Agent security boundaries

The agent surface exposes curated workflows only. There is no generic SQL, HTTP, or API execute tool; no live inference tool; no management-key mint or escalation tool; and no provider-key value input or output. Destructive tenant and app deletion are also absent.

The MCP Worker is an independent HTTPS client of api.weirgate.com. It has no database binding and imports no API Worker internals. Its outage cannot affect the data plane. Every tool result includes the upstream request ID and frozen API version.