{ "schema": "varexis-public-evidence-record/0.3", "generated_at_utc": "2026-10-16T02:40:06.177Z", "record_id": "VXI-EXT-TOOL-TRUST-GOOGLE-KNOWLEDGE-01-v1", "record_kind": "external_reference", "title": "Google Developer Knowledge MCP: Documentation access and API identity", "system": "Google Developer Knowledge MCP", "evidence_family": "agent_tool_trust_review", "index_status": "PUBLIC_SAFE_SOURCE_REVIEW", "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY", "canonical_question": "Does Google Developer Knowledge MCP inspect or change my Google Cloud resources?", "near_questions": [ "Can Developer Knowledge MCP inspect my Cloud project?", "Which documentation tools are available?", "Can I authenticate with an API key?", "Can the client use OAuth or application default credentials?", "Which project receives API usage attribution?", "Does the API key need service restriction?", "Can missing service-usage permission stop a request?", "Does a generated answer prove a control is enabled?", "What input should stay out of a documentation query?", "Can the tool change Cloud resources?", "When should an agent request configuration evidence?", "Can I save the documentation-versus-deployment boundary?" ], "supported_claims": [ { "claim": "The documented tools search, fetch and answer questions from developer documentation. API keys or OAuth-based credentials support access and project attribution; that is separate from inspecting a buyer Cloud deployment. A documentation answer cannot establish actual resource state or a control being enabled.", "reliance": "DOCUMENTED_CAPABILITY_ONLY" } ], "not_demonstrated_claims": [ "Verified buyer configuration or effective access rights", "Independent execution, completeness or security testing", "Vendor certification, legal compliance or guaranteed suitability" ], "public_summary": "The documented tools search, fetch and answer questions from developer documentation. API keys or OAuth-based credentials support access and project attribution; that is separate from inspecting a buyer Cloud deployment. A documentation answer cannot establish actual resource state or a control being enabled.", "related_record_ids": [ "VXI-EXT-TOOL-TRUST-MS-LEARN-01-v1" ], "source_review": { "source_type": "official_external_documentation", "source_title": "Google Developer Knowledge MCP credentials and retrieval", "source_url": "https://developers.google.com/knowledge/mcp", "checked_on": "2026-10-16", "candidate_record_id": "VXI-EXT-TOOL-TRUST-GOOGLE-KNOWLEDGE-01-v1", "candidate_record_sha256": "41a699fcc18ed68af31be36209088b5ef68949db2d21d4e796554fef44db50f1", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "answer_policy": { "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY", "bounded_answer": "The documented tools search, fetch and answer questions from developer documentation. API keys or OAuth-based credentials support access and project attribution; that is separate from inspecting a buyer Cloud deployment. A documentation answer cannot establish actual resource state or a control being enabled.", "required_buyer_context": "API credential mode, project attribution, key restrictions and requested document scope.", "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state." }, "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.", "trust_profile": { "schema": "varexis-agent-tool-trust/1", "identity": { "tool": "Google Developer Knowledge MCP", "variant": "Google hosted documentation service" }, "review_status": "documentation_review_only", "checked_on": "2026-10-16", "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.", "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.", "findings": [ { "field": "operator", "label": "Publisher and operator", "status": "documented", "statement": "Google publishes the Developer Knowledge MCP endpoint.", "source_ids": [ "google-knowledge" ] }, { "field": "purpose", "label": "Purpose", "status": "documented", "statement": "Search and retrieve developer documentation and answer documentation questions.", "source_ids": [ "google-knowledge" ] }, { "field": "reads", "label": "Read capability", "status": "documented", "statement": "Documentation search results, full documents and generated documentation answers.", "source_ids": [ "google-knowledge" ] }, { "field": "writes", "label": "Write capability", "status": "documented", "statement": "No cloud-resource mutation is described in the reviewed tool inventory.", "source_ids": [ "google-knowledge" ] }, { "field": "auth", "label": "Authentication", "status": "documented", "statement": "API-key and OAuth/ADC approaches are documented.", "source_ids": [ "google-knowledge" ] }, { "field": "permissions", "label": "Permission surface", "status": "documented", "statement": "API restrictions and project attribution need configuration; ADC can require service-usage permission.", "source_ids": [ "google-knowledge" ] }, { "field": "egress", "label": "Data leaving the environment", "status": "review_inference", "statement": "Queries are sent to Google and returned material enters the client context.", "source_ids": [ "google-knowledge" ] }, { "field": "failures", "label": "Failure modes to consider", "status": "review_inference", "statement": "Expired credentials, missing project permissions and documentation applicability can affect results.", "source_ids": [ "google-knowledge" ] }, { "field": "unknown", "label": "Unknowns and applicability", "status": "unknown", "statement": "Buyer API restrictions, billing project and actual Cloud configuration are not inspected.", "source_ids": [] }, { "field": "gate", "label": "Suggested refusal or clarification condition", "status": "varexis_review_policy", "statement": "Do not substitute documentation retrieval for resource-state evidence or send secrets as search text.", "source_ids": [] } ], "evidence_sources": [ { "source_id": "google-knowledge", "url": "https://developers.google.com/knowledge/mcp", "final_url": "https://developers.google.com/knowledge/mcp", "title": "Google Developer Knowledge MCP credentials and retrieval", "checked_on": "2026-10-16", "sha256": "cb91d3c08f5d7ec9635289e9d07b91d84bcae19ce869fd7cda9ac5afb03643e2", "bytes": 138705 } ], "observed_tool_execution": false, "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.", "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.", "paid_value": { "decision_context": "Preserve which answer came from documentation and which deployment facts remain unverified.", "free": "Complete review, practical questions, sources and limitations; may be saved locally.", "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.", "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.", "excluded": [ "Fresh vendor research", "Continuous monitoring or change alerts", "Testing the buyer configuration", "Private evidence or vendor certification" ], "integrity": "Hashes identify content versions; they do not prove truth or provide a signature." }, "revalidation": { "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.", "specific_watch": "Authentication prerequisites, project attribution and tool definitions." }, "change_history": [ { "version": 1, "date": "2026-10-16", "change": "Initial documentation review; no earlier vendor assessment claimed." } ] }, "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.", "service_route": { "request_guide": "/varexis-index/request.html", "request_workflow": "/varexis-index/request-workflow.json", "service_id": "single_request", "service_routes_url": "/varexis-index/service-routes.json", "payment_required": true, "availability_endpoint": "/api/index/capabilities", "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED", "checkout_url": "/index-access" }, "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.", "human_page": "/varexis-index/catalog.html#google-developer-knowledge-mcp-api-identity", "machine_readable_record": "/varexis-index/records/google-developer-knowledge-mcp-api-identity.json" }