{"uid":"cap_XtaJE7fEgdBiO43xunFgQ","slug":"delx-tool-permission-audit-aa62ef06","name":"Delx Tool Permission Audit","description":"Compare requested agent tools with an explicit least-privilege allowlist. Use it as a bounded preflight or analysis step inside an enterprise agent workflow before data, policy, integration, security, or commercial decisions reach production. Returns deterministic machine-readable JSON for $0.003 USDC via x402 on Base. Execution is first-party, local-only, stateless, memory-only, and has no paid upstream or input retention. Results are advisory; the caller remains responsible for authorization…","url":"https://api.delx.ai/api/v1/x402/tool-permission-audit","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"allowed":{"type":"array","description":"Input field: allowed."},"requested":{"type":"array","description":"Input field: requested."}}},"responseSchema":{"type":"json","example":{"denied":["deploy"],"schema":"delx/util-tool-permission-audit/v1","permitted":false,"requested_count":2,"allowed_requested":["read"],"least_privilege_advisory":true}},"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.003","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.003/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.003","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_Kuk6iOUzefGC4En7qtwC4","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.003","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Compare a list of requested agent tools against an explicit least-privilege allowlist and return a deterministic JSON audit report of permitted and denied tools.","exampleAgentPrompt":"Before we run this agent workflow, audit its tool permissions — the allowed tools are ['read_file','send_email','query_db'] and the agent has requested ['read_file','send_email','delete_record','execute_code'] — tell me which ones are outside the approved list.","exampleUseCases":[{"title":"Pre-deployment agent tool gating","prompt":"Before deploying this new agent to production, check its tool requests against our approved list. Allowed: ['read_crm','send_notification','log_event']. Requested: ['read_crm','send_notification','write_crm','delete_user']. Which tools are outside the allowlist?"},{"title":"Enterprise security preflight for data pipeline","prompt":"We're about to kick off a data pipeline agent and need a permission audit first. Our allowlist is ['query_warehouse','read_s3','write_report'] and the agent is requesting ['query_warehouse','read_s3','drop_table','write_report','call_external_api']. Flag anything that isn't permitted."},{"title":"Least-privilege enforcement in multi-agent workflow","prompt":"Run a tool permission audit for the sub-agent in our orchestration workflow. The approved tools are ['fetch_weather','format_response'] and it's asking for ['fetch_weather','format_response','send_sms','access_payments']. I need to know exactly which requested tools are denied before we let it proceed."}],"resultDescription":"A deterministic machine-readable JSON object indicating which of the requested tools are permitted (present in the allowlist) and which are denied (not in the allowlist), along with a summary of the audit outcome. Results are advisory and stateless — no data is retained.","failureModes":["Missing or empty 'allowed' array — may return an error or deny all requested tools","Missing or empty 'requested' array — may return an empty result or vacuous pass","Malformed array input — returns a validation or schema error","Network or payment failure — x402 payment on Base may fail if wallet is underfunded or network is congested"],"whenToPreferThis":"Use this endpoint when you need a fast, stateless, deterministic preflight check to enforce least-privilege tool access for an AI agent before it reaches production. Prefer it over custom authorization logic when you want a cheap, consistent, machine-readable audit result that can be embedded as a bounded step inside a larger agent workflow without side effects or data retention.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-13T19:02:53.083Z","isFirstParty":false}