{
      "tool_id": "art-150-mcp-tool-scope-revocation-auditor",
      "tool_version": "1.0.0",
      "display_name": "MCP Tool Scope & Revocation Auditor",
      "mcp_name": "audit_mcp_tool_scope_revocation",
      "mandate_type": "compliance_mandate",
      "wave": 27,
      "gpu": false,
      "url": "https://ainumbers.co/chaingraph/art-150-mcp-tool-scope-revocation-auditor.html",
      "description": "Audit scoped and revocable MCP tool access per the new MCP specification: each granted tool must carry an explicit scope array, a revocation endpoint must be configured (https-scheme), and token rotation posture (max age vs elapsed time, next-key presence) must be healthy. Emits per-tool grant verdict and gap list. Feeds the on-behalf-of mandate validator (art-151). Zero network, zero PII.",
      "input_schema_ref": "chaingraph/art-150-mcp-tool-scope-revocation-auditor.html#manifest",
      "consumes": [],
      "feeds": [
        "art-151-agent-obo-mandate-validator"
      ],
      "status": "live",
      "conformance_fixtures": true,
      "compute_capability": "server",
      "compute_images": [{"system":"sha256-source","image_id":"sha256:43b2320d22c9bb43d9f57049be817347d84f13e34532dbec3d13725872886ba2","valid_from":"2026-07-10"},{"system":"risc0","image_id":"sha256:a1a0bc89b5b1febaeda3519f6dbade0fa5ac16beeb143c4e1b01689573567bc6","valid_from":"2026-06-28"}],
      "compute_proof": {
        "type": "ZkVmReceipt",
        "system": "risc0",
        "receiptFormat": "groth16-bn254",
        "imageId": "sha256:a1a0bc89b5b1febaeda3519f6dbade0fa5ac16beeb143c4e1b01689573567bc6",
        "seal": "KGu2yErrXuW4ZBLcEQgwjhubCB0mf6FLO5+4NH3ZAVQE9rFnvlp0m/mCRjJJh+zRqAhtqMvF33Kz1Wqkr+QI+BSE9Rxu8fLs6Pf702wxmyiiTSlg61TyPYCHqTNjpcxvITMqchSKjFrG0qfbPYWl0cU4406tRUd+kkiHn2wkUcoMjM26nw8ImDhKXKC1ytiUsJqDH/r9kcpSXVW4qkP3tCA8FkOqg8oP0RHOeJ1VQ1dXfWyOXHHXYYt9ZPMGb8jGLksIqe6jWdAEYZoOtl2MCCY55qA5joBbixANS2t2YO4aKN0n2/4r6Gys8p7SDYNZiCQe12V57Q1qkSQogvDUKQ==",
        "journal": {
          "chaingraph_version": "0.4.0",
          "kernel_digest": "sha256:fd6f63b8a386c172c843a6c2a5382c56af85518a8498a55b1a9b8caee294df78",
          "output": {
            "audit_pass": true,
            "revocable": true,
            "rotation_ok": true,
            "scopes_ok": true,
            "token_age_s": 1000,
            "ungated_tools": []
          }
        }
      },
      "export_capability": [
        "json",
        "vc"
      ]
    }