{"serverId":"mcp-registry/ai.apir/verify","tools":[{"name":"check_authority","fixed":{"name":"check_authority","description":"Resolve the human mandate behind an AI agent: which actions a named person actually permitted, any value cap, the expiry, and whether the grant itself is signed. Where authority was delegated agent to agent, the full chain is walked back to the human at the root, and one law is enforced at every hop: authority may only ever narrow. No hop can hold an action, a target or a spending cap wider than the hop above it, and the root must be a human. Use this before letting an agent transact, sign, spen","inputSchema":{"type":"object","required":["query"],"properties":{"query":{"type":"string","description":"Agent name, credential id, or agent UUID."}}},"annotations":{"readOnlyHint":true},"title":"Check what an agent is allowed to do"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":194,"tokensAfter":194},{"name":"get_verification_keys","fixed":{"name":"get_verification_keys","description":"Return the Ed25519 public keys APIR publishes, so a signature can be recomputed offline without trusting any APIR response, including this one. Keys are published as a JWKS at apir.ai/.well-known/jwks.json and as did:web:apir.ai. Retired keys stay published so older credentials still verify.","inputSchema":{"type":"object","properties":{}},"annotations":{"readOnlyHint":true},"title":"Get APIR public signing keys"},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":109,"tokensAfter":109}],"toolsChanged":2,"tokensSaved":0,"todo":[],"note":"Deterministic fixes. Changes marked verify need a human look before shipping (renames, inferred annotations, inferred types, removed text). Parameter descriptions in `todo` need to be written by someone who knows the API."}