Returns the TunnelMind analyst config bundle. Configures any LLM
(Claude, GPT, Gemini, local) to behave as a TunnelMind analyst that
knows the data graph, follows the 5-call golden path, and surfaces
attestation_tier on every claim.
The bundle is signed inline (Ed25519, key_id from
/.well-known/receipt-signing-key.json). Add `?receipt=true` to wrap
the response in a Receipt v1.0 envelope for end-to-end audit.
Use this tool when:
- You want to configure a new LLM runtime to act as a TunnelMind analyst
- You want to verify the system prompt you're running matches what TunnelMind serves
- You're building a BYOM (bring-your-own-model) deployment and need the canonical config
Do NOT use this tool when:
- You want to call individual TunnelMind data tools — use the tools directly
- You want to verify a specific receipt — use check_receipt_revoked or @tunnelmindai/receipt-verify
Inputs (all optional):
- `surface` (query): "data" (default, full surface), "scry", or "sigil"
- `version` (query): pin a specific bundle version (e.g. "1.0.0" or "1" for latest 1.x.y)
- `receipt` (query): "true" to wrap the response in a signed Receipt v1.0 envelope
Content negotiation (via Accept header):
- `application/json` (default) — full bundle JSON
- `text/markdown` — system prompt only (Anthropic flavor)
- `application/vnd.anthropic.config+json` — Anthropic-shaped subset
- `application/vnd.openai.config+json` — OpenAI-shaped subset
Returns:
- `version`, `schema`, `issuer`, `surface`, `surface_label`
- `system_prompts.{anthropic,openai,generic}` — three encodings of the same semantic prompt
- `tools.surface_subset` — array of operationIds for this surface (null = all)
- `response_format` — JSON Schema the analyst's verdicts must conform to
- `attestation_tiers` — the 4-tier vocabulary (self_asserted → silicon_root)
- `graph_state` — live corpus counts at serve time
- `references` — URLs to the rest of the open-protocol layer
- `bundle_signature` — inline Ed25519 signature for offline verification
- `pin_recommended` — stable supply-chain identifier (survives hourly graph_state updates)
Headers: `X-Bundle-Version`, `X-Pin-Recommended`, `ETag`, `X-RateLimit-*`.
Cost:
- Free, anonymous-accessible. Rate-limited on a SEPARATE counter from data-API calls
(`cfg:ip:<ip>` identity) so a config refetch loop can't burn your data quota.
Latency:
- Typical <100ms (cached); cold fetch <500ms (live Supabase counts).