool.
tool: create_blueprint
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: list_blueprints
A tool description tries to alter the model’s use of another tool.
'blueprint' in validate.RecommendationDescriptions must describe only their own tool.
tool: list_blueprints
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: repair
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
{"properties":{"api_key":{"description":"GeodesicAI API key (gai_...)",RecommendationRemove side-channel parameters; constrain tool inputs.
tool: repair
A tool description tries to alter the model’s use of another tool.
Blueprint. Use repair_path to see the steps instead.RecommendationDescriptions must describe only their own tool.
tool: repair
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: check_blueprint_health
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: compare_semantic_equivalence
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: govern_inference
A tool description tries to alter the model’s use of another tool.
ed (complements validate, which checks finished documents). ReturnsRecommendationDescriptions must describe only their own tool.
tool: govern_inference
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: get_inference_trace
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: recent_inference_decisions
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: verify_certificate
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: profile_blueprint_robustness
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
{"properties":{"api_key":{"description":"GeodesicAI API key (gai_...)",RecommendationRemove side-channel parameters; constrain tool inputs.
tool: profile_blueprint_robustness
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: forecast
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
{"properties":{"api_key":{"description":"GeodesicAI API key (gai_...)",RecommendationRemove side-channel parameters; constrain tool inputs.
tool: forecast
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: discover_patterns
A tool description tries to alter the model’s use of another tool.
te results with approve_rule. Source data is not stored.RecommendationDescriptions must describe only their own tool.
tool: discover_patterns
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: repair_path
A tool description tries to alter the model’s use of another tool.
ferent from repair (one-shot nearest fix): use repair_path to explRecommendationDescriptions must describe only their own tool.
tool: repair_path
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: counterfactual
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: analyze_anomaly
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: create_chain
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
{"properties":{"api_key":{"description":"GeodesicAI API key (gai_...)",RecommendationRemove side-channel parameters; constrain tool inputs.
tool: create_chain
A tool description tries to alter the model’s use of another tool.
l chain: stages validate in order against one Blueprint, repairs proRecommendationDescriptions must describe only their own tool.
tool: create_chain
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: submit_chain_stage
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
{"properties":{"api_key":{"description":"GeodesicAI API key (gai_...)",RecommendationRemove side-channel parameters; constrain tool inputs.
tool: submit_chain_stage
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: handoff_audit
A tool description tries to alter the model’s use of another tool.
. Siblings: create_chain, submit_chain_stage.RecommendationDescriptions must describe only their own tool.
tool: handoff_audit
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: approve_rule
A tool description tries to alter the model’s use of another tool.
e discovered by discover_patterns into Blueprint-ready form.RecommendationDescriptions must describe only their own tool.
tool: approve_rule
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: reject_rule
A tool description tries to alter the model’s use of another tool.
rove_rule after discover_patterns.RecommendationDescriptions must describe only their own tool.
tool: reject_rule
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: structural_types
A tool description tries to alter the model’s use of another tool.
nt categories a discover_patterns session identified (counts, distinguishingRecommendationDescriptions must describe only their own tool.
tool: structural_types
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: decompose_failure
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
{"properties":{"api_key":{"description":"GeodesicAI API key (gai_...)",RecommendationRemove side-channel parameters; constrain tool inputs.
tool: decompose_failure
A tool description tries to alter the model’s use of another tool.
RecommendationDescriptions must describe only their own tool.
tool: decompose_failure
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: geometric_confidence
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
{"properties":{"api_key":{"description":"GeodesicAI API key (gai_...)",RecommendationRemove side-channel parameters; constrain tool inputs.
tool: geometric_confidence
A tool description tries to alter the model’s use of another tool.
igest - use analyze_anomaly or check_drift for fresh analysis of raw data.RecommendationDescriptions must describe only their own tool.
tool: geometric_confidence
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: check_realization
A tool description tries to alter the model’s use of another tool.
er tool; prefer validate or analyze_anomaly for standard checks.RecommendationDescriptions must describe only their own tool.
tool: check_realization
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: check_drift
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: authorize_execution
A tool description tries to alter the model’s use of another tool.
ferent from validate: validate asks is this data correct, authorize_RecommendationDescriptions must describe only their own tool.
tool: authorize_execution
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: load_rule_pack
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
{"properties":{"api_key":{"description":"GeodesicAI API key (gai_...)",RecommendationRemove side-channel parameters; constrain tool inputs.
tool: load_rule_pack
A tool description tries to alter the model’s use of another tool.
ist packs; then create_blueprint to save a customized copy.RecommendationDescriptions must describe only their own tool.
tool: load_rule_pack
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: get_execution_trace
A tool description tries to alter the model’s use of another tool.
m hash. Use validate for normal operation; this is for debugging andRecommendationDescriptions must describe only their own tool.
tool: get_execution_trace
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: verify_replay
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: account_status
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: delete_blueprint
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: update_blueprint
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
nd existing API keys keep working. Different from create_blueprint:RecommendationRemove side-channel parameters; constrain tool inputs.
tool: update_blueprint
A tool description tries to alter the model’s use of another tool.
Different from create_blueprint: modifies an existing Blueprint, mints no nRecommendationDescriptions must describe only their own tool.
tool: update_blueprint
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: list_api_keys
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: rotate_api_key
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: delete_api_key
A tool description tries to alter the model’s use of another tool.
l its keys, use delete_blueprint. The target key can be specified two ways:RecommendationDescriptions must describe only their own tool.
tool: delete_api_key
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "api_key"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: (server instructions)
A tool description tries to alter the model’s use of another tool.
CE (the core) — Validate agent outputs and authorize actions against BluRecommendationDescriptions must describe only their own tool.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
tool: delete_blueprint
The server advertises open-world / broadly-scoped capabilities.
annotations.destructiveHint = trueRecommendationScope tools to the minimum needed.
tool: rotate_api_key
The server advertises open-world / broadly-scoped capabilities.
annotations.destructiveHint = trueRecommendationScope tools to the minimum needed.
tool: delete_api_key
The server advertises open-world / broadly-scoped capabilities.
annotations.destructiveHint = trueRecommendationScope tools to the minimum needed.
tool: (server instructions)
The description pairs a fetch imperative with a hardcoded external URL, letting the server relocate its real instructions off-metadata and mutate them after review. Fires only when a fetch verb and a URL co-occur, so benign documentation links do not.
uide), or fetch https://app.geodesiclabs.ai/static/GeodesicAI_User_Guide.pdf. For Blueprint design specifics, invoke th…RecommendationDo not direct the model to fetch and act on external URLs; treat linked content as untrusted.
Vantaj uptime monitoring via MCP — manage monitors, heartbeats, incidents, and status pages.
Unified gateway to Algeria's TKAWEN ecosystem: commerce, certification, and AI tools.
Provides access to the Cohereon Doctrine AI safety framework with governance components, tiered access, and agent onboarding.
Agentic rails for complex workflows with receipts, fees, and MCP tool access.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Create a Blueprint - the governance contract validation runs against. A Blueprint defines what correct means for your data: fields, the math that must hold between them, and acceptable ranges. Start f
List the Blueprints on this account with field/rule/constraint counts and mode. Use the returned workflow_name as 'blueprint' in validate.
One-shot repair: return corrected values that would make failing data valid under the Blueprint. Use repair_path to see the steps instead.
Static pre-deploy analysis of a Blueprint's rule set. Returns a health verdict - healthy, acceptable, fragile, rigid, split, brittle_islands, or unsatisfiable - with advice, including joint conflicts
Compare two payloads under the dual-hash design: content_hash is invariant to field order and numeric formatting (5 vs '5.00'); semantic_hash additionally to field renaming. Verdicts: identical_conten
Quality-govern an in-progress AI generation step BEFORE its output is used (complements validate, which checks finished documents). Returns an action - STOP, CONTINUE, REPAIR_REGION, REUSE_MOTIF, REVI
Retrieve the durable audit trail for a governed generation: every recorded decision and its reasons.
Recent generation-governance decisions across all runs - what was approved, held, and escalated.
Independently re-verify a validation certificate. Integrity mode checks the hash chain; full mode (certificate + original data) recomputes every attested rule from scratch - trust nothing, recheck eve
Sweep the Blueprint's numeric constraint bounds and report verdict stability: the stable band, the scales where the verdict first flips, and advice. Use before deploying bound changes.
Deterministic forward reasoning: from the current data state, generate and rank the valid next states reachable under the Blueprint's rules.
Learn candidate validation rules and structural document types from a batch of your records, deterministically - no Blueprint required. Promote results with approve_rule. Source data is not stored.
Find the shortest sequence of field changes taking invalid data to a valid state, as an ordered path of intermediate states. Different from repair (one-shot nearest fix): use repair_path to explain or
Run the same data under two rule sets and compare which future states remain valid - what-if analysis for rule changes.
Explain whether a record fits the usual pattern for records like it, and which fields stand out. No Blueprint required.
Create a multi-agent sequential chain: stages validate in order against one Blueprint, repairs propagate forward, TTL bounds the run. Siblings: submit_chain_stage advances the chain; handoff_audit ver
Submit data for the chain's current stage; the platform validates it and advances the chain if it passes. Response includes next-stage info and accumulated repairs.
Audit a handoff between two chain stages: a context capsule of verified facts from the prior stage, and (if proposed_data is given) a compatibility verdict that catches fields mutated in transit. Sibl
Promote a rule discovered by discover_patterns into Blueprint-ready form.
Reject a discovered candidate rule so it will not be promoted into a Blueprint. Pair with approve_rule after discover_patterns.
Retrieve the document categories a discover_patterns session identified (counts, distinguishing fields, domain hints). Read-only; returns status=no_session if discovery has not run for this namespace.
Split the error between original and corrected values into direct rule violations, boundary violations, and systemic structural error, with per-field contributions. Use with a known-correct version to
Summarize an already-computed state_vector into a confidence level (high/medium/low) with a recommendation. Post-hoc digest - use analyze_anomaly or check_drift for fresh analysis of raw data.
Structural realization analysis of a payload against the Blueprint's reference configuration (requires a 'realization' block; otherwise status=skipped). Diagnostics-tier tool; prefer validate or analy
Check whether recent submissions still match the established pattern for this Blueprint. Returns a stability verdict and observation count.
Go/no-go for a real-world action (payment, filing, API write): runs full validation, then the Blueprint's execution gate. authorized=true only on PASS; REVIEW means do not proceed automatically. Diffe
Load a prebuilt Blueprint template (invoices, timecards, legal, POs, claims). Call without pack_id to list packs; then create_blueprint to save a customized copy.
Run validation and return the per-node execution trace (node names, deterministic flags, timing) plus the verdict and determinism hash. Use validate for normal operation; this is for debugging and aud
Verify two replay contracts represent the same deterministic execution: same input + same rules = same result, byte-identical. Mismatch fields localize the cause (data, rules, platform version, or tra
This account's plan, key usage, Blueprint counts, and the deployed platform build fingerprint (version, build, deployed).
Permanently delete a Blueprint and revoke its API keys. Irreversible; requires confirm=true. Account-level keys are unaffected.
Update an existing Blueprint in place. Only passed fields change; pass [] to clear a list. workflow_name cannot be renamed and existing API keys keep working. Different from create_blueprint: modifies
List this account's API keys (masked) with their Blueprint bindings.
Replace an API key with a fresh one. The old key stops working immediately; the new key inherits its bindings.
Permanently delete one of the caller's API keys. DESTRUCTIVE — agents using the deleted key will receive auth errors immediately. The Blueprint a key was tied to (if any) is NOT affected; only the cre