agent_permission_vault

When an agent should call it

Check owner-configured grants, denies, approvals, capability/resource scopes, expiry, environment and severity. Explicit deny overrides approval and allow; approval overrides allow; no matching rule returns UNKNOWN. Agent-facing operation is check-only; owner policy changes require authenticated controls. This is authorization, not action safety.

Input: Check capability, resource, scope, and optional environment/severity context

Price: $0.001 USDC per call, paid in USDC via x402 on Base.

MCP connection: one-time setup, then call agent_permission_vault on each needed workflow.

Direct HTTP resource: https://mcp.dropenginehq.com/api/permission-vault

Example input

{
  "operation": "check",
  "capability": "send_email",
  "resource": "customer-support",
  "scope": "support-agent",
  "context": {
    "environment": "production"
  }
}