{
  "schema": "varexis-public-evidence-record/0.3",
  "generated_at_utc": "2026-10-16T02:40:06.177Z",
  "record_id": "VXI-EXT-TOOL-TRUST-MS-LEARN-01-v1",
  "record_kind": "external_reference",
  "title": "Microsoft Learn MCP: Public documentation, not tenant inspection",
  "system": "Microsoft Learn MCP",
  "evidence_family": "agent_tool_trust_review",
  "index_status": "PUBLIC_SAFE_SOURCE_REVIEW",
  "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY",
  "canonical_question": "Can Microsoft Learn MCP verify how my Microsoft tenant is configured?",
  "near_questions": [
    "Can Learn MCP inspect my Entra tenant?",
    "Which Microsoft documentation tools are exposed?",
    "Does the Learn endpoint require a tenant token?",
    "Can a documentation search change Azure resources?",
    "Does a code sample prove my configuration works?",
    "Can a search token budget truncate evidence?",
    "Should an agent refresh the tool list after a schema error?",
    "Can I fetch the full article behind a search result?",
    "What tenant evidence is still required?",
    "Does public documentation establish feature entitlement?",
    "When is free documentation retrieval sufficient?",
    "Can I preserve the reviewed Learn capability limits?"
  ],
  "supported_claims": [
    {
      "claim": "The public server searches and fetches Microsoft documentation and code samples without authentication. It does not inspect the buyer tenant. Its tool definitions can change, and optional search token budgets can truncate results. A documentation answer is therefore a starting point for a configuration review, not evidence that a control is enabled.",
      "reliance": "DOCUMENTED_CAPABILITY_ONLY"
    }
  ],
  "not_demonstrated_claims": [
    "Verified buyer configuration or effective access rights",
    "Independent execution, completeness or security testing",
    "Vendor certification, legal compliance or guaranteed suitability"
  ],
  "public_summary": "The public server searches and fetches Microsoft documentation and code samples without authentication. It does not inspect the buyer tenant. Its tool definitions can change, and optional search token budgets can truncate results. A documentation answer is therefore a starting point for a configuration review, not evidence that a control is enabled.",
  "related_record_ids": [
    "VXI-EXT-TOOL-TRUST-GOOGLE-KNOWLEDGE-01-v1"
  ],
  "source_review": {
    "source_type": "official_external_documentation",
    "source_title": "Microsoft Learn MCP public documentation tools",
    "source_url": "https://github.com/MicrosoftDocs/mcp",
    "checked_on": "2026-10-16",
    "candidate_record_id": "VXI-EXT-TOOL-TRUST-MS-LEARN-01-v1",
    "candidate_record_sha256": "d259a61306faa138f5d11b528755e0217e59495ea1002f67da159bd7ac538e2f",
    "method": "Primary documentation reviewed for the published bounded statement.",
    "deployment_tested_by_varexis": false,
    "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research."
  },
  "answer_policy": {
    "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY",
    "bounded_answer": "The public server searches and fetches Microsoft documentation and code samples without authentication. It does not inspect the buyer tenant. Its tool definitions can change, and optional search token budgets can truncate results. A documentation answer is therefore a starting point for a configuration review, not evidence that a control is enabled.",
    "required_buyer_context": "Requested Microsoft feature, document version, complete article and separate tenant evidence.",
    "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state."
  },
  "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.",
  "trust_profile": {
    "schema": "varexis-agent-tool-trust/1",
    "identity": {
      "tool": "Microsoft Learn MCP",
      "variant": "Public hosted documentation server"
    },
    "review_status": "documentation_review_only",
    "checked_on": "2026-10-16",
    "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.",
    "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.",
    "findings": [
      {
        "field": "operator",
        "label": "Publisher and operator",
        "status": "documented",
        "statement": "Microsoft publishes the hosted Learn documentation server.",
        "source_ids": [
          "learn"
        ]
      },
      {
        "field": "purpose",
        "label": "Purpose",
        "status": "documented",
        "statement": "Find documentation, fetch an article and locate code samples.",
        "source_ids": [
          "learn"
        ]
      },
      {
        "field": "reads",
        "label": "Read capability",
        "status": "documented",
        "statement": "Public Microsoft documentation and published examples.",
        "source_ids": [
          "learn"
        ]
      },
      {
        "field": "writes",
        "label": "Write capability",
        "status": "documented",
        "statement": "No tenant-changing operation is described in the reviewed tool set.",
        "source_ids": [
          "learn"
        ]
      },
      {
        "field": "auth",
        "label": "Authentication",
        "status": "documented",
        "statement": "No authentication is required for the public endpoint.",
        "source_ids": [
          "learn"
        ]
      },
      {
        "field": "permissions",
        "label": "Permission surface",
        "status": "documented",
        "statement": "Public documentation access does not grant tenant or subscription access.",
        "source_ids": [
          "learn"
        ]
      },
      {
        "field": "egress",
        "label": "Data leaving the environment",
        "status": "review_inference",
        "statement": "Search text and document requests go to the hosted service; the client receives returned content.",
        "source_ids": [
          "learn"
        ]
      },
      {
        "field": "failures",
        "label": "Failure modes to consider",
        "status": "review_inference",
        "statement": "Cached tool definitions and truncated search output can affect retrieval.",
        "source_ids": [
          "learn"
        ]
      },
      {
        "field": "unknown",
        "label": "Unknowns and applicability",
        "status": "unknown",
        "statement": "Tenant settings, licensed features and current application behaviour are not observed.",
        "source_ids": []
      },
      {
        "field": "gate",
        "label": "Suggested refusal or clarification condition",
        "status": "varexis_review_policy",
        "statement": "Require tenant evidence before converting a documentation description into an enabled-control claim.",
        "source_ids": []
      }
    ],
    "evidence_sources": [
      {
        "source_id": "learn",
        "url": "https://github.com/MicrosoftDocs/mcp",
        "final_url": "https://github.com/MicrosoftDocs/mcp",
        "title": "Microsoft Learn MCP public documentation tools",
        "checked_on": "2026-10-16",
        "sha256": "b622d0082215da6f43ecf5de7b41e0ba375c6cd3caad0170fea4187150f75059",
        "bytes": 405388
      }
    ],
    "observed_tool_execution": false,
    "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.",
    "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.",
    "paid_value": {
      "decision_context": "Save the distinction between a published feature and a control demonstrated in the buyer environment.",
      "free": "Complete review, practical questions, sources and limitations; may be saved locally.",
      "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.",
      "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.",
      "excluded": [
        "Fresh vendor research",
        "Continuous monitoring or change alerts",
        "Testing the buyer configuration",
        "Private evidence or vendor certification"
      ],
      "integrity": "Hashes identify content versions; they do not prove truth or provide a signature."
    },
    "revalidation": {
      "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.",
      "specific_watch": "Tool schema, document versions and search-output limits."
    },
    "change_history": [
      {
        "version": 1,
        "date": "2026-10-16",
        "change": "Initial documentation review; no earlier vendor assessment claimed."
      }
    ]
  },
  "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.",
  "service_route": {
    "request_guide": "/varexis-index/request.html",
    "request_workflow": "/varexis-index/request-workflow.json",
    "service_id": "single_request",
    "service_routes_url": "/varexis-index/service-routes.json",
    "payment_required": true,
    "availability_endpoint": "/api/index/capabilities",
    "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED",
    "checkout_url": "/index-access"
  },
  "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.",
  "human_page": "/varexis-index/catalog.html#microsoft-learn-public-documentation-boundary",
  "machine_readable_record": "/varexis-index/records/microsoft-learn-public-documentation-boundary.json"
}