{
  "schema": "varexis-public-evidence-record/0.3",
  "generated_at_utc": "2026-10-14T01:25:58.088Z",
  "record_id": "VXI-EXT-TOOL-TRUST-FIREBASE-01-v1",
  "record_kind": "external_reference",
  "title": "Firebase MCP: CLI identity, core tools and remote requests",
  "system": "Firebase MCP",
  "evidence_family": "agent_tool_trust_review",
  "index_status": "PUBLIC_SAFE_SOURCE_REVIEW",
  "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY",
  "canonical_question": "Does limiting Firebase MCP feature groups remove every other capability?",
  "near_questions": [
    "Do selected feature groups remove all other Firebase MCP tools?",
    "Which identity does a local Firebase connector inherit?",
    "Can a local tool proxy requests to cloud services?",
    "Does local execution prove application data stays local?",
    "What project context will the Firebase agent use?",
    "Can an assistant manage authentication users?",
    "Does a data-reading task permit cloud messaging?",
    "Which core tools remain available after filtering?",
    "What evidence establishes the active CLI identity?",
    "Can I save a Firebase permission review before onboarding?",
    "Does a feature group name establish read-only access?",
    "When should inherited credentials trigger another review?"
  ],
  "supported_claims": [
    {
      "claim": "No. Firebase says core tools remain available when feature groups are selected. The local server inherits Firebase CLI credentials, and some tools proxy requests to remote services. Review identity, project context and the complete exposed tool list rather than assuming local execution or a feature filter is complete isolation.",
      "reliance": "DOCUMENTED_CAPABILITY_ONLY"
    }
  ],
  "not_demonstrated_claims": [
    "Verified buyer configuration or effective access rights",
    "Independent execution, completeness or security testing",
    "Vendor certification, legal compliance or guaranteed suitability"
  ],
  "public_summary": "No. Firebase says core tools remain available when feature groups are selected. The local server inherits Firebase CLI credentials, and some tools proxy requests to remote services. Review identity, project context and the complete exposed tool list rather than assuming local execution or a feature filter is complete isolation.",
  "related_record_ids": [
    "VXI-EXT-TOOL-TRUST-RENDER-01-v1",
    "VXI-EXT-TOOL-TRUST-RAILWAY-01-v1",
    "VXI-EXT-TOOL-TRUST-CLOUDINARY-01-v1",
    "VXI-EXT-TOOL-TRUST-PAYPAL-01-v1"
  ],
  "source_review": {
    "source_type": "official_external_documentation",
    "source_title": "Firebase MCP inherited identity, remote requests and feature groups",
    "source_url": "https://firebase.google.com/docs/ai-assistance/mcp-server?hl=en",
    "checked_on": "2026-10-14",
    "candidate_record_id": "VXI-EXT-TOOL-TRUST-FIREBASE-01-v1",
    "candidate_record_sha256": "7bb3c1de377a7fd416ee8250bd1447475738cf5ce17186195b8f7715729193a1",
    "method": "Primary documentation reviewed for the published bounded statement.",
    "deployment_tested_by_varexis": false,
    "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research."
  },
  "answer_policy": {
    "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY",
    "bounded_answer": "No. Firebase says core tools remain available when feature groups are selected. The local server inherits Firebase CLI credentials, and some tools proxy requests to remote services. Review identity, project context and the complete exposed tool list rather than assuming local execution or a feature filter is complete isolation.",
    "required_buyer_context": "Identify CLI/ADC identity, active project context, enabled groups and core tools.",
    "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state."
  },
  "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.",
  "trust_profile": {
    "schema": "varexis-agent-tool-trust/1",
    "identity": {
      "tool": "Firebase MCP",
      "variant": "Local stdio server"
    },
    "review_status": "documentation_review_only",
    "checked_on": "2026-10-14",
    "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.",
    "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.",
    "findings": [
      {
        "field": "operator",
        "label": "Publisher and operator",
        "status": "documented",
        "statement": "Google publishes the Firebase local MCP server.",
        "source_ids": [
          "firebase-en"
        ]
      },
      {
        "field": "purpose",
        "label": "Purpose",
        "status": "documented",
        "statement": "Work with Firebase projects, application data and development context.",
        "source_ids": [
          "firebase-en"
        ]
      },
      {
        "field": "reads",
        "label": "Read capability",
        "status": "documented",
        "statement": "Reads project data, schemas and security-rule context.",
        "source_ids": [
          "firebase-en"
        ]
      },
      {
        "field": "writes",
        "label": "Write capability",
        "status": "documented",
        "statement": "Can manage projects and users, work with data and send cloud messages.",
        "source_ids": [
          "firebase-en"
        ]
      },
      {
        "field": "auth",
        "label": "Authentication",
        "status": "documented",
        "statement": "Uses the same logged-in user or Application Default Credentials as the Firebase CLI.",
        "source_ids": [
          "firebase-en"
        ]
      },
      {
        "field": "permissions",
        "label": "Permission surface",
        "status": "documented",
        "statement": "Feature-group selection retains core tools; identity and project context still matter.",
        "source_ids": [
          "firebase-en"
        ]
      },
      {
        "field": "egress",
        "label": "Data leaving the environment",
        "status": "review_inference",
        "statement": "Some local tools call remote backends; results can enter the AI client.",
        "source_ids": [
          "firebase-en"
        ]
      },
      {
        "field": "failures",
        "label": "Failure modes to consider",
        "status": "review_inference",
        "statement": "The wrong project context or broad inherited identity can misdirect an action.",
        "source_ids": [
          "firebase-en"
        ]
      },
      {
        "field": "unknown",
        "label": "Unknowns and applicability",
        "status": "unknown",
        "statement": "Buyer credentials, core-tool configuration and cloud permissions are unverified.",
        "source_ids": []
      },
      {
        "field": "gate",
        "label": "Suggested refusal or clarification condition",
        "status": "varexis_review_policy",
        "statement": "Check identity and complete tool exposure before approving cloud changes.",
        "source_ids": []
      }
    ],
    "evidence_sources": [
      {
        "source_id": "firebase-en",
        "url": "https://firebase.google.com/docs/ai-assistance/mcp-server?hl=en",
        "final_url": "https://firebase.google.com/docs/ai-assistance/mcp-server?hl=en",
        "title": "Firebase MCP inherited identity, remote requests and feature groups",
        "checked_on": "2026-10-14",
        "sha256": "ce9270bf5b8401ccb563e09df367fc65c3f7346ad03fa143cc9b3a810c3f0676",
        "bytes": 288434
      }
    ],
    "observed_tool_execution": false,
    "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.",
    "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.",
    "paid_value": {
      "decision_context": "Save the inherited-identity and feature-filter boundaries for a Firebase agent review.",
      "free": "Complete review, practical questions, sources and limitations; may be saved locally.",
      "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.",
      "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.",
      "excluded": [
        "Fresh vendor research",
        "Continuous monitoring or change alerts",
        "Testing the buyer configuration",
        "Private evidence or vendor certification"
      ],
      "integrity": "Hashes identify content versions; they do not prove truth or provide a signature."
    },
    "revalidation": {
      "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.",
      "specific_watch": "Recheck CLI identity, project context and core-tool changes."
    },
    "change_history": [
      {
        "version": 1,
        "date": "2026-10-14",
        "change": "Initial documentation review; no earlier vendor assessment claimed."
      }
    ]
  },
  "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.",
  "service_route": {
    "request_guide": "/varexis-index/request.html",
    "request_workflow": "/varexis-index/request-workflow.json",
    "service_id": "single_request",
    "service_routes_url": "/varexis-index/service-routes.json",
    "payment_required": true,
    "availability_endpoint": "/api/index/capabilities",
    "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED",
    "checkout_url": "/index-access"
  },
  "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.",
  "human_page": "/varexis-index/catalog.html#firebase-mcp-cli-identity-core-trust",
  "machine_readable_record": "/varexis-index/records/firebase-mcp-cli-identity-core-trust.json"
}