Production Checklist

Integrator appendix. Gate before production traffic. Forward with Disclosure Boundary when security reviews the connect path.

Only use surfaces marked Live (or explicitly entitled by arrangement) on Integration Surfaces.

Connection and credentials

• Connection minted via Stratum with no wallet or signing-material export
• Remote clients use HTTPS + audience-bound short-lived Bearer tokens
• Stdio limited to trusted operator machines
• Authorization headers never logged
• Token rotation assumed. Expired JWTs not reused

Runtime

• Clients and load balancers gate on GET /ready
• Retry with backoff on 429 / 503. See Errors
• Pack scopes match the tools the agent will call

Writes

• Write pack + explicit consent claim present when preparing/submitting
• Sequence only: simulate → prepare → external sign → submit_signed
• No long-lived write private keys in the MCP process or model host

Review package

Forward:

1. Disclosure Boundary
2. Access model
3. Framework Alignment
4. This checklist

Still evaluating fit? Prefer an infrastructure review over a silent production cutover.