{ "schema": "varexis-public-evidence-record/0.3", "generated_at_utc": "2026-10-11T21:09:20.344Z", "record_id": "VXI-EXT-TOOL-TRUST-SENTRY-01-v1", "record_kind": "external_reference", "title": "Sentry MCP: Project debugging and data recipients", "system": "Sentry MCP", "evidence_family": "agent_tool_trust_review", "index_status": "PUBLIC_SAFE_SOURCE_REVIEW", "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY", "canonical_question": "What should an agent check before sending project error data through Sentry MCP?", "near_questions": [ "What should be checked before sending errors to an agent?", "Can Sentry MCP be scoped to one project?", "Does a debugging connector also manage projects?", "Does self-hosted Sentry MCP search use a model provider?", "What authentication ambiguity exists in Sentry MCP documentation?", "Could error events contain data unsuitable for an AI client?", "Does Sentry project scoping prove data redaction?", "Which Sentry skills are enabled in this connection?", "What recipients need review for an error-analysis tool?", "Can an agent assume every Sentry setup supports the same tools?", "What should a saved Sentry trust record preserve?", "Does this record test our Sentry deployment?" ], "supported_claims": [ { "claim": "Sentry documents organization- or project-scoped connections for its remote MCP, with project scope recommended where possible. Its toolkit describes debugging workflows and notes that AI-powered search in self-hosted setup requires a configured model provider. Identify the deployment, enabled tools and model route before transferring sensitive event context. The public connection page and repository differ in their description of authentication options.", "reliance": "DOCUMENTED_CAPABILITY_ONLY" } ], "not_demonstrated_claims": [ "Verified buyer configuration or effective access rights", "Independent tool execution or security testing", "Vendor certification, guaranteed safety or no-training assurance" ], "public_summary": "Sentry documents organization- or project-scoped connections for its remote MCP, with project scope recommended where possible. Its toolkit describes debugging workflows and notes that AI-powered search in self-hosted setup requires a configured model provider. Identify the deployment, enabled tools and model route before transferring sensitive event context. The public connection page and repository differ in their description of authentication options.", "related_record_ids": [ "VXI-EXT-TOOL-TRUST-STRIPE-01-v1", "VXI-EXT-TOOL-TRUST-CLOUDFLARE-01-v1", "VXI-EXT-TOOL-TRUST-SUPABASE-01-v1" ], "source_review": { "source_type": "official_external_documentation", "source_title": "Sentry MCP connection and scope", "source_url": "https://mcp.sentry.dev/", "checked_on": "2026-10-11", "candidate_record_id": "VXI-EXT-TOOL-TRUST-SENTRY-01-v1", "candidate_record_sha256": "6862b371124fa359cbdde0abae194e5fe1339385c0f66f4fe22fe6e35ad7fc4c", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "answer_policy": { "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY", "bounded_answer": "Sentry documents organization- or project-scoped connections for its remote MCP, with project scope recommended where possible. Its toolkit describes debugging workflows and notes that AI-powered search in self-hosted setup requires a configured model provider. Identify the deployment, enabled tools and model route before transferring sensitive event context. The public connection page and repository differ in their description of authentication options.", "required_buyer_context": "Sentry remote MCP, with separately attributed toolkit notes for local/self-hosted setups; these deployments are not treated as interchangeable. Deployment, event redaction, active skills, model provider, token route availability and retention.", "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state." }, "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.", "trust_profile": { "schema": "varexis-agent-tool-trust/1", "identity": { "tool": "Sentry MCP", "variant": "Sentry remote MCP, with separately attributed toolkit notes for local/self-hosted setups; these deployments are not treated as interchangeable." }, "review_status": "documentation_review_only", "checked_on": "2026-10-11", "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.", "plan_scope": "Buyer plan, feature entitlement and effective configuration are not verified.", "findings": [ { "field": "operator", "label": "Publisher and operator", "status": "documented", "statement": "Sentry publishes the remote service and toolkit; a self-hosted deployment has its own operator.", "source_ids": [ "sentry-main", "sentry-repo" ] }, { "field": "purpose", "label": "Purpose", "status": "documented", "statement": "Retrieve errors and performance context for development investigations.", "source_ids": [ "sentry-main", "sentry-repo" ] }, { "field": "reads", "label": "Read capability", "status": "documented", "statement": "Errors, issue context and performance information through enabled debugging tools.", "source_ids": [ "sentry-main", "sentry-repo" ] }, { "field": "writes", "label": "Write capability", "status": "documented", "statement": "The service describes issue triage and project management; inspect the effective tools before assuming read-only access.", "source_ids": [ "sentry-main", "sentry-repo" ] }, { "field": "auth", "label": "Authentication", "status": "documented", "statement": "The connection page says OAuth for all connections; the toolkit additionally documents an explicit upstream-token remote path. That path was not tested.", "source_ids": [ "sentry-main", "sentry-repo" ] }, { "field": "permissions", "label": "Permission surface", "status": "documented", "statement": "Organization/project URL scoping is documented. The buyer must also inspect identity rights and enabled skills.", "source_ids": [ "sentry-main", "sentry-repo" ] }, { "field": "egress", "label": "Data leaving the environment", "status": "review_inference", "statement": "Event context reaches the client. The toolkit's self-hosted AI search requires a model provider; actual provider, payload and retention remain unverified.", "source_ids": [ "sentry-main", "sentry-repo" ] }, { "field": "failures", "label": "Failure modes to consider", "status": "review_inference", "statement": "Using organization-wide context unnecessarily; treating sensitive events as harmless diagnostics; assuming self-hosted search has no model recipient.", "source_ids": [ "sentry-main", "sentry-repo" ] }, { "field": "unknown", "label": "Unknowns and applicability", "status": "unknown", "statement": "Deployment, event redaction, active skills, model provider, token route availability and retention.", "source_ids": [] }, { "field": "gate", "label": "Suggested refusal or clarification condition", "status": "varexis_review_policy", "statement": "Resolve event sensitivity and recipients before retrieval; stop before project changes outside a debugging-only task.", "source_ids": [] } ], "evidence_sources": [ { "source_id": "sentry-main", "url": "https://mcp.sentry.dev/", "final_url": "https://mcp.sentry.dev/", "title": "Sentry MCP connection and scope", "checked_on": "2026-10-11", "sha256": "1441f1448276ebe1a83b6db68ecef74684b25890ab078616e23f05920d14bf15", "bytes": 6247 }, { "source_id": "sentry-repo", "url": "https://github.com/getsentry/toolkit", "final_url": "https://github.com/getsentry/toolkit", "title": "Sentry Toolkit: remote and local MCP", "checked_on": "2026-10-11", "sha256": "8d329f7225733b30acf7be64f7368f595f3a3a062d7abc7846fd9cba14d307f6", "bytes": 414782 }, { "source_id": "mcp-hints", "url": "https://blog.modelcontextprotocol.io/posts/2026-03-16-tool-annotations/", "final_url": "https://blog.modelcontextprotocol.io/posts/2026-03-16-tool-annotations/", "title": "MCP tool annotations and enforcement boundaries", "checked_on": "2026-10-11", "sha256": "82888044d831c3bd18f03d87a846ce5d27e028bd67a095edc04ba377fc622163", "bytes": 52715 } ], "observed_tool_execution": false, "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.", "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.", "paid_value": { "decision_context": "Preserve project-scope, data-flow and authentication ambiguity in a debugging-tool review.", "free": "Complete profile, practical questions, sources and limitations; may be saved locally.", "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.", "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.", "excluded": [ "Fresh vendor research", "Continuous monitoring or change alerts", "Testing the buyer configuration", "Private evidence or vendor certification" ], "integrity": "Hashes identify content versions; they do not prove truth or provide a signature." }, "revalidation": { "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.", "specific_watch": "Review the effective tool inventory and client data policy before a new integration decision." }, "change_history": [ { "version": 1, "date": "2026-10-11", "change": "Initial documentation review; no earlier vendor assessment claimed." } ] }, "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.", "service_route": { "request_guide": "/varexis-index/request.html", "request_workflow": "/varexis-index/request-workflow.json", "service_id": "single_request", "service_routes_url": "/varexis-index/service-routes.json", "payment_required": true, "availability_endpoint": "/api/index/capabilities", "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED", "checkout_url": "/index-access" }, "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.", "human_page": "/varexis-index/catalog.html#sentry-mcp-project-debugging-trust", "machine_readable_record": "/varexis-index/records/sentry-mcp-project-debugging-trust.json" }