An MCP server will run whatever it is asked. Intramedial resolves each call to a registered agent, admits it on the same path as every other intent, and refuses it before it reaches the server when it should not run.
mcp.enforce mcp.shadow ledger.blame coordination.admit Put admission in front of your MCP servers, repositories, SaaS tools and cloud accounts. Every agent gets a lease or a reason – and you keep the lever to stop any of them.
© 2026 Intramedial. All rights reserved. Intramedial is a product by Trustvice. Secured and supercharged by Avonao Labs.
Report abuseTool servers authenticate who is calling, not whether this agent should call this tool now. Unregistered agents are the ones you only meet after something has gone wrong.
Which agent called this tool, and was it allowed to?
Which callers are using our servers that nobody registered?
Do our agents hold cloud keys they do not need right now?
Per-call admission answers the first, shadow discovery the second, and the credential broker the third. The gateway can run in observe mode first, so adoption does not stall a team.
AppliesPhased from 2026
Products with digital elements must be delivered with secure defaults and controlled access. A connector fabric that admits each call is part of showing how access to your own tools is controlled.
Official text ↗AppliesOngoing
Agents reach ticketing, CRM and storage through the same kind of server. One admission path means one place to read what each agent did.
Legal references are summarised and dated as of October 2026. They are given so you can see where the need comes from, not as legal advice. Read the official text, and ask counsel how it applies to you. Intramedial does not make any organisation compliant with any law.
The gateway resolves the caller to a registered agent. If it cannot, the caller is noted and listed, not silently dropped.
The call is checked against leases and mandates. A call without admission is refused before it reaches the server.
The tools they used, their traffic and fingerprints are shown. Sanction one and it becomes a first-class identity; refuse it and it stays visible.
For a granted lease the broker assumes a role through OIDC and returns short-lived credentials. Without a web identity token, nothing is issued.
Each module decides one kind of thing. Open a module for its fields, limits and errors.
A Trustvice Product
mcp.enforceAdmits MCP tool calls, SaaS connectors and repository writes on the same path as every other intent.
Open module →mcp.shadowLists the callers nobody registered, with the tools they used and where they were seen.
Open module →ledger.blameBrokers short-lived cloud credentials for a granted lease and replays the ledger around it.
Open module →coordination.admitShows the agents, grants and leases behind each gateway decision.
Open module →Acme’s support agent tries to write a file through an MCP server it has no grant for. The gateway refuses with a reason before the server sees the call.
curl -sS https://api.intramedial.com/api/v1/acp/mcp/enforce \
-H "Authorization: Bearer $INTRAMEDIAL_KEY" \
-H "Content-Type: application/json" \
-d '{
"actorDid": "did:web:acme.example:agent:support",
"tool": "fs.write"
}'{
"allow": false,
"reason": "no_grant",
"action": "fs.write",
"llm": false
}Request fields as documented: /docs/mcp-enforce
A ledger entry is evidence of a narrow fact: this decision was made on this input under this policy at this time, and the chain has not changed since. It is not a certificate, an audit or legal advice, and it does not by itself satisfy any legal obligation.
Let agents queue for a deploy slot, ship in checked stages, and keep an unqueued write from reaching the repository.
coordination.admit change-trains.list previews.list mcp.enforce Stop two agents from writing to the same repository, table or slot at once, and show which one held it and why the other waited.
coordination.admit mandates.compile detection.run ledger.blame Rehearse how your agents behave when they fight over the same ground, then settle real conflicts by negotiation, arbitration and a person.
drills.frt detection.run negotiate.propose arbitration.arbiter The Try it terminal runs the real admission kernel on your machine. It needs no account and sends nothing, and each decision comes back with its reason.
