{ "schema": "varexis-public-evidence-record/0.3", "generated_at_utc": "2026-10-14T00:29:51.399Z", "record_id": "VXI-EXT-TOOL-TRUST-PAGERDUTY-01-v1", "record_kind": "external_reference", "title": "PagerDuty MCP: Regional identity and incident changes", "system": "PagerDuty MCP", "evidence_family": "agent_tool_trust_review", "index_status": "PUBLIC_SAFE_SOURCE_REVIEW", "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY", "canonical_question": "Can I connect PagerDuty MCP for incident review without granting authority to change operations?", "near_questions": [ "Can PagerDuty MCP change incident state?", "Can I filter hosted PagerDuty MCP tools to reads only?", "Do PagerDuty OAuth scopes constrain management calls?", "Which PagerDuty region should an MCP client use?", "Are user-level and account-level API keys interchangeable for every tool?", "Does incident visibility authorize changing an on-call schedule?", "Is the old self-hosted PagerDuty MCP server still the current service?", "What operational data reaches a PagerDuty MCP client?", "Does an MCP connection prove incident-change approval?", "What evidence supports an observation-only PagerDuty integration?", "Can I save the PagerDuty scope review?", "When should an incident agent request action-specific authorization?" ], "supported_claims": [ { "claim": "PagerDuty documents read and management tools on its hosted MCP service. Authentication scopes constrain successful calls, while hosted tool filtering is not available. Check the regional endpoint, key type and granted scopes before connecting; incident visibility does not authorize changing schedules, services or incident state.", "reliance": "DOCUMENTED_CAPABILITY_ONLY" } ], "not_demonstrated_claims": [ "Verified buyer configuration or effective access rights", "Independent execution, completeness or security testing", "Vendor certification, legal compliance or guaranteed suitability" ], "public_summary": "PagerDuty documents read and management tools on its hosted MCP service. Authentication scopes constrain successful calls, while hosted tool filtering is not available. Check the regional endpoint, key type and granted scopes before connecting; incident visibility does not authorize changing schedules, services or incident state.", "related_record_ids": [ "VXI-EXT-TOOL-TRUST-BROWSERBASE-01-v1", "VXI-EXT-TOOL-TRUST-N8N-01-v1", "VXI-EXT-TOOL-TRUST-SEMGREP-GUARDIAN-01-v1", "VXI-EXT-TOOL-TRUST-SNYK-01-v1" ], "source_review": { "source_type": "official_external_documentation", "source_title": "PagerDuty hosted MCP scopes and regional endpoints", "source_url": "https://support.pagerduty.com/main/docs/pagerduty-mcp-server", "checked_on": "2026-10-14", "candidate_record_id": "VXI-EXT-TOOL-TRUST-PAGERDUTY-01-v1", "candidate_record_sha256": "581b069d507b347ddea6eb9a478af58678a730e883b166061f8beb15648638b8", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "answer_policy": { "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY", "bounded_answer": "PagerDuty documents read and management tools on its hosted MCP service. Authentication scopes constrain successful calls, while hosted tool filtering is not available. Check the regional endpoint, key type and granted scopes before connecting; incident visibility does not authorize changing schedules, services or incident state.", "required_buyer_context": "Account region, API-key or OAuth identity, scopes, target incidents and permitted operational changes.", "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state." }, "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.", "trust_profile": { "schema": "varexis-agent-tool-trust/1", "identity": { "tool": "PagerDuty MCP", "variant": "Official hosted regional MCP service" }, "review_status": "documentation_review_only", "checked_on": "2026-10-14", "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.", "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.", "findings": [ { "field": "operator", "label": "Publisher and operator", "status": "documented", "statement": "PagerDuty operates the hosted MCP service; the self-hosted predecessor is deprecated.", "source_ids": [ "pagerduty-main" ] }, { "field": "purpose", "label": "Purpose", "status": "documented", "statement": "Query incident operations and manage supported operational resources.", "source_ids": [ "pagerduty-main" ] }, { "field": "reads", "label": "Read capability", "status": "documented", "statement": "Incidents, services, schedules and related operational records.", "source_ids": [ "pagerduty-main" ] }, { "field": "writes", "label": "Write capability", "status": "documented", "statement": "Management tools can create, update or delete supported resources.", "source_ids": [ "pagerduty-main" ] }, { "field": "auth", "label": "Authentication", "status": "documented", "statement": "API key or OAuth; key types and scopes affect tool behavior.", "source_ids": [ "pagerduty-main" ] }, { "field": "permissions", "label": "Permission surface", "status": "documented", "statement": "Scopes constrain calls; hosted tool filtering is not currently documented as available.", "source_ids": [ "pagerduty-main" ] }, { "field": "egress", "label": "Data leaving the environment", "status": "review_inference", "statement": "Operational records and action inputs pass through PagerDuty and the connected client.", "source_ids": [ "pagerduty-main" ] }, { "field": "failures", "label": "Failure modes to consider", "status": "review_inference", "statement": "Wrong-region credentials or excessive scopes can cause errors or unauthorized task expansion.", "source_ids": [ "pagerduty-main" ] }, { "field": "unknown", "label": "Unknowns and applicability", "status": "unknown", "statement": "Buyer region, effective scopes and approved incident actions are unverified.", "source_ids": [] }, { "field": "gate", "label": "Suggested refusal or clarification condition", "status": "varexis_review_policy", "statement": "Confirm affected resources and task authority before operational changes.", "source_ids": [] } ], "evidence_sources": [ { "source_id": "pagerduty-main", "url": "https://support.pagerduty.com/main/docs/pagerduty-mcp-server", "final_url": "https://support.pagerduty.com/main/docs/pagerduty-mcp-server", "title": "PagerDuty hosted MCP scopes and regional endpoints", "checked_on": "2026-10-14", "sha256": "4dfa3646c39b49adc204c46ab154bd700c0ec9f780444793d9def117189b7685", "bytes": 785314 } ], "observed_tool_execution": false, "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.", "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.", "paid_value": { "decision_context": "Retain the regional, identity and read-versus-action boundary for an incident assistant.", "free": "Complete review, practical questions, sources and limitations; may be saved locally.", "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.", "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.", "excluded": [ "Fresh vendor research", "Continuous monitoring or change alerts", "Testing the buyer configuration", "Private evidence or vendor certification" ], "integrity": "Hashes identify content versions; they do not prove truth or provide a signature." }, "revalidation": { "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.", "specific_watch": "Recheck hosted tool inventory, scope mapping, region and client authentication support." }, "change_history": [ { "version": 1, "date": "2026-10-14", "change": "Initial documentation review; no earlier vendor assessment claimed." } ] }, "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.", "service_route": { "request_guide": "/varexis-index/request.html", "request_workflow": "/varexis-index/request-workflow.json", "service_id": "single_request", "service_routes_url": "/varexis-index/service-routes.json", "payment_required": true, "availability_endpoint": "/api/index/capabilities", "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED", "checkout_url": "/index-access" }, "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.", "human_page": "/varexis-index/catalog.html#pagerduty-hosted-mcp-incident-authority-trust", "machine_readable_record": "/varexis-index/records/pagerduty-hosted-mcp-incident-authority-trust.json" }