Protocol status / sandbox
MCP
A private paid-tool integration has been tested. Public production access is disabled.
Tools as resources
The sandbox MCP adapter uses real SDK transport and binds a paid tool request to the same quote, proof and receipt invariants as the machine client. That implementation is private test infrastructure.
The production machine manifest has no MCP endpoint. An agent should treat MCP as unavailable until the public capability changes through a separate release gate.