route_payload
Routes 11-field USAP payloads to the appropriate specialist MCP (e.g., Splunk, CrowdStrike) based on a registry, with human approval gating for mutating actions and audit logging.
Instructions
Phase 2 routing. Take an 11-field USAP payload and look up which specialist MCP would handle it (Splunk / CrowdStrike / FortiGate / Okta / Slack / GitHub / AWS Security Hub, etc.) per the registry at registry/usap-mcp-registry.yaml. If the payload or the matched capability sets human_approval_required: true, returns an approval prompt instead of dispatching. Phase 3 will actually invoke the adapter; Phase 2 confirms routing logic + approval gate. Every decision is written to ~/.usap/audit/YYYY-MM-DD.jsonl.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| payload | Yes | The 11-field USAP payload from a skill or agent. |