{"uid":"cap_Oa7VVq-b-_b5oB83jahHl","slug":"tool-schemas-scope-boundary-audit-83f2afe2","name":"Tool Schemas Scope Boundary Audit","description":"Compare tool-schema declaration owner, revision, scope and allowed target declarations exactly. HTTP paths include method and segment boundaries; tool targets include transport. Labels grant no authorization. Offline typed nonpersonal metadata only. Result retention: 24 hours; minimal receipt metadata: 90 days.","url":"https://www.mahastrategies.com/api/v1/verify/tool-schemas/scope-boundary-audit?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"ownerRef":{"type":"string"},"revision":{"type":"string"},"scopeRef":{"type":"string"},"contracts":{"type":"array","maxItems":32,"minItems":1},"dataClass":{"enum":["public","synthetic"],"type":"string"},"allowedTargets":{"type":"array","maxItems":32,"minItems":1},"nonpersonalMetadata":{"type":"boolean","const":true}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.038304","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.038304/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.038304","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.038304","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_O3JEApTNqFRjyxpxR5Bir","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.038304","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Validates tool-schema declarations by comparing owner, revision, scope, and allowed target boundaries to detect mismatches or authorization overreach.","exampleAgentPrompt":"Audit the scope boundary for tool schema owner 'org:acme', revision 'v2.1', scope 'payments:write', with allowed targets ['https://api.acme.com/charge', 'https://api.acme.com/refund'] against our two declared contracts — data class is synthetic and this is nonpersonal metadata only.","exampleUseCases":[{"title":"Pre-deployment tool contract audit","prompt":"Before we deploy this agentic tool, can you run a scope boundary audit for owner 'team:backend', revision 'v1.0', scope 'data:read', allowed targets ['grpc://internal-svc/query'] and one contract declaration — data class is public and metadata is nonpersonal?"},{"title":"Detecting scope overreach in agent tools","prompt":"I need to check whether our tool schema for owner 'bot:assistant', revision 'v3.2', scope 'admin:all' is overreaching its allowed targets ['https://api.example.com/users'] — run a scope boundary audit with synthetic data class and flag any mismatches in the two contracts."},{"title":"Validating revised tool schema before release","prompt":"We just updated our tool schema to revision 'v4.5' for owner 'service:gateway', scope 'payments:execute' — can you validate that the 3 contracts and allowed targets ['https://pay.example.com/initiate', 'https://pay.example.com/confirm'] are still within declared boundaries using public data class?"}],"resultDescription":"Returns a structured audit report comparing the declared tool schema's owner reference, revision, scope reference, and allowed target declarations against the supplied contracts. Highlights any boundary violations, mismatched HTTP method/segment declarations, transport-level target discrepancies, and scope overreach. Result is available for 24 hours; minimal receipt metadata is retained for 90 days.","failureModes":["Missing required ownerRef or scopeRef causes validation rejection","Contracts array below minItems:1 or above maxItems:32 triggers schema error","nonpersonalMetadata not set to true (const) causes request rejection","Invalid dataClass value outside 'public' or 'synthetic' enum fails validation","Malformed revision string may cause comparison to fail","allowedTargets array exceeding 32 items is rejected","Payment authorization failure via x402 protocol blocks access"],"whenToPreferThis":"Choose this endpoint when you need to formally audit whether a tool schema's declared scope and allowed targets are consistent with its owner and revision references, particularly in agentic or multi-tool environments where scope overreach is a governance concern. It is specifically designed for typed, nonpersonal, offline metadata validation — not for runtime authorization enforcement or personal data processing. Prefer this over generic schema validators when HTTP path boundaries, transport-level target declarations, and contract-level scope alignment are all required in a single audit pass.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-20T12:48:09.706Z","isFirstParty":false,"canonicalSlug":"tool-schemas-scope-boundary-audit-83f2afe2"}