{
  "schema": "varexis-public-evidence-record/0.3",
  "generated_at_utc": "2026-10-16T07:59:18.009Z",
  "record_id": "VXI-EXT-TOOL-TRUST-LANGFUSE-01-v1",
  "record_kind": "external_reference",
  "title": "Langfuse MCP: Project keys expose more than documentation",
  "system": "Langfuse data-platform MCP",
  "evidence_family": "agent_tool_trust_review",
  "index_status": "PUBLIC_SAFE_SOURCE_REVIEW",
  "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY",
  "canonical_question": "Is the Langfuse MCP connection a public documentation-only tool?",
  "near_questions": [
    "Is Langfuse docs MCP the same as project MCP?",
    "Are write tools enabled by default?",
    "Which project does the API key select?",
    "Can a client allowlist limit tool use?",
    "Does an allowlist change the underlying key rights?",
    "Can prompt content reach the model client?",
    "Which regional endpoint is configured?",
    "Can self-hosted proxy host checks reject a request?",
    "Does listing prompts authorise changing them?",
    "Which data is included in observation results?",
    "What should procurement inspect before connecting production traces?",
    "Can I preserve the Langfuse access review?"
  ],
  "supported_claims": [
    {
      "claim": "The data-platform endpoint is authenticated and project-scoped. Read and write tools are available by default; the guide recommends a client allowlist for read-only workflows. It is separate from the public documentation server. Endpoint region, key scope and permitted operations must be identified.",
      "reliance": "DOCUMENTED_CAPABILITY_ONLY"
    }
  ],
  "not_demonstrated_claims": [
    "Verified buyer configuration or effective access rights",
    "Independent execution, completeness or security testing",
    "Vendor certification, legal compliance or guaranteed suitability"
  ],
  "public_summary": "The data-platform endpoint is authenticated and project-scoped. Read and write tools are available by default; the guide recommends a client allowlist for read-only workflows. It is separate from the public documentation server. Endpoint region, key scope and permitted operations must be identified.",
  "related_record_ids": [],
  "source_review": {
    "source_type": "official_external_documentation",
    "source_title": "Langfuse project MCP server",
    "source_url": "https://langfuse.com/docs/api-and-data-platform/features/mcp-server",
    "checked_on": "2026-10-16",
    "candidate_record_id": "VXI-EXT-TOOL-TRUST-LANGFUSE-01-v1",
    "candidate_record_sha256": "de227492de8658101b5fbc472768e844ff59c84aa1e1e85245c49dff0d328682",
    "method": "Primary documentation reviewed for the published bounded statement.",
    "deployment_tested_by_varexis": false,
    "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research."
  },
  "answer_policy": {
    "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY",
    "bounded_answer": "The data-platform endpoint is authenticated and project-scoped. Read and write tools are available by default; the guide recommends a client allowlist for read-only workflows. It is separate from the public documentation server. Endpoint region, key scope and permitted operations must be identified.",
    "required_buyer_context": "Endpoint, project key, client allowlist, data sensitivity and permitted operations.",
    "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state."
  },
  "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.",
  "trust_profile": {
    "schema": "varexis-agent-tool-trust/1",
    "identity": {
      "tool": "Langfuse data-platform MCP",
      "variant": "Authenticated project endpoint, distinct from public docs MCP"
    },
    "review_status": "documentation_review_only",
    "checked_on": "2026-10-16",
    "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.",
    "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.",
    "findings": [
      {
        "field": "operator",
        "label": "Publisher and operator",
        "status": "documented",
        "statement": "Langfuse operates Cloud; buyers can self-host.",
        "source_ids": [
          "langfuse"
        ]
      },
      {
        "field": "purpose",
        "label": "Purpose",
        "status": "documented",
        "statement": "Retrieve project evidence and manage supported platform objects.",
        "source_ids": [
          "langfuse"
        ]
      },
      {
        "field": "reads",
        "label": "Read capability",
        "status": "documented",
        "statement": "Project prompts and observability data.",
        "source_ids": [
          "langfuse"
        ]
      },
      {
        "field": "writes",
        "label": "Write capability",
        "status": "documented",
        "statement": "Supported prompt and other write tools are available.",
        "source_ids": [
          "langfuse"
        ]
      },
      {
        "field": "auth",
        "label": "Authentication",
        "status": "documented",
        "statement": "Project API-key pair through Basic authentication.",
        "source_ids": [
          "langfuse"
        ]
      },
      {
        "field": "permissions",
        "label": "Permission surface",
        "status": "documented",
        "statement": "Project scope and effective client tool allowlist.",
        "source_ids": [
          "langfuse"
        ]
      },
      {
        "field": "egress",
        "label": "Data leaving the environment",
        "status": "review_inference",
        "statement": "Project content becomes available to the connected agent.",
        "source_ids": [
          "langfuse"
        ]
      },
      {
        "field": "failures",
        "label": "Failure modes to consider",
        "status": "review_inference",
        "statement": "Confusing docs access with project access can disclose sensitive data.",
        "source_ids": [
          "langfuse"
        ]
      },
      {
        "field": "unknown",
        "label": "Unknowns and applicability",
        "status": "unknown",
        "statement": "Buyer allowlist, key ownership and data retention are untested.",
        "source_ids": []
      },
      {
        "field": "gate",
        "label": "Suggested refusal or clarification condition",
        "status": "varexis_review_policy",
        "statement": "Require project disclosure and write authority separately.",
        "source_ids": []
      }
    ],
    "evidence_sources": [
      {
        "source_id": "langfuse",
        "url": "https://langfuse.com/docs/api-and-data-platform/features/mcp-server",
        "final_url": "https://langfuse.com/docs/api-and-data-platform/features/mcp-server",
        "title": "Langfuse project MCP server",
        "checked_on": "2026-10-16",
        "sha256": "c4d64e21391bf3710a786513a1ca75976b8c03d86ae0dcad13608c5546ce36ba",
        "bytes": 594535
      }
    ],
    "observed_tool_execution": false,
    "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.",
    "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.",
    "paid_value": {
      "decision_context": "Retain the project-data disclosure and write-authority conditions for an observability integration.",
      "free": "Complete review, practical questions, sources and limitations; may be saved locally.",
      "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.",
      "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.",
      "excluded": [
        "Fresh vendor research",
        "Continuous monitoring or change alerts",
        "Testing the buyer configuration",
        "Private evidence or vendor certification"
      ],
      "integrity": "Hashes identify content versions; they do not prove truth or provide a signature."
    },
    "revalidation": {
      "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.",
      "specific_watch": "Tool set, project key scope, endpoint region and client enforcement."
    },
    "change_history": [
      {
        "version": 1,
        "date": "2026-10-16",
        "change": "Initial documentation review; no earlier vendor assessment claimed."
      }
    ]
  },
  "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.",
  "service_route": {
    "request_guide": "/varexis-index/request.html",
    "request_workflow": "/varexis-index/request-workflow.json",
    "service_id": "single_request",
    "service_routes_url": "/varexis-index/service-routes.json",
    "payment_required": true,
    "availability_endpoint": "/api/index/capabilities",
    "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED",
    "checkout_url": "/index-access"
  },
  "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.",
  "human_page": "/varexis-index/catalog.html#langfuse-mcp-project-readwrite-boundary",
  "machine_readable_record": "/varexis-index/records/langfuse-mcp-project-readwrite-boundary.json"
}