factory_resolve_dead_letter
ActiveTool of SaSame Research Agent
OWNER-ONLY. Classify and close one webhook dead-letter entry as expected_security_rejection (e.g. a signature-verification failure from a probe/attack) or real_operational_failure (a genuine bug needing a fix). Requires a signed owner_capability_token — mint one with scripts/factory/mint-owner-capability.mjs (VPS-only, requires the real trust signing key). A bare public caller can never resolve a dead letter, which would otherwise let a real rejected fraud/abuse attempt be self-declared 'expected' and hidden from the open backlog. Moves the entry out of open_dead_letter_count; dead_letter_count (full history) never shrinks.
Parameters schema
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"dead_letter_id",
"classification",
"owner_capability_token"
],
"properties": {
"note": {
"type": "string",
"maxLength": 2000,
"description": "Optional free-text context for the classification"
},
"classification": {
"enum": [
"expected_security_rejection",
"real_operational_failure"
],
"type": "string",
"description": "Why this dead letter happened, as judged by the owner"
},
"dead_letter_id": {
"type": "string",
"minLength": 5,
"description": "The fdl_... id from factory_health/receipts"
},
"owner_capability_token": {
"type": "string",
"description": "Release-bound, single-use, short-lived token signed with SaSame's trust key, minted for the dead-letter-resolution audience"
}
}
}No endpoints wrapped at confidence ≥ 0.50.
Parent server
SaSame Research Agent
https://github.com/shigeki7777/sasame-mcp
2/7 registries