Verify Paybond Capability
paybond_verify_capabilityVerifies a capability token for a given Harbor intent and operation, providing raw token validation before agent actions.
Instructions
Use this when you need raw capability-token verification for one tenant-bound Harbor intent. Do not use this to create, fund, or modify intents; use paybond_authorize_agent_spend as the clearer gate before side-effecting agent tools.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| token | No | Optional capability token override. When omitted, the MCP server uses the token stored for intent_id. | |
| intent_id | Yes | Canonical Harbor intent UUID. | |
| operation | Yes | Delegated operation or tool name. | |
| requested_spend_cents | No | Optional requested spend in cents for this tool call. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| allow | No | Whether the requested operation is allowed. | |
| tenant | Yes | Tenant echoed by the gateway. | |
| message | No | Human-readable decision message when present. | |
| audit_id | No | Gateway audit identifier when available. | |
| intent_id | Yes | Verified Harbor intent UUID. | |
| decision_id | No | Persisted spend decision identifier when authorization creates one. | |
| reason_codes | No | Stable spend-policy reason codes from the authorization decision. | |
| remaining_cents | No | Remaining spend budget in cents for the evaluated scope, when available. | |
| approval_request_id | No | Approval request identifier when human approval is required. |