{
  "slug": "cross-server-permission-verification",
  "title": "Cross-Server Permission Verification",
  "product_id": "agent-tool-admission",
  "problem": "Before connecting several tools, identify requested actions that conflict with the authority your team has declared.",
  "inputs": "A schema-valid admission declaration: supported GitHub, Playwright, Notion and Slack connector identities; requested and allowed actions, resources and recipients; authority references; and any previous inventory.",
  "results": "The existing local checker produces a declaration-only disposition, authority findings, inventory changes, a source-bound matrix, hashes and missing-verification requirements.",
  "decision": "Resolve conflicts and independently verify authority references before relying on the integration plan. A passing declaration does not establish effective permissions or permission to act.",
  "exclusions": [
    "No live cross-server tests or inspection of effective permissions.",
    "No additional tool profiles, runtime interception, certification or automatic remediation."
  ],
  "variants": [
    "Review permissions across several declared agent tools",
    "Compare declared cross-server authority before integration"
  ],
  "extra_routes": [
    "agentic_reviewed_mcp_tool_annotations_hints_not_permission_enforcement"
  ],
  "id": "agentic_workflow_cross_server_permission_verification",
  "page_url": "/index-workflows/cross-server-permission-verification",
  "manifest_url": "/varexis-index/workflows/cross-server-permission-verification.json",
  "status": "existing_capability_available",
  "new_sku": false,
  "new_executable": false,
  "payment_required_to_read": false,
  "discovery_route_id": "agentic_pack_tool_admission_v1",
  "evidence_routes": [
    "agentic_reviewed_github_mcp_repository_access_trust",
    "agentic_reviewed_playwright_mcp_browser_session_trust",
    "agentic_reviewed_notion_mcp_content_sharing_trust",
    "agentic_reviewed_slack_mcp_search_posting_trust",
    "agentic_reviewed_mcp_tool_annotations_hints_not_permission_enforcement"
  ],
  "evidence": [
    {
      "record_id": "VXI-EXT-TOOL-TRUST-GITHUB-01-v1",
      "title": "GitHub MCP: Repository access and write controls",
      "url": "/varexis-index/records/github-mcp-repository-access-trust.json",
      "content_sha256": "572335e5f6d8f99afe3760a11daf78adbf89833501909166782351350be027f8",
      "reviewed_on": "2026-10-11",
      "source_url": "https://github.com/github/github-mcp-server"
    },
    {
      "record_id": "VXI-EXT-TOOL-TRUST-PLAYWRIGHT-01-v1",
      "title": "Playwright MCP: Browser identity and session boundaries",
      "url": "/varexis-index/records/playwright-mcp-browser-session-trust.json",
      "content_sha256": "31bcff69fce09710d75d7f21be3bd97d7e5e3b4f9f3a44d8903e1e3b4b549c72",
      "reviewed_on": "2026-10-11",
      "source_url": "https://github.com/microsoft/playwright-mcp"
    },
    {
      "record_id": "VXI-EXT-TOOL-TRUST-NOTION-01-v1",
      "title": "Notion MCP: Content access and external sharing",
      "url": "/varexis-index/records/notion-mcp-content-sharing-trust.json",
      "content_sha256": "b465e42e280f6667dbb8ee8a67764b505783dd2d93945eab3ea42b38af7e9659",
      "reviewed_on": "2026-10-11",
      "source_url": "https://developers.notion.com/guides/mcp/overview"
    },
    {
      "record_id": "VXI-EXT-TOOL-TRUST-SLACK-01-v1",
      "title": "Slack MCP: Search scope and posting authority",
      "url": "/varexis-index/records/slack-mcp-search-posting-trust.json",
      "content_sha256": "ab365f9176d2376e58c25ed6e0815ecda3eb2f3e088fff8dd2c40a67779a6518",
      "reviewed_on": "2026-10-11",
      "source_url": "https://docs.slack.dev/ai/slack-mcp-server/"
    },
    {
      "record_id": "VXI-EXT-PROCUREMENT-MCP-TOOL-ANNOTATIONS-HINTS-NOT-PERMISSION-ENFORCEMENT-01-v1",
      "title": "MCP: Tool annotations describe hints, not enforced authority",
      "url": "/varexis-index/records/mcp-tool-annotations-hints-not-permission-enforcement.json",
      "content_sha256": "4f5ad4c44cbe328fb5eabf096988b33d45f0bbe96c57f6ee44ed48cdd8df9916",
      "reviewed_on": "2026-10-18",
      "source_url": "https://modelcontextprotocol.io/specification/2026-07-28/schema"
    }
  ],
  "evidence_boundary": "Reused dated documentation reviews retain their original source dates, versions, exclusions and provenance. Compilation does not refresh sources or expand executable profiles.",
  "free_preview_url": "/varexis-index/packs/agent-tool-admission-v1.json",
  "input_schema_url": "/varexis-index/examples/agent-tool-admission/input.schema.json",
  "demonstration_url": "/varexis-index/examples/agent-tool-admission/admission-repository-browser-gaps.result.json",
  "product": {
    "id": "agent-tool-admission",
    "title": "Agent Tool Admission & Permission Control",
    "service_id": "tool_admission",
    "route_id": "agentic_pack_tool_admission_v1",
    "price_gbp_excluding_vat": 49,
    "currency": "GBP",
    "billing": "one_time",
    "existing_subscriptions_eligible": false,
    "licence": "VAREXIS Agent Tool Admission & Permission Control v1.0.0\nOne-time licence for one purchasing individual or one legal entity, including its staff and agents acting internally on its behalf. Reusable local execution and internal CI use; no per-run fee. No sublicensing, redistribution of executable/rules, hosted customer service, API resale or external agent distribution. The other product profile is not licensed. Public evidence retains its existing terms. No updates, monitoring, deployment assurance, certification or support SLA is included. Billing and delivery support follows https://varexis.tech/checkout-terms. Statutory rights are unaffected.\n",
    "purchase_url": "/index-access?route=agentic_pack_tool_admission_v1",
    "delivery": "One-time GBP 49 plus applicable VAT for the versioned local admission executable and one-buyer internal-use licence. Separate purchase; not included in existing GBP 5/19 offers or subscriptions. No per-run fee, updates, monitoring, redistribution or support SLA. Retain your key and downloaded result; server retention is not guaranteed permanently.",
    "terms_url": "/checkout-terms",
    "pricing_url": "/pricing#index",
    "capabilities_url": "/api/index/capabilities"
  },
  "purchase_url": "/index-access?route=agentic_pack_tool_admission_v1",
  "runtime_enforcement": false,
  "independent_live_system_testing": false,
  "certification": false,
  "content_sha256": "f10a4b25a7ace64a6f4807925de49cf89315c832e84e1b8bb4aa2c3cef82e0ea"
}