AxioRank Tools Log API

openapi: 3.2.0
info:
  title: AxioRank Gateway Tools Log API
  version: 1.0.0
  description: 'The runtime governance API behind every AxioRank SDK. Call it directly from any language. All requests authenticate with a bearer token and send/receive JSON.


    The SDKs (`@axiorank/sdk`, `axiorank` on PyPI) are thin wrappers over these endpoints. The canonical base path is `/api/v1`; the unversioned `/api/...` paths remain as aliases.'
  contact:
    name: AxioRank
    url: https://axiorank.com
servers:
- url: https://app.axiorank.com
  description: Production
security:
- bearerAuth: []
tags:
- name: Tools Log
paths:
  /api/v1/tools-log/servers:
    get:
      operationId: toolLogServers
      summary: 'Tool-definition transparency log: server directory'
      description: PUBLIC, unauthenticated. The directory of MCP servers observed in the tool-definition transparency log. Server-published metadata only (no tenant identity).
      security: []
      responses:
        '200':
          description: Observed servers and their latest tool-definition hashes.
          content:
            application/json:
              schema:
                type: object
                properties:
                  servers:
                    type: array
                    items:
                      type: object
                      additionalProperties: true
                required:
                - servers
        '429':
          description: Rate limited.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      tags:
      - Tools Log
  /api/v1/tools-log/servers/{host}:
    get:
      operationId: toolLogServerHistory
      summary: 'Tool-definition transparency log: server history'
      description: 'PUBLIC, unauthenticated. The full tool-definition history for one MCP server: every observed state and signed diff event. A rug-pull appears here as a publicly provable change event.'
      security: []
      parameters:
      - name: host
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: The server's observed tool-definition history.
          content:
            application/json:
              schema:
                type: object
                additionalProperties: true
        '400':
          description: Invalid host.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Server not found in the log.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '429':
          description: Rate limited.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      tags:
      - Tools Log
  /api/v1/tools-log/entries/{id}:
    get:
      operationId: toolLogEntry
      summary: 'Tool-definition transparency log: one entry'
      description: 'PUBLIC, unauthenticated. One tool-definition log entry: the normalized tool set, per-tool hashes, and the diff if it is a change event.'
      security: []
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: The log entry.
          content:
            application/json:
              schema:
                type: object
                additionalProperties: true
        '404':
          description: Entry not found.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '429':
          description: Rate limited.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      tags:
      - Tools Log
  /api/v1/tools-log/entries/{id}/proof:
    get:
      operationId: toolLogEntryProof
      summary: 'Tool-definition transparency log: inclusion proof'
      description: PUBLIC, unauthenticated. An offline-verifiable inclusion proof for one entry (inclusion path plus the signed tree head), so any client can verify a server's tool history against the published key.
      security: []
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: The inclusion proof + signed tree head.
          content:
            application/json:
              schema:
                type: object
                additionalProperties: true
        '404':
          description: Entry not found.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '409':
          description: Entry not sealed into a checkpoint yet.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '429':
          description: Rate limited.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      tags:
      - Tools Log
  /api/v1/tools-log/sth:
    get:
      operationId: toolLogSth
      summary: 'Tool-definition transparency log: signed tree head'
      description: PUBLIC, unauthenticated. The current signed tree head of the tool-definition log. Pin it over time to confirm the log only ever grows.
      security: []
      responses:
        '200':
          description: The current signed tree head.
          content:
            application/json:
              schema:
                type: object
                additionalProperties: true
        '404':
          description: No checkpoints sealed yet.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '429':
          description: Rate limited.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      tags:
      - Tools Log
components:
  schemas:
    ErrorResponse:
      type: object
      properties:
        error:
          type: string
      required:
      - error
  securitySchemes:
    bearerAuth:
      type: http
      scheme: bearer
      description: 'An AxioRank API key (`axr_live_…` agent key or `axr_site_…` property key) or a short-lived token (`axr_tok_…`). Sent as `Authorization: Bearer <key>`. Scopes: `gateway:write`, `cards:verify`, `inbound:verify`, `logs:read`, `admin`.'