{ "schema": "varexis-public-evidence-record/0.3", "generated_at_utc": "2026-10-16T14:13:51.913Z", "record_id": "VXI-EXT-TOOL-TRUST-AIKIDO-01-v1", "record_kind": "external_reference", "title": "Aikido MCP: Submitted code and selected findings", "system": "Aikido MCP", "evidence_family": "agent_tool_trust_review", "index_status": "PUBLIC_SAFE_SOURCE_REVIEW", "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY", "canonical_question": "Does connecting Aikido MCP prove all generated code and repository issues were checked?", "near_questions": [ "Were saved files or a proposed snippet scanned?", "Which disk paths were selected?", "Were dependency manifests included?", "Which repository and branch were queried?", "Can filters hide relevant issues?", "Were all result pages retrieved?", "Does a prompt instruction prove execution?", "Why does the cloud agent require a token?", "Which account issued the token?", "What code disclosure did the owner authorize?", "Does this result cover the final change?", "Can I preserve the scan-scope review?" ], "supported_claims": [ { "claim": "Tools distinguish files on disk, supplied code content, dependency manifests and scoped issue retrieval. Issue filters and pagination affect the returned subset. The Copilot cloud-agent integration uses a personal access token because browser login is unavailable there. An installed connector or prompt instruction does not prove a scan ran on every change.", "reliance": "DOCUMENTED_CAPABILITY_ONLY" } ], "not_demonstrated_claims": [ "Verified buyer configuration or effective access rights", "Independent execution, completeness or security testing", "Vendor certification, legal compliance or guaranteed suitability" ], "public_summary": "Tools distinguish files on disk, supplied code content, dependency manifests and scoped issue retrieval. Issue filters and pagination affect the returned subset. The Copilot cloud-agent integration uses a personal access token because browser login is unavailable there. An installed connector or prompt instruction does not prove a scan ran on every change.", "related_record_ids": [], "source_review": { "source_type": "official_external_documentation", "source_title": "Aikido: Using MCP", "source_url": "https://help.aikido.dev/ai-and-dev-tools/aikido-mcp/using-aikido-mcp", "checked_on": "2026-10-16", "candidate_record_id": "VXI-EXT-TOOL-TRUST-AIKIDO-01-v1", "candidate_record_sha256": "2545bfcef6797719d1e378945c37ab7bce2e1d1f10d26bab37fc286f9395e6bb", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "answer_policy": { "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY", "bounded_answer": "Tools distinguish files on disk, supplied code content, dependency manifests and scoped issue retrieval. Issue filters and pagination affect the returned subset. The Copilot cloud-agent integration uses a personal access token because browser login is unavailable there. An installed connector or prompt instruction does not prove a scan ran on every change.", "required_buyer_context": "Client, token owner, exact file revision, selected tools, issue filters and completed scan evidence.", "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state." }, "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.", "trust_profile": { "schema": "varexis-agent-tool-trust/1", "identity": { "tool": "Aikido MCP", "variant": "Dated publisher documentation; buyer deployment unverified" }, "review_status": "documentation_review_only", "checked_on": "2026-10-16", "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.", "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.", "findings": [ { "field": "operator", "label": "Publisher and operator", "status": "documented", "statement": "Aikido publishes the MCP integration and operates the associated service.", "source_ids": [ "aikido", "aikido-auth" ] }, { "field": "purpose", "label": "Purpose", "status": "documented", "statement": "Scan selected code or dependencies and retrieve scoped security findings.", "source_ids": [ "aikido", "aikido-auth" ] }, { "field": "reads", "label": "Read capability", "status": "documented", "statement": "Supplied file content, selected disk paths and permitted issue-feed results.", "source_ids": [ "aikido", "aikido-auth" ] }, { "field": "writes", "label": "Write capability", "status": "unknown", "statement": "Scan operations perform analysis; the reviewed guides do not establish arbitrary repository-write permissions.", "source_ids": [ "aikido", "aikido-auth" ] }, { "field": "auth", "label": "Authentication", "status": "documented", "statement": "The documented Copilot cloud-agent setup uses an Aikido personal access token.", "source_ids": [ "aikido", "aikido-auth" ] }, { "field": "permissions", "label": "Permission surface", "status": "documented", "statement": "Input paths, account permissions and issue scope need explicit buyer review.", "source_ids": [ "aikido", "aikido-auth" ] }, { "field": "egress", "label": "Data leaving the environment", "status": "review_inference", "statement": "Code inputs and returned findings enter the scanning and assistant workflow; exact transfer and retention are unverified.", "source_ids": [ "aikido", "aikido-auth" ] }, { "field": "failures", "label": "Failure modes to consider", "status": "review_inference", "statement": "Unsaved content, wrong paths, restrictive filters or incomplete pagination can leave gaps.", "source_ids": [ "aikido", "aikido-auth" ] }, { "field": "unknown", "label": "Unknowns and applicability", "status": "unknown", "statement": "Actual token grants, scan execution, client configuration and transmitted payload remain untested.", "source_ids": [] }, { "field": "gate", "label": "Suggested refusal or clarification condition", "status": "varexis_review_policy", "statement": "Require approved code scope and a matching completed result before relying on coverage.", "source_ids": [] } ], "evidence_sources": [ { "source_id": "aikido", "url": "https://help.aikido.dev/ai-and-dev-tools/aikido-mcp/using-aikido-mcp", "final_url": "https://help.aikido.dev/ai-and-dev-tools/aikido-mcp/using-aikido-mcp", "title": "Aikido: Using MCP", "checked_on": "2026-10-16", "sha256": "db2b525c8fa4add975bef88f65fba9bba4376a95307bc9abc7d89ac7d412df9e", "bytes": 1148948 }, { "source_id": "aikido-auth", "url": "https://help.aikido.dev/ai-and-dev-tools/aikido-mcp/github-copilot", "final_url": "https://help.aikido.dev/ai-and-dev-tools/aikido-mcp/github-copilot", "title": "Aikido: Copilot MCP configuration", "checked_on": "2026-10-16", "sha256": "79ca3fc19948c41a6bae74d7441efc1c6f61a81f71cf13945f5bf3c5eb95f715", "bytes": 1057527 } ], "observed_tool_execution": false, "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.", "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.", "paid_value": { "decision_context": "Save the input and coverage questions behind an AI-assisted code review.", "free": "Complete review, practical questions, sources and limitations; may be saved locally.", "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.", "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.", "excluded": [ "Fresh vendor research", "Continuous monitoring or change alerts", "Testing the buyer configuration", "Private evidence or vendor certification" ], "integrity": "Hashes identify content versions; they do not prove truth or provide a signature." }, "revalidation": { "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.", "specific_watch": "Changing tools, issue filters, client authentication and input handling." }, "change_history": [ { "version": 1, "date": "2026-10-16", "change": "Initial documentation review; no earlier vendor assessment claimed." } ] }, "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.", "service_route": { "request_guide": "/varexis-index/request.html", "request_workflow": "/varexis-index/request-workflow.json", "service_id": "single_request", "service_routes_url": "/varexis-index/service-routes.json", "payment_required": true, "availability_endpoint": "/api/index/capabilities", "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED", "checkout_url": "/index-access" }, "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.", "human_page": "/varexis-index/catalog.html#aikido-mcp-scan-input-scope-and-client-authority", "machine_readable_record": "/varexis-index/records/aikido-mcp-scan-input-scope-and-client-authority.json" }