{
  "schema": "varexis-public-evidence-record/0.3",
  "generated_at_utc": "2026-10-14T20:21:57.226Z",
  "record_id": "VXI-EXT-TOOL-TRUST-CONTENTFUL-01-v1",
  "record_kind": "external_reference",
  "title": "Contentful MCP: Protected environments are an opt-in connector guard",
  "system": "Contentful",
  "evidence_family": "agent_tool_trust_review",
  "index_status": "PUBLIC_SAFE_SOURCE_REVIEW",
  "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY",
  "canonical_question": "Does the Contentful MCP environment guard block every possible write?",
  "near_questions": [
    "Does a CMS protected-environment setting block all writes?",
    "Is Contentful MCP environment protection enabled by default?",
    "Does environment ID capitalisation matter?",
    "Can another client still change a protected environment?",
    "Are organisation-level concepts covered by the same guard?",
    "Can AI generation run while environment writes are blocked?",
    "Which token governs Contentful management access?",
    "Does the default environment identify the intended target?",
    "Can a content assistant export data locally?",
    "What should a publication permission review record?",
    "When should a protected-environment claim remain qualified?",
    "Can I save a Contentful write-boundary review?"
  ],
  "supported_claims": [
    {
      "claim": "The local server documents an opt-in, case-sensitive environment guard. It blocks environment-scoped write/delete calls but leaves reads and specified organisation-level or generation operations outside that guard. Other clients are unaffected. Review both the guard and underlying permissions before treating an environment as protected.",
      "reliance": "DOCUMENTED_CAPABILITY_ONLY"
    }
  ],
  "not_demonstrated_claims": [
    "Verified buyer configuration or effective access rights",
    "Independent execution, completeness or security testing",
    "Vendor certification, legal compliance or guaranteed suitability"
  ],
  "public_summary": "The local server documents an opt-in, case-sensitive environment guard. It blocks environment-scoped write/delete calls but leaves reads and specified organisation-level or generation operations outside that guard. Other clients are unaffected. Review both the guard and underlying permissions before treating an environment as protected.",
  "related_record_ids": [
    "VXI-EXT-TOOL-TRUST-CONTENTSTACK-01-v1",
    "VXI-EXT-TOOL-TRUST-TWILIO-DOCS-01-v1",
    "VXI-EXT-TOOL-TRUST-STRAPI-01-v1"
  ],
  "source_review": {
    "source_type": "official_external_documentation",
    "source_title": "Contentful local MCP environment guard",
    "source_url": "https://github.com/contentful/contentful-mcp-server/blob/main/README.md",
    "checked_on": "2026-10-14",
    "candidate_record_id": "VXI-EXT-TOOL-TRUST-CONTENTFUL-01-v1",
    "candidate_record_sha256": "1a56b4d89a553c5c332392cc883c00c20cb2728dc0b0b748a9d8193c3bc33f66",
    "method": "Primary documentation reviewed for the published bounded statement.",
    "deployment_tested_by_varexis": false,
    "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research."
  },
  "answer_policy": {
    "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY",
    "bounded_answer": "The local server documents an opt-in, case-sensitive environment guard. It blocks environment-scoped write/delete calls but leaves reads and specified organisation-level or generation operations outside that guard. Other clients are unaffected. Review both the guard and underlying permissions before treating an environment as protected.",
    "required_buyer_context": "Local server version, space, exact environment ID, protected list and Management API token.",
    "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state."
  },
  "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.",
  "trust_profile": {
    "schema": "varexis-agent-tool-trust/1",
    "identity": {
      "tool": "Contentful",
      "variant": "Official local Contentful MCP for the Management API"
    },
    "review_status": "documentation_review_only",
    "checked_on": "2026-10-14",
    "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.",
    "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.",
    "findings": [
      {
        "field": "operator",
        "label": "Publisher and operator",
        "status": "documented",
        "statement": "Contentful publishes the local Management API server.",
        "source_ids": [
          "contentful"
        ]
      },
      {
        "field": "purpose",
        "label": "Purpose",
        "status": "documented",
        "statement": "Manage content, assets and content models.",
        "source_ids": [
          "contentful"
        ]
      },
      {
        "field": "reads",
        "label": "Read capability",
        "status": "documented",
        "statement": "Entries, assets, models and version information.",
        "source_ids": [
          "contentful"
        ]
      },
      {
        "field": "writes",
        "label": "Write capability",
        "status": "documented",
        "statement": "Content creation, editing, publication and other management operations.",
        "source_ids": [
          "contentful"
        ]
      },
      {
        "field": "auth",
        "label": "Authentication",
        "status": "documented",
        "statement": "Contentful Management API personal access token.",
        "source_ids": [
          "contentful"
        ]
      },
      {
        "field": "permissions",
        "label": "Permission surface",
        "status": "documented",
        "statement": "Optional protected-environment list complements role-based permissions.",
        "source_ids": [
          "contentful"
        ]
      },
      {
        "field": "egress",
        "label": "Data leaving the environment",
        "status": "review_inference",
        "statement": "Content and exports can reach the agent or local output files.",
        "source_ids": [
          "contentful"
        ]
      },
      {
        "field": "failures",
        "label": "Failure modes to consider",
        "status": "review_inference",
        "statement": "Unset or differently capitalised environment IDs can defeat the intended guard.",
        "source_ids": [
          "contentful"
        ]
      },
      {
        "field": "unknown",
        "label": "Unknowns and applicability",
        "status": "unknown",
        "statement": "Buyer roles and protection settings have not been verified.",
        "source_ids": []
      },
      {
        "field": "gate",
        "label": "Suggested refusal or clarification condition",
        "status": "varexis_review_policy",
        "statement": "Do not claim universal write prevention from the connector guard.",
        "source_ids": []
      }
    ],
    "evidence_sources": [
      {
        "source_id": "contentful",
        "url": "https://github.com/contentful/contentful-mcp-server/blob/main/README.md",
        "final_url": "https://github.com/contentful/contentful-mcp-server/blob/main/README.md",
        "title": "Contentful local MCP environment guard",
        "checked_on": "2026-10-14",
        "sha256": "de1638045d830371565f53f013125e3096e3ac640f7eae42568c500d2c3ba8e9",
        "bytes": 348011
      }
    ],
    "observed_tool_execution": false,
    "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.",
    "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.",
    "paid_value": {
      "decision_context": "Preserve the exact scope and exceptions of a protected-environment approval.",
      "free": "Complete review, practical questions, sources and limitations; may be saved locally.",
      "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.",
      "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.",
      "excluded": [
        "Fresh vendor research",
        "Continuous monitoring or change alerts",
        "Testing the buyer configuration",
        "Private evidence or vendor certification"
      ],
      "integrity": "Hashes identify content versions; they do not prove truth or provide a signature."
    },
    "revalidation": {
      "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.",
      "specific_watch": "Guard coverage, default environment and organisation-scoped tools."
    },
    "change_history": [
      {
        "version": 1,
        "date": "2026-10-14",
        "change": "Initial documentation review; no earlier vendor assessment claimed."
      }
    ]
  },
  "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.",
  "service_route": {
    "request_guide": "/varexis-index/request.html",
    "request_workflow": "/varexis-index/request-workflow.json",
    "service_id": "single_request",
    "service_routes_url": "/varexis-index/service-routes.json",
    "payment_required": true,
    "availability_endpoint": "/api/index/capabilities",
    "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED",
    "checkout_url": "/index-access"
  },
  "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.",
  "human_page": "/varexis-index/catalog.html#contentful-mcp-protected-environment-trust",
  "machine_readable_record": "/varexis-index/records/contentful-mcp-protected-environment-trust.json"
}