agent-covenant
Deny-by-default authority leases for agents wielding real power.
Community: Submitted by a user or imported; check the owner before granting accessDegradedNo sign-inGlobalFreeRead-only
What it can do
What data it sees
Do you need an account
No: the server works without sign-in
Deny-by-default authority leases for agents wielding real power.
Server tool list (7)
Raw names from tools/list. Only developers need these.
| grant_covenant | Grant an agent a covenant: an explicit lease of authority. scopes support wildcards ('payments.*', '*'); budget_minor is the total spend ceiling in minor units; expires_at is ISO-8601. Returns the covenant_id. |
| check_act | Check (and if allowed, record) a proposed act against a covenant. Deny-by-default. Idempotent on act_id — retries never double-consume budget. Every check lands on the audit chain. |
| revoke_covenant | Revoke a covenant immediately and terminally. All subsequent checks deny. |
| covenant_status | Current state, consumed/remaining budget, and check count. |
| verify_audit | Verify the tamper-evident audit chain of allowed/denied acts. |
| list_covenants | List covenants, optionally filtered by state (ACTIVE|REVOKED|EXPIRED) and/or the bound agent. |
| describe_agent | Fleet-standard self-description. |