Declared-vs-Enforced Agent Access Verification

com.textforagentsPublished by textforagents.comOfficial publisherv1.0.3Updated Oct 29, 2026

Compares declared agent access against actual enforcement per identity class, with drift watch.

The publisher's own server: Agent NOTAMs: hazard bulletins for agents

VerifiedStreamable HTTPWeb executableDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

Remote MCP server that probes a target path to compare declared agent access with what is actually enforced, per identity class, and watches for drift.

What you can do
  • Probe one target path to compare declared versus enforced agent access per identity class
  • List enrolled drift-watch targets
  • Re-probe an enrolled target on demand and record two-sided drift
  • Remove an enrolled drift-watch target
When to use it
Useful when you need to check whether an API or site actually enforces the access rules it declares for different agent identity classes, and to keep re-checking a set of targets for drift over time.
Requirements
Remote streamable HTTP endpoint at textforagents.com; no authentication, environment variables or headers are declared. The probe tool is described as a one-time grant, with a separate paid HTTP probe endpoint.
Before you install
Probing sends requests to third-party target paths, and results are recorded by the service. The probe tool is described as a one-time grant, and the separate HTTP probe endpoint is metered at a small per-call price; manual drift runs are rate-limited to one per minute per target. Removing a target records no drift event.

Installation

In SourceWeft

  1. Open Declared-vs-Enforced Agent Access Verification in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/com.textforagents%2Fdeclared-vs-enforced-agent-access-verification/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "declared-vs-enforced-agent-access-verifi": {
      "type": "http",
      "url": "https://textforagents.com/products/declared-vs-enforced-agent-access-verification/mcp"
    }
  }
}

Tools

4

access_probe

Pre-flight declared-vs-enforced probe of one target path (one-time grant; the $0.01 x402 rail is the HTTP /probe endpoint).

Parameterspathsignedfixturebase_urlrequiredagent_token

drift_targets

List your enrolled drift-watch targets.

Takes no parameters.

drift_run

Re-probe one enrolled target now and record two-sided drift (manual runs metered: 1/min/target).

Parameterstarget_idrequired

drift_remove

Remove one enrolled drift-watch target (records no drift event).

Parameterstarget_idrequired

Version history

2
  1. v1.0.3LatestOct 29, 2026
  2. v1.0.0Oct 20, 2026

Score

83% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.

Other Textforagents integrations

Agent NOTAMs: hazard bulletins for agents

com.textforagentsOfficial publisher

Remote MCP endpoint that gives agents signed, auto-expiring hazard bulletins for tools and APIs, plus pre-flight checks.

Streamable HTTPWeb executableAuth
Security & MonitoringCredential requiredOct 26, 2026

The Bridge Stack — one stack, every LLM linked

com.textforagentsOfficial publisher

The Bridge Stack — one stack, every LLM linked's hosted MCP server, published by textforagents.com; no sign-in required; Streamable HTTP; 3 tools.

Streamable HTTPWeb executable
AI & ML3 toolsNov 3, 2026

Combined Server-Surface Census

com.textforagentsOfficial publisher

Combined Server-Surface Census's hosted MCP server, published by textforagents.com; no sign-in required; Streamable HTTP; 5 tools.

Streamable HTTPWeb executable
5 toolsOct 31, 2026

Widget-storage residue verdict

com.textforagentsOfficial publisher

Widget-storage residue verdict's hosted MCP server, published by textforagents.com; no sign-in required; Streamable HTTP; 3 tools.

Streamable HTTPWeb executable
Browser Automation3 toolsOct 29, 2026

Tool-Confusability Recovery Loop

com.textforagentsOfficial publisher

Remote service that measures confusion between tools in an agent tool catalog, ranks fixes, and issues signed recovery receipts.

Streamable HTTPWeb executable
AI & ML6 toolsOct 29, 2026