{
  "schema": "varexis-public-evidence-record/0.3",
  "generated_at_utc": "2026-10-14T20:21:57.226Z",
  "record_id": "VXI-EXT-TOOL-TRUST-HARNESS-01-v1",
  "record_kind": "external_reference",
  "title": "Harness MCP: Default targets are separate from access restrictions",
  "system": "Harness",
  "evidence_family": "agent_tool_trust_review",
  "index_status": "PUBLIC_SAFE_SOURCE_REVIEW",
  "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY",
  "canonical_question": "Do Harness MCP default organisation and project settings prevent other targets?",
  "near_questions": [
    "Does a default project restrict every agent action?",
    "Can a Harness agent discover other organisations?",
    "Is Harness MCP read-only by default?",
    "Which calls remain permitted in read-only mode?",
    "Does a local API token configure hosted Harness MCP?",
    "Can a client change the managed endpoint environment?",
    "Are host-header restrictions the same as authentication?",
    "Which permission evidence supports an approved pipeline target?",
    "Can execute operations run when only inspection was intended?",
    "What changes when an MCP server serves multiple users?",
    "When should a default-target claim remain qualified?",
    "Can I save a Harness scope review?"
  ],
  "supported_claims": [
    {
      "claim": "The README describes those settings as defaults used when calls omit identifiers; agents can discover and supply other targets. Read-only mode separately blocks mutating operations and defaults off. Hosted OAuth and local credentials also differ. Review effective permissions rather than treating defaults as an access allowlist.",
      "reliance": "DOCUMENTED_CAPABILITY_ONLY"
    }
  ],
  "not_demonstrated_claims": [
    "Verified buyer configuration or effective access rights",
    "Independent execution, completeness or security testing",
    "Vendor certification, legal compliance or guaranteed suitability"
  ],
  "public_summary": "The README describes those settings as defaults used when calls omit identifiers; agents can discover and supply other targets. Read-only mode separately blocks mutating operations and defaults off. Hosted OAuth and local credentials also differ. Review effective permissions rather than treating defaults as an access allowlist.",
  "related_record_ids": [
    "VXI-EXT-TOOL-TRUST-PULUMI-01-v1",
    "VXI-EXT-TOOL-TRUST-TERRAFORM-01-v1",
    "VXI-EXT-TOOL-TRUST-WORKOS-01-v1"
  ],
  "source_review": {
    "source_type": "official_external_documentation",
    "source_title": "Harness MCP access and read-only mode",
    "source_url": "https://github.com/harness/mcp-server/blob/main/README.md",
    "checked_on": "2026-10-14",
    "candidate_record_id": "VXI-EXT-TOOL-TRUST-HARNESS-01-v1",
    "candidate_record_sha256": "af666a2a04ebf5685502af8eb5f25766d9756a9503c74fee1025cfc7464a1bd1",
    "method": "Primary documentation reviewed for the published bounded statement.",
    "deployment_tested_by_varexis": false,
    "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research."
  },
  "answer_policy": {
    "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY",
    "bounded_answer": "The README describes those settings as defaults used when calls omit identifiers; agents can discover and supply other targets. Read-only mode separately blocks mutating operations and defaults off. Hosted OAuth and local credentials also differ. Review effective permissions rather than treating defaults as an access allowlist.",
    "required_buyer_context": "Deployment mode, account identity, organisation/project permissions, toolsets and read-only setting.",
    "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state."
  },
  "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.",
  "trust_profile": {
    "schema": "varexis-agent-tool-trust/1",
    "identity": {
      "tool": "Harness",
      "variant": "Local/self-hosted MCP and managed hosted alternative"
    },
    "review_status": "documentation_review_only",
    "checked_on": "2026-10-14",
    "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.",
    "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.",
    "findings": [
      {
        "field": "operator",
        "label": "Publisher and operator",
        "status": "documented",
        "statement": "Harness publishes the server and offers a managed hosted option.",
        "source_ids": [
          "harness"
        ]
      },
      {
        "field": "purpose",
        "label": "Purpose",
        "status": "documented",
        "statement": "Inspect and manage Harness platform resources.",
        "source_ids": [
          "harness"
        ]
      },
      {
        "field": "reads",
        "label": "Read capability",
        "status": "documented",
        "statement": "Permitted project, pipeline and other selected resource data.",
        "source_ids": [
          "harness"
        ]
      },
      {
        "field": "writes",
        "label": "Write capability",
        "status": "documented",
        "statement": "Create, update, delete and execute operations unless read-only restrictions apply.",
        "source_ids": [
          "harness"
        ]
      },
      {
        "field": "auth",
        "label": "Authentication",
        "status": "documented",
        "statement": "Local single-user token or mode-specific per-user credentials; hosted OAuth.",
        "source_ids": [
          "harness"
        ]
      },
      {
        "field": "permissions",
        "label": "Permission surface",
        "status": "documented",
        "statement": "Read-only controls and credentials are separate from default targets.",
        "source_ids": [
          "harness"
        ]
      },
      {
        "field": "egress",
        "label": "Data leaving the environment",
        "status": "review_inference",
        "statement": "Configuration, execution and resource data can reach the client.",
        "source_ids": [
          "harness"
        ]
      },
      {
        "field": "failures",
        "label": "Failure modes to consider",
        "status": "review_inference",
        "statement": "A default project may be mistaken for a hard scope restriction.",
        "source_ids": [
          "harness"
        ]
      },
      {
        "field": "unknown",
        "label": "Unknowns and applicability",
        "status": "unknown",
        "statement": "Buyer roles, deployment mode and actual target are unverified.",
        "source_ids": []
      },
      {
        "field": "gate",
        "label": "Suggested refusal or clarification condition",
        "status": "varexis_review_policy",
        "statement": "Confirm effective target permissions before relying on default identifiers.",
        "source_ids": []
      }
    ],
    "evidence_sources": [
      {
        "source_id": "harness",
        "url": "https://github.com/harness/mcp-server/blob/main/README.md",
        "final_url": "https://github.com/harness/mcp-server/blob/main/README.md",
        "title": "Harness MCP access and read-only mode",
        "checked_on": "2026-10-14",
        "sha256": "c60de98148410377a39381de606268ef422bb163975c9a6d6f9eff244c78fbde",
        "bytes": 1508108
      }
    ],
    "observed_tool_execution": false,
    "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.",
    "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.",
    "paid_value": {
      "decision_context": "Preserve the distinction between convenience defaults, credential authority and write restrictions.",
      "free": "Complete review, practical questions, sources and limitations; may be saved locally.",
      "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.",
      "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.",
      "excluded": [
        "Fresh vendor research",
        "Continuous monitoring or change alerts",
        "Testing the buyer configuration",
        "Private evidence or vendor certification"
      ],
      "integrity": "Hashes identify content versions; they do not prove truth or provide a signature."
    },
    "revalidation": {
      "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.",
      "specific_watch": "Mode-specific authentication, read-only defaults and target selection."
    },
    "change_history": [
      {
        "version": 1,
        "date": "2026-10-14",
        "change": "Initial documentation review; no earlier vendor assessment claimed."
      }
    ]
  },
  "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.",
  "service_route": {
    "request_guide": "/varexis-index/request.html",
    "request_workflow": "/varexis-index/request-workflow.json",
    "service_id": "single_request",
    "service_routes_url": "/varexis-index/service-routes.json",
    "payment_required": true,
    "availability_endpoint": "/api/index/capabilities",
    "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED",
    "checkout_url": "/index-access"
  },
  "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.",
  "human_page": "/varexis-index/catalog.html#harness-mcp-default-target-trust",
  "machine_readable_record": "/varexis-index/records/harness-mcp-default-target-trust.json"
}