{
      "tool_id": "art-148-mcp-authorization-metadata-validator",
      "tool_version": "1.0.0",
      "display_name": "MCP Authorization Metadata Validator (RFC 9728)",
      "mcp_name": "validate_mcp_authorization_metadata",
      "mandate_type": "compliance_mandate",
      "wave": 27,
      "gpu": false,
      "url": "https://ainumbers.co/chaingraph/art-148-mcp-authorization-metadata-validator.html",
      "description": "Validate OAuth 2.0 Protected Resource Metadata per RFC 9728: resource URI (https-scheme), non-empty authorization_servers, scopes_supported, and bearer_methods_supported restricted to header/body/query. Flags each missing or malformed member. Consumes server identity verdict (art-147), feeds registry entry conformance check (art-149). Zero network, zero PII.",
      "input_schema_ref": "chaingraph/art-148-mcp-authorization-metadata-validator.html#manifest",
      "consumes": [
        "art-147-mcp-server-identity-attestation-validator"
      ],
      "feeds": [
        "art-149-mcp-registry-entry-conformance"
      ],
      "status": "live",
      "conformance_fixtures": true,
      "compute_capability": "server",
      "compute_images": [{"system":"sha256-source","image_id":"sha256:3165d9c916ead557ee007631e3a0dd32f84782a04aa5df796c776d31c963bd8b","valid_from":"2026-07-10"},{"system":"risc0","image_id":"sha256:a1a0bc89b5b1febaeda3519f6dbade0fa5ac16beeb143c4e1b01689573567bc6","valid_from":"2026-06-28"}],
      "compute_proof": {
        "type": "ZkVmReceipt",
        "system": "risc0",
        "receiptFormat": "groth16-bn254",
        "imageId": "sha256:a1a0bc89b5b1febaeda3519f6dbade0fa5ac16beeb143c4e1b01689573567bc6",
        "seal": "Ho4wUA+KYCgsCH64SBBZAGTGqFc4rd4aAbkeaDmM+jInJF9NLNxITusAcRWcPVIYBfYgGOElCAKxKLO2p58Z8w+HUd3WTtncPgOPDhKKw3Ww/cpvyJZLF6HLd3SZcSuiBwBvYS174+1zCRlWwqPjwJZCjAZ7kKhuHFETw4SRpDIgvVGGISMFuG1yRl+UXXAAWIvh6rj+DbV5ANB4wkviDBaiK/b405RR9Z7rjCcdbi7Bt7ea6K7Tma3aGwBa3TCyBNdXWgk9r4Fep+8SN5/tOJp9ItDsYS2vz2sme06kvAcjQNV8Xzqo5bCVOXuIxKuoh7ZPHuUzbX6FmAhM3cNyyQ==",
        "journal": {
          "chaingraph_version": "0.4.0",
          "kernel_digest": "sha256:43b0ffacb0627fc9e7be626f9f750f719768682b2217b725291676156522e095",
          "output": {
            "auth_server_count": 1,
            "bearer_ok": true,
            "metadata_valid": true,
            "missing": [],
            "resource_ok": true,
            "scope_count": 2
          }
        }
      },
      "export_capability": [
        "json",
        "vc"
      ]
    }