Compliance infrastructure for agentic AI. Immutable audit logging, policy enforcement, and compliance reporting for AI agent workflows via MCP.
Server has 7 tools with reasonable naming (verb-first) and descriptions, but critical gaps in schema completeness and parameter documentation. Most tools lack explicit input schema definitions in the source code, schemas are inferred from the tool descriptions provided. Parameters are documented in descriptions but lack formal JSON Schema type declarations. Output schemas are not documented. Error handling is minimal. The audit-trail domain is well-suited to the tool set, but execution falls short of production quality.
Export audit logs to CSV or PDF format for compliance reporting. Supports filtering by date range, agent, or tool.
Get a dashboard summary of audit activity including total logs, violations count, and breakdowns by agent and tool.
Log an agent action to the immutable audit trail. Call this before or after your agent performs any tool call to create a compliance record. Returns the log entry ID and any policy violations detected.
Create, update, or delete policy rules for compliance enforcement. Supports pattern matching, thresholds, and regex conditions.
Search the audit trail with filters. Returns matching log entries sorted newest first.
Register a new agent with the audit system and optionally assign permissions or policy overrides.
Input schemas not visible in source code. Tool definitions appear inferred from descriptions rather than explicitly registered with JSON Schema. Cannot verify parameter types, constraints, or required/optional status programmatically.
Output schemas completely undocumented. No specification of what fields log_action, query_logs, export_logs, or verify_chain return. LLMs cannot plan downstream tool calls or extract required data without knowing response structure.
No error handling guidance. Tools like log_action (WRITE) and manage_policies (WRITE) lack recovery instructions. If a policy rule fails to create, what should the agent do? Retry? Ask user? No guidance provided.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 52 | 2026-07-28+ | v2 |
Verify the cryptographic integrity of the audit trail chain. Returns chain validity status and details of any tampering detected.
manage_policies has underdocumented parameter relationships. The 'action' enum (create/update/delete/list) determines which other parameters are required/optional, but this dependency is not stated in parameter descriptions.
query_logs and export_logs accept date range filters but format is not specified (ISO 8601 assumed but not stated). LLMs frequently miscalculate date formats; explicit format guidance needed.