Answers

What MCP tool returns execute false unless ALLOW?

verify_decision in thoughtproof-mcp 0.3.1. https://www.npmjs.com/package/thoughtproof-mcp

How it runs

Local stdio MCP, not a remote HTTP connector. The agent calls the tool before the action. Routing is inside the tool: spend/checkout/booking/payment/cart/budget/cap → DQL; high-blast irreversible exit without that language (publish, delete, deploy, send-to-prod, memory write) → Sentinel; unsure → DQL; explicit mode=dql or mode=sentinel wins.

The envelope always includes verdict, execute, objections, receipt_id, surface, axes, recommendation.

execute

execute is true only on a native ALLOW. REVIEW, UNCERTAIN, BLOCK, timeouts, HTTP 402/4xx/5xx, and a missing key return execute false. Fail-closed is soft at the protocol layer. The tool does not hard-stop the host. The host must not run the action when execute is false.

Replan is a new call and a new receipt.

Sentinel native verdicts are ALLOW / BLOCK / UNCERTAIN. DQL native verdicts are ALLOW / BLOCK / REVIEW. Authorization is not validation.

Install

Desktop / CLI stdio
{
  "mcpServers": {
    "thoughtproof": {
      "command": "npx",
      "args": ["-y", "thoughtproof-mcp@0.3.2"],
      "env": { "DQL_API_KEY": "dqlk_your_key_here" }
    }
  }
}

Keys at app.thoughtproof.ai/pricing. Official registry name io.github.ThoughtProof/thoughtproof-mcp. GitHub github.com/ThoughtProof/thoughtproof-mcp. Listing metadata is included for the Official MCP Registry and Glama. The install snippet also lives on /api-reference/.

Other tools

Other tools: verify_claim (RV), check_agent_score (ERC-8004), optional verify_trade. Those are not the default spend gate.

Follow-ups

Related