Audits scoped and revocable MCP tool access: detects ungated tool grants, validates revocation endpoint, and checks token rotation status. Root node of the agent-authorization-lifecycle chain.
New MCP SpecScope + RevocationZero PIIW3C VC §13.11
🔒 All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data — use synthetic or anonymised inputs only.
Scope
Root node of the agent-authorization-lifecycle chain (art-150→151→152). Audits scoped and revocable MCP tool access: each grant must carry explicit scopes, a revocation endpoint must be present, and token rotation must be current.
Copy this paragraph into Claude, OpenClaw, or any MCP-aware agent to run this exact tool, with this sample, and verify the artifact.
Run the AINumbers MCP tool `audit_mcp_tool_scope_revocation`. Task: Audit scoped and revocable MCP tool access: ungated grants, revocation endpoint presence, and token rotation status.
Call it with arguments: {"policy_parameters":{"tool_grants":[{"tool":"search_files","scopes":["files:read"]},{"tool":"write_file","scopes":["files:write"]}],"revocation_endpoint":"https://auth.example.com/revoke","token_created_unix":1000000,"now_unix":1001000,"max_token_age_s":3600,"next_token_present":false}}
Verify before trusting: call `verify_execution_hash` on mcp.ainumbers.co (https://mcp.ainumbers.co/mcp) with the parameter `claimed_hash` set to the returned `execution_hash`, passing the full artifact the run returned (the object containing `policy_parameters` + `output_payload` + `execution_hash`; equivalently `policy_parameters` + `output_payload` with `claimed_hash`), not the bare hash string, or re-run the in-page WebMCP tool `audit_mcp_tool_scope_revocation`.
Return the ledger link https://ledger.ainumbers.co/ so a human can re-verify without contacting us.
PII rule: All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data — use synthetic or anonymised inputs only.
Open the tool with the sample prefilled: https://ainumbers.co/chaingraph/art-150-mcp-tool-scope-revocation-auditor.html#p=v1.H4sIAAAAAAAA_wEKAfX-eyJ0b29sX2dyYW50cyI6W3sidG9vbCI6InNlYXJjaF9maWxlcyIsInNjb3BlcyI6WyJmaWxlczpyZWFkIl19LHsidG9vbCI6IndyaXRlX2ZpbGUiLCJzY29wZXMiOlsiZmlsZXM6d3JpdGUiXX1dLCJyZXZvY2F0aW9uX2VuZHBvaW50IjoiaHR0cHM6Ly9hdXRoLmV4YW1wbGUuY29tL3Jldm9rZSIsInRva2VuX2NyZWF0ZWRfdW5peCI6MTAwMDAwMCwibm93X3VuaXgiOjEwMDEwMDAsIm1heF90b2tlbl9hZ2VfcyI6MzYwMCwibmV4dF90b2tlbl9wcmVzZW50IjpmYWxzZX1GSiEqCgEAAA