mcp.shadowModule 13List the tool calls the MCP gateway has seen, with the agent behind each, so callers nobody enrolled show up beside the ones that are.
mcp.shadow returns the latest events the MCP gateway recorded: who called, which tool and in which mode. Every observe and enforce call writes one to the ledger as mcp.shadow, whether or not the caller is enrolled. Comparing the callers with the identity list shows the ones nobody enrolled.
Put admission in front of your MCP servers, repositories, SaaS tools and cloud accounts. Every agent gets a lease or a reason – and you keep the lever to stop any of them.
© 2026 Intramedial. All rights reserved. Intramedial is a product by Trustvice. Secured and supercharged by Avonao Labs.
Report abuseThe route lists gateway events. It does not mark a caller unknown or store a sanction decision. The console compares callers with the registry, and enrolling a DID is the only decision kept.
Plane module
eventsmcp.shadow events, in the order they were read.atevent.actorDidevent.tool/docs/mcp-shadowAPI referenceRoutes, bodies and status codes./docs/mcp-shadowOpen the consoleSee the module at work in the dashboard, on a seeded fleet or your own./dashboard-preview/shadowStart freeCreate a workspace and admit your first intent./auth/signup
event.modeobserve, advise or enforce.event.resourcekindregistry.shadow.protocolVersionAn observe or enforce call at the MCP gateway appends an mcp.shadow event with actorDid, tool, mode and, when given, resource.
GET /api/v1/acp/mcp/shadow merges the workspace's mcp.shadow ledger events into the list and returns the latest 50, each with its time.
The Shadow console also reads identity/list. A DID seen at the gateway and absent from the registry shows as unknown, with its call count, last time seen and tools.
Enrolling the DID with shadow: true tracks it, and enrolling it without sanctions it. No action blocks a caller from here; one left alone stays listed.
Runs in a shared demo workspace with a demo key: anyone can see what it holds, so send nothing private. mcp.shadow docs
Press Run to send the request on the left to the shared demo workspace.
Runs in a shared demo workspace with a demo key: anyone can see what it holds, so send nothing private.
A request in the shape the API accepts, and an example response in the shape the module returns.
GET /api/v1/acp/mcp/shadow Authorization: Bearer av_workspace_•••• → 200 { events, kind, protocolVersion }
{
"events": [
{
"at": "2026-11-01T09:14:02.118Z",
"event": {
"actorDid": "did:web:acme.example:agent:support",
"tool": "fs.write",
"mode": "observe",
"resource": "repo:payments/main"
}
}
],
"kind": "registry.shadow",
"protocolVersion": "2026-07-28"
}An engineer wires a script to the gateway. Its DID shows in the list with no registry entry, before anyone has to ask who it is.
At observe the gateway only records. A week of events shows which agents and tools enforce would meet before it is turned on.
Agents enrolled with shadow: true stay marked, so a team can go through what it tracked and sanction the ones it keeps.
Filter the events by tool to see every caller that reached it and in which mode.
enforce with mcp.enforce, or stop a named DID with coordination.quarantine.mcp.call; this list holds shadow events only.A module is a strong claim about a narrow thing. Rely on it for exactly what it is.
observe or enforce call at the MCP gateway leaves one mcp.shadow event, carrying the DID it named.ledger/append can write an mcp.shadow event; the plane writes that kind itself.mcp.shadow ledger events into the list, so events written by another Worker instance appear too.observe and enforce calls through this gateway are recorded, and the list stops at the latest 50.An event does not say whether its caller is enrolled. That comparison is made on reading, against the identity list.
The mode defaults to observe, where the gateway records and lets the call through. advise adds a classifier's advice, and only enforce can refuse.
Enrolling a DID with shadow: true sets a flag on its registry record. It grants nothing and denies nothing; admission still needs a grant.
Authenticate with a workspace API key as a Bearer token. The base URL is https://api.intramedial.com.
/api/v1/acp/mcp/shadowList the latest MCP gateway events recorded as shadow calls.coordination.mcp.shadowList the same events as an MCP action.identity.enroll12Agent identity registryGive each agent its own identity before it acts, so every admitted action traces back to one agent and never to a shared account.mcp.enforce04MCP gateway enforcementPut a front on an MCP server so each tool call is admitted like any other intent, and a refused call never reaches the server.coordination.quarantine32Agent quarantineCut one agent off at admission, but only with the second person's approval or a ruling that names that exact agent.coordination.fleetmap11Fleet MapRead every agent grant, lease, waiter and quarantine in the workspace in one call, drawn from what the plane has admitted.civics.presence14Agent presenceLet agents see which peers are online and what each holds, so a quiet agent is not mistaken for a hostile one.trust.get15Trust scores and autonomyRead an agent's trust score and the autonomy tier it has earned, so autonomy follows conduct the plane has actually seen.worldmodel.graph16