Inspection
- List authorized sites and provider health
- Read runs, evidence, findings and proposals
- Inspect usage, failures and activity summaries
Remote MCP
Remote MCP can expose tenant-scoped inspection and bounded workflow-request tools. The current tool manifest returned by the authorized server is the source of truth; examples here are illustrative.
{
"tool": "findings.list",
"arguments": { "site_id": "site_123" }
}Tool classes
Authentication
Create tokens inside the signed-in paid workspace, label the client, use TLS, rotate on exposure and never paste provider credentials into client context.
Scopes
A client seeing a tool name does not gain access to every site. Workspace, site, environment and operation restrictions are checked on each call.
Limits
Clients must respect structured rate-limit errors, Retry-After guidance and run quotas. Poll with backoff or use webhooks instead of high-frequency empty polling.
Errors
{ "code": "site_scope_denied", "message": "Token is not authorized for site_456", "request_id": "req_example" }Paid deployment · human authority
Choose a plan or discuss client, scope and rate-limit requirements with sales.