Agent tools

Witness exposes Model Context Protocol endpoints for agents operating inside an authenticated team context:

• /mcp provides read tools under the witness.read ability.
• /mcp/destructive provides two-phase actions under the witness.destructive ability.

The six tools are list_templates, list_envelopes, envelope_status, send_from_template, remind, and void.

The first three read bounded summaries. The mutation tools use preview and confirmation: preview validates the proposed action and returns confirmation material, while confirm performs that exact bounded operation. A client should display the preview to its user and must not treat preview as success.

Agent tools do not return document bytes, verification codes, raw signing tokens, invitation URLs, certificates, or database rows. They do not bypass team access, envelope state, field validation, or lifecycle rules.

Grant witness.destructive only to a client that should be able to send, remind, or void. Keep read-only clients on witness.read, and review the envelope in the web interface whenever an agent reports a conflict or uncertain result.