{ "schema": "varexis-public-evidence-record/0.3", "generated_at_utc": "2026-10-14T01:25:58.088Z", "record_id": "VXI-EXT-TOOL-TRUST-CLOUDINARY-01-v1", "record_kind": "external_reference", "title": "Cloudinary MCP: Product environments and media operations", "system": "Cloudinary MCP servers", "evidence_family": "agent_tool_trust_review", "index_status": "PUBLIC_SAFE_SOURCE_REVIEW", "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY", "canonical_question": "Does enabling Cloudinary media analysis also define every available asset action?", "near_questions": [ "Does a media-analysis connector also expose asset deletion?", "Which Cloudinary product environment will the agent use?", "Do all Cloudinary MCP servers accept the same credentials?", "Can a plugin enable multiple media server roles?", "What evidence separates analysis from configuration access?", "Can an assistant rename or upload media assets?", "Does a transformation request authorise deleting an original?", "Which tools are enabled for structured metadata?", "What should I record before approving a media connector?", "Can returned media content enter the connected assistant?", "Can I save the reviewed Cloudinary environment boundary?", "When should an installed media plugin be reviewed again?" ], "supported_claims": [ { "claim": "No. Cloudinary documents separate servers for asset management, configuration, metadata, analysis and MediaFlows. Their authentication options also differ. Review the enabled servers, selected product environment and available tools; analysis access alone is insufficient evidence about upload, deletion or configuration authority.", "reliance": "DOCUMENTED_CAPABILITY_ONLY" } ], "not_demonstrated_claims": [ "Verified buyer configuration or effective access rights", "Independent execution, completeness or security testing", "Vendor certification, legal compliance or guaranteed suitability" ], "public_summary": "No. Cloudinary documents separate servers for asset management, configuration, metadata, analysis and MediaFlows. Their authentication options also differ. Review the enabled servers, selected product environment and available tools; analysis access alone is insufficient evidence about upload, deletion or configuration authority.", "related_record_ids": [ "VXI-EXT-TOOL-TRUST-RENDER-01-v1", "VXI-EXT-TOOL-TRUST-RAILWAY-01-v1", "VXI-EXT-TOOL-TRUST-FIREBASE-01-v1", "VXI-EXT-TOOL-TRUST-PAYPAL-01-v1" ], "source_review": { "source_type": "official_external_documentation", "source_title": "Cloudinary MCP product environments and server roles", "source_url": "https://cloudinary.com/documentation/cloudinary_llm_mcp", "checked_on": "2026-10-14", "candidate_record_id": "VXI-EXT-TOOL-TRUST-CLOUDINARY-01-v1", "candidate_record_sha256": "c797e8626c6b19abb999d568ed5043411441d47c3a87217621f4d89f2552d2e1", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "answer_policy": { "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY", "bounded_answer": "No. Cloudinary documents separate servers for asset management, configuration, metadata, analysis and MediaFlows. Their authentication options also differ. Review the enabled servers, selected product environment and available tools; analysis access alone is insufficient evidence about upload, deletion or configuration authority.", "required_buyer_context": "Identify product environment, enabled server roles, credentials and intended media action.", "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state." }, "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.", "trust_profile": { "schema": "varexis-agent-tool-trust/1", "identity": { "tool": "Cloudinary MCP servers", "variant": "Asset, configuration, metadata and analysis services" }, "review_status": "documentation_review_only", "checked_on": "2026-10-14", "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.", "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.", "findings": [ { "field": "operator", "label": "Publisher and operator", "status": "documented", "statement": "Cloudinary hosts remote services and publishes local alternatives.", "source_ids": [ "cloudinary" ] }, { "field": "purpose", "label": "Purpose", "status": "documented", "statement": "Manage, transform, analyse and configure media workflows.", "source_ids": [ "cloudinary" ] }, { "field": "reads", "label": "Read capability", "status": "documented", "statement": "Reads media and related metadata for supported tools.", "source_ids": [ "cloudinary" ] }, { "field": "writes", "label": "Write capability", "status": "documented", "statement": "Asset tools include upload, rename and deletion; other servers manage configuration and metadata.", "source_ids": [ "cloudinary" ] }, { "field": "auth", "label": "Authentication", "status": "documented", "statement": "OAuth is the usual remote path; credential support differs for Analysis and MediaFlows.", "source_ids": [ "cloudinary" ] }, { "field": "permissions", "label": "Permission surface", "status": "documented", "statement": "The selected product environment and enabled server/tool set need review.", "source_ids": [ "cloudinary" ] }, { "field": "egress", "label": "Data leaving the environment", "status": "review_inference", "statement": "Media content or analysis results may enter the assistant and processing services.", "source_ids": [ "cloudinary" ] }, { "field": "failures", "label": "Failure modes to consider", "status": "review_inference", "statement": "A plugin can enable more server roles than the immediate task requires.", "source_ids": [ "cloudinary" ] }, { "field": "unknown", "label": "Unknowns and applicability", "status": "unknown", "statement": "Buyer tool configuration, media rights and effective credentials are unknown.", "source_ids": [] }, { "field": "gate", "label": "Suggested refusal or clarification condition", "status": "varexis_review_policy", "statement": "Identify the cloud and permitted action before asset deletion or configuration changes.", "source_ids": [] } ], "evidence_sources": [ { "source_id": "cloudinary", "url": "https://cloudinary.com/documentation/cloudinary_llm_mcp", "final_url": "https://cloudinary.com/documentation/cloudinary_llm_mcp", "title": "Cloudinary MCP product environments and server roles", "checked_on": "2026-10-14", "sha256": "7d2c3135d9b0888691561bbc7a394b0d5e2e909e038cf8859754bf24aa8beb66", "bytes": 605610 } ], "observed_tool_execution": false, "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.", "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.", "paid_value": { "decision_context": "Preserve the selected-server and media-action boundary for a connector review.", "free": "Complete review, practical questions, sources and limitations; may be saved locally.", "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.", "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.", "excluded": [ "Fresh vendor research", "Continuous monitoring or change alerts", "Testing the buyer configuration", "Private evidence or vendor certification" ], "integrity": "Hashes identify content versions; they do not prove truth or provide a signature." }, "revalidation": { "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.", "specific_watch": "Recheck installed plugin contents, server roles and authentication differences." }, "change_history": [ { "version": 1, "date": "2026-10-14", "change": "Initial documentation review; no earlier vendor assessment claimed." } ] }, "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.", "service_route": { "request_guide": "/varexis-index/request.html", "request_workflow": "/varexis-index/request-workflow.json", "service_id": "single_request", "service_routes_url": "/varexis-index/service-routes.json", "payment_required": true, "availability_endpoint": "/api/index/capabilities", "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED", "checkout_url": "/index-access" }, "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.", "human_page": "/varexis-index/catalog.html#cloudinary-mcp-environment-asset-trust", "machine_readable_record": "/varexis-index/records/cloudinary-mcp-environment-asset-trust.json" }