{
  "schema": "varexis-public-evidence-record/0.3",
  "generated_at_utc": "2026-10-14T01:25:58.088Z",
  "record_id": "VXI-EXT-TOOL-TRUST-AIVEN-01-v1",
  "record_kind": "external_reference",
  "title": "Aiven MCP: Read-only exceptions and service scope",
  "system": "Aiven MCP",
  "evidence_family": "agent_tool_trust_review",
  "index_status": "PUBLIC_SAFE_SOURCE_REVIEW",
  "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY",
  "canonical_question": "Can an Aiven connection marked read-only still expose selected write tools?",
  "near_questions": [
    "Can read-only mode contain a write exception?",
    "Which Aiven tools remain after selecting a service family?",
    "Can a Kafka inspection agent also produce messages?",
    "What determines Aiven MCP effective permissions?",
    "Does local execution avoid access to cloud services?",
    "Which configuration proves writes are excluded?",
    "Can service discovery expose more than one database?",
    "What should I check before letting an agent read connection details?",
    "Does an API token alone define the enabled tool list?",
    "Can I save the read-only exception review?",
    "When should an Aiven task require clarification?",
    "How do hosted and local connector settings differ?"
  ],
  "supported_claims": [
    {
      "claim": "Yes. Aiven documents an optional write allowlist that re-enables named actions in read-only mode. Service-family selection also leaves core discovery available. Review the complete configuration and authenticated user permissions, rather than treating one read-only label as the whole permission boundary.",
      "reliance": "DOCUMENTED_CAPABILITY_ONLY"
    }
  ],
  "not_demonstrated_claims": [
    "Verified buyer configuration or effective access rights",
    "Independent execution, completeness or security testing",
    "Vendor certification, legal compliance or guaranteed suitability"
  ],
  "public_summary": "Yes. Aiven documents an optional write allowlist that re-enables named actions in read-only mode. Service-family selection also leaves core discovery available. Review the complete configuration and authenticated user permissions, rather than treating one read-only label as the whole permission boundary.",
  "related_record_ids": [
    "VXI-EXT-TOOL-TRUST-NEON-01-v1",
    "VXI-EXT-TOOL-TRUST-PRISMA-01-v1",
    "VXI-EXT-TOOL-TRUST-PLANETSCALE-01-v1",
    "VXI-EXT-TOOL-TRUST-MOTHERDUCK-01-v1"
  ],
  "source_review": {
    "source_type": "official_external_documentation",
    "source_title": "Aiven MCP credentials, service operations and SQL",
    "source_url": "https://github.com/Aiven-Open/mcp-aiven/blob/main/README.md",
    "checked_on": "2026-10-14",
    "candidate_record_id": "VXI-EXT-TOOL-TRUST-AIVEN-01-v1",
    "candidate_record_sha256": "2beca2fbb1a2745ba1e23e3e23ce84876648888b67d16745851c89fdd1dff7a7",
    "method": "Primary documentation reviewed for the published bounded statement.",
    "deployment_tested_by_varexis": false,
    "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research."
  },
  "answer_policy": {
    "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY",
    "bounded_answer": "Yes. Aiven documents an optional write allowlist that re-enables named actions in read-only mode. Service-family selection also leaves core discovery available. Review the complete configuration and authenticated user permissions, rather than treating one read-only label as the whole permission boundary.",
    "required_buyer_context": "Identify hosted or local mode, read-only setting, write exceptions, service families and acting user.",
    "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state."
  },
  "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.",
  "trust_profile": {
    "schema": "varexis-agent-tool-trust/1",
    "identity": {
      "tool": "Aiven MCP",
      "variant": "Hosted and local variants"
    },
    "review_status": "documentation_review_only",
    "checked_on": "2026-10-14",
    "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.",
    "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.",
    "findings": [
      {
        "field": "operator",
        "label": "Publisher and operator",
        "status": "documented",
        "statement": "Aiven publishes the local server and hosts the remote variant.",
        "source_ids": [
          "aiven"
        ]
      },
      {
        "field": "purpose",
        "label": "Purpose",
        "status": "documented",
        "statement": "Manage Aiven data services and applications.",
        "source_ids": [
          "aiven"
        ]
      },
      {
        "field": "reads",
        "label": "Read capability",
        "status": "documented",
        "statement": "Reads service information, logs, database data and Kafka messages.",
        "source_ids": [
          "aiven"
        ]
      },
      {
        "field": "writes",
        "label": "Write capability",
        "status": "documented",
        "statement": "Can change services, data and messages; configured exceptions can restore writes in read-only mode.",
        "source_ids": [
          "aiven"
        ]
      },
      {
        "field": "auth",
        "label": "Authentication",
        "status": "documented",
        "statement": "Hosted authorisation or a local Aiven API token.",
        "source_ids": [
          "aiven"
        ]
      },
      {
        "field": "permissions",
        "label": "Permission surface",
        "status": "documented",
        "statement": "User permissions apply alongside read-only, service-scope and write-allowlist settings.",
        "source_ids": [
          "aiven"
        ]
      },
      {
        "field": "egress",
        "label": "Data leaving the environment",
        "status": "review_inference",
        "statement": "Service content and possibly connection material can reach the assistant.",
        "source_ids": [
          "aiven"
        ]
      },
      {
        "field": "failures",
        "label": "Failure modes to consider",
        "status": "review_inference",
        "statement": "An overlooked write exception can invalidate a read-only assumption.",
        "source_ids": [
          "aiven"
        ]
      },
      {
        "field": "unknown",
        "label": "Unknowns and applicability",
        "status": "unknown",
        "statement": "Buyer exceptions, secret exposure settings and effective account rights are unknown.",
        "source_ids": []
      },
      {
        "field": "gate",
        "label": "Suggested refusal or clarification condition",
        "status": "varexis_review_policy",
        "statement": "Inspect write exceptions before approving a read-only task.",
        "source_ids": []
      }
    ],
    "evidence_sources": [
      {
        "source_id": "aiven",
        "url": "https://github.com/Aiven-Open/mcp-aiven/blob/main/README.md",
        "final_url": "https://github.com/Aiven-Open/mcp-aiven/blob/main/README.md",
        "title": "Aiven MCP credentials, service operations and SQL",
        "checked_on": "2026-10-14",
        "sha256": "98a62cbf16d016e4ca7a172078a9b0fd864314a57a8730e5e30b15a7d341e9df",
        "bytes": 347013
      }
    ],
    "observed_tool_execution": false,
    "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.",
    "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.",
    "paid_value": {
      "decision_context": "Keep the complete permission checklist for a managed-data connector review.",
      "free": "Complete review, practical questions, sources and limitations; may be saved locally.",
      "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.",
      "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.",
      "excluded": [
        "Fresh vendor research",
        "Continuous monitoring or change alerts",
        "Testing the buyer configuration",
        "Private evidence or vendor certification"
      ],
      "integrity": "Hashes identify content versions; they do not prove truth or provide a signature."
    },
    "revalidation": {
      "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.",
      "specific_watch": "Recheck write allowlists, service scope and user-role changes."
    },
    "change_history": [
      {
        "version": 1,
        "date": "2026-10-14",
        "change": "Initial documentation review; no earlier vendor assessment claimed."
      }
    ]
  },
  "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.",
  "service_route": {
    "request_guide": "/varexis-index/request.html",
    "request_workflow": "/varexis-index/request-workflow.json",
    "service_id": "single_request",
    "service_routes_url": "/varexis-index/service-routes.json",
    "payment_required": true,
    "availability_endpoint": "/api/index/capabilities",
    "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED",
    "checkout_url": "/index-access"
  },
  "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.",
  "human_page": "/varexis-index/catalog.html#aiven-mcp-readonly-exception-trust",
  "machine_readable_record": "/varexis-index/records/aiven-mcp-readonly-exception-trust.json"
}