Observability access check
wever_observability-access-checkAgent Observability: submit who can see an agent’s traces and logs: each agent with the principal it works for; each grant with who holds it, their role (the principal, the operator, the agent, an auditor, a vendor, a third party or support), the agents it covers (* for every agent), what it shows (traces, logs or both) and the contract, consent or policy behind it; and optionally stored trace and log excerpts to read for secrets. The signed report lists for each agent what its principal sees and which outside parties see it, and every secret found by kind and position without its value, and names exposure and blindness: principals who cannot see their own agent’s records, third parties and other principals who can with no stated basis, and secrets or credentials written into traces and logs (private keys, API keys, cloud and chat tokens, bearer tokens, signed web tokens and labeled passwords); then a principal who sees traces or logs only, outside parties with a stated basis and grants naming agents not in the list, with the fix for each. Whether stored memories are shared beyond their principal is wever_memory-sharing-check and whether a read-only scope holds is wever_read-only-scope-check. Verdict exposed_or_blind, access_gaps, access_unverified or access_sound. POST /api/observability-access-check. Reads only the material in the call: no network request, fetch, money movement, message, sharing, configuration change or external write. Paid URL: 0.10 USDC per call on Base via x402 exact, with the shared 10 signed-wallet free calls per rolling 30 days. Bind X-Wever-Wallet-Proof to the exact JSON arguments and the tool route. Returns a report with an Ed25519 signed receipt. Contract: /api/agent-observability-contract. Human page: https://weverlabs.com/agent-observability/.
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"agents": "<agents>"
},
"name": "wever_observability-access-check"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| label | No | Optional name recorded in the report. | |
| agents | Yes | Each agent with the principal it works for. | |
| grants | No | Each grant of access to traces and logs. | |
| samples | No | Stored trace and log excerpts to read for secrets. |