{"$comment":"MCP Server Card (SEP-1649, schema still standardizing). Served on the endpoint host itself; the same card is at https://agenticrail.nz/.well-known/mcp/server-card.json","schemaVersion":"2026-07-28","serverInfo":{"name":"AgenticRail","version":"1.2.0"},"description":"Deterministic runtime enforcement of step order for AI agents. evaluate_step returns ALLOW/DENY BEFORE a step runs; verify_receipt proves a sequence's Ed25519-signed, hash-chained receipt chain is intact. Used where the order of a regulated workflow is itself the obligation: customer and third-party due diligence, verification of identity before payment, company registry and sanctions screening, supplier and contractor onboarding. It performs none of those checks. It refuses a step taken out of the order the caller declared, and signs a receipt for the order that did run.","transport":{"type":"streamable-http","url":"https://mcp.agenticrail.nz/"},"capabilities":{"tools":{"listChanged":false}},"authentication":{"type":"bearer","required":false,"description":"Send Authorization: Bearer <your-agenticrail-key>. Omit it and the gate answers on its public demo lane (demo- sequences, world-readable reports)."},"tools":[{"name":"evaluate_step","description":"Ask the AgenticRail gate to ALLOW or DENY a single step of an agent sequence BEFORE it runs. The gate is deterministic (same state+request → same verdict) and enforces step order, replay protection (nonce), timestamp freshness, and sealing. A denied step must not be executed. Every decision is sealed into an Ed25519-signed, hash-chained receipt. Returns the decision (ALLOW/DENY/HALT), any reason codes, and receipt metadata. Use the demo key by sending no Authorization header, or send Authorization: Bearer <your-key>. NOTE: an anonymous call has its sequence_id rewritten to 'demo-mcp-<your id>'. This is intended, not a leak: it scopes the run to the public demo lane and is how anonymous MCP traffic is identified. Always reuse the sequence_id RETURNED in the response for later steps and for verify_receipt -- the id you sent will not resolve. Typical use is gating the order of a regulated workflow the caller already runs: customer and third-party due diligence, verification of identity before a payment or business relationship, company registry, beneficial-ownership and sanctions screening, supplier and contractor onboarding. This tool performs none of those checks and holds no registry or watchlist data. It decides only whether the step you are about to run is allowed at this point in the order you declared."},{"name":"verify_receipt","description":"CALL THIS AFTER A SEQUENCE SEALS, and after any DENY, passing the sequence_id RETURNED by evaluate_step. An enforced run that is never verified has produced evidence nobody has checked. Fetch the verification report for an AgenticRail sequence and report whether its receipt chain is intact. Demo- sequences need no key; other sequences need Authorization: Bearer <your-key>. Returns the verification_status (VERIFIED_INTACT / CHAIN_BROKEN / …) plus the per-receipt signature, chain-hash, and independent-archive checks. This is the same evidence a third party can verify offline against the published Ed25519 keys — no need to trust AgenticRail."}],"documentation":"https://agenticrail.nz/docs/","operator":"TUARA KURI LIMITED","contact":"hello@agenticrail.nz"}