{
  "$schema": "https://modelcontextprotocol.io/schema/mcp.json",
  "name": "bartholomew-mcp-security-gate",
  "version": "6.4.4",
  "description": "Model Context Protocol (MCP) in-process execution firewall, AST invariant gate, and cryptographic capability passkey validator for Claude Desktop, Cursor, Windsurf, and custom agent swarms.",
  "transport": "stdio",
  "vendor": {
    "name": "Bartholomew AI Inc.",
    "website": "https://bartholomew.info",
    "docs": "https://bartholomew.info/docs#mcp-security-middleware",
    "manifest": "https://bartholomew.info/agent-manifest.json",
    "llms_spec": "https://bartholomew.info/llms.txt"
  },
  "capabilities": {
    "ast_invariant_gating": true,
    "secret_scrubbing": true,
    "silicon_provenance": true,
    "keystone_passkey_validation": true,
    "self_healing_remediation": true,
    "rfc8785_ed25519_receipts": true
  },
  "tools": [
    {
      "name": "btp_protect_tool_call",
      "description": "Evaluates proposed tool call arguments in-process (<35us) against destructive execution, SQL mutations, and prompt injections, emitting structured remediation hints if denied.",
      "inputSchema": {
        "type": "object",
        "properties": {
          "tool_name": {
            "type": "string",
            "description": "The name of the tool being executed"
          },
          "tool_args": {
            "type": "object",
            "description": "Parameters to be passed to the tool"
          },
          "spend_cap": {
            "type": "number",
            "default": 50.0,
            "description": "Maximum USD spend cap allowed for this step"
          }
        },
        "required": [
          "tool_name",
          "tool_args"
        ]
      }
    },
    {
      "name": "btp_scrub_credentials",
      "description": "Detects and scrubs high-entropy credentials (AWS secrets, OpenAI sk-, Anthropic sk-ant-, GitHub tokens, database passwords) from thought streams and tool arguments.",
      "inputSchema": {
        "type": "object",
        "properties": {
          "text": {
            "type": "string",
            "description": "Text or JSON payload to sanitize"
          }
        },
        "required": [
          "text"
        ]
      }
    },
    {
      "name": "btp_detect_compute_silicon",
      "description": "Introspects host accelerator hardware (NVIDIA Hopper/Blackwell, Google Cloud TPU, Apple Neural Engine, AMD ROCm, Confidential Enclaves) to optimize agent batch size and context.",
      "inputSchema": {
        "type": "object",
        "properties": {}
      }
    },
    {
      "name": "btp_validate_capability_passkey",
      "description": "Validates non-human cryptographic Keystone passkey scopes and signature validity before high-consequence agent actions.",
      "inputSchema": {
        "type": "object",
        "properties": {
          "passkey": {
            "type": "string",
            "description": "Bartholomew Keystone passkey string"
          },
          "required_scope": {
            "type": "string",
            "description": "Required capability scope (e.g. fs:write, sql:mutate, api:pay)"
          }
        },
        "required": [
          "passkey",
          "required_scope"
        ]
      }
    }
  ],
  "client_configs": {
    "claude_desktop": {
      "command": "btp-guard",
      "args": [
        "mcp",
        "start"
      ]
    },
    "cursor_ide": {
      "command": "btp-guard",
      "args": [
        "mcp",
        "start"
      ]
    }
  }
}