{"serverId":"mcp-registry/io.github.cwnapps/trust-gate-mcp","tools":[{"name":"check_egress","fixed":{"name":"check_egress","description":"Egress classification check. Scans a data sample for a finite list of sensitivity markers and classifies as NO_MARKERS_FOUND / INTERNAL / CONFIDENTIAL / RESTRICTED. RESTRICTED sets blocked=true; this tool cannot block anything itself, and NO_MARKERS_FOUND is not clearance to send. Returns classification, retention info, and a tamper-evident receipt.","inputSchema":{"type":"object","title":"check_egressArguments","required":["destination","data_sample","provider"],"properties":{"provider":{"type":"string","title":"Provider"},"data_sample":{"type":"string","title":"Data Sample"},"destination":{"type":"string","title":"Destination"}}},"annotations":{"readOnlyHint":true}},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: true (inferred from the name).","verify":true}],"tokensBefore":189,"tokensAfter":189},{"name":"run_exit_drill","fixed":{"name":"run_exit_drill","description":"Vendor exit readiness drill. Checks local signing key, local model access (Ollama). Returns step-by-step results and a tamper-evident receipt. Informational; it signs one receipt, which creates the signing key on a host that has none yet.","inputSchema":{"type":"object","title":"run_exit_drillArguments","properties":{}},"annotations":{"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false}},"changes":[{"kind":"annotations","detail":"Added readOnlyHint: false, destructiveHint: false, idempotentHint: false (inferred from the name).","verify":true}],"tokensBefore":101,"tokensAfter":101}],"toolsChanged":2,"tokensSaved":0,"todo":[{"tool":"audit_my_agent_inventory","params":["notes","inventory"]},{"tool":"check_egress","params":["provider","data_sample","destination"]},{"tool":"gate_decision","params":["phase","action","context","resource","preview_id","decision_model","triggered_by_type","triggered_by_source"]},{"tool":"mint_action_receipt","params":["inputs","policy","target","agent_id","decision","operation","decision_model","triggered_by_type","triggered_by_source"]},{"tool":"mint_receipt_for_record_change","params":["field","policy","tenant","new_value","old_value","record_id","object_type","changed_by_agent"]},{"tool":"verify_receipt","params":["receipt","require_pq","expected_kid"]}],"note":"Deterministic fixes. Changes marked verify need a human look before shipping (renames, inferred annotations, inferred types, removed text). Parameter descriptions in `todo` need to be written by someone who knows the API."}