factory_auth_profile_create
InactiveTool of SaSame Research Agent
Create a credentialed audit profile for authenticated real-tool inspection of one of your Factory lifecycles. The secret you supply is TEST-MODE ONLY: it is envelope-encrypted at rest immediately, handed only to the inspection worker, and is NEVER readable back — only reference and non-secret metadata are stored thereafter. Requires an active membership, ownership of the lifecycle, and a free credentialed_audit_profiles slot (over-limit is refused with AUTH_PROFILE_SLOTS_EXHAUSTED). The broker fails closed if its key is unavailable. Production (real-money/real-tenant) credentials cannot be enabled by any code path.
Parameters schema
{
"type": "object",
"$schema": "http://json-schema.org/draft-07/schema#",
"required": [
"principal_id",
"principal_key",
"lifecycle_id",
"lifecycle_key",
"auth_kind",
"target_origin",
"allowed_tools",
"secret_value",
"expires_at"
],
"properties": {
"scope": {
"type": "string"
},
"auth_kind": {
"enum": [
"oauth_test_user",
"short_lived_audit_token",
"sandbox_api_key",
"test_basic_auth",
"x402_testnet_allowance"
],
"type": "string"
},
"expires_at": {
"type": "string",
"description": "Required ISO-8601 expiry, at most 90 days out"
},
"lifecycle_id": {
"type": "string",
"minLength": 10
},
"principal_id": {
"type": "string",
"minLength": 8
},
"secret_value": {
"type": "string",
"minLength": 1,
"description": "TEST-MODE credential material; encrypted at rest immediately and never readable back"
},
"allowed_tools": {
"type": "array",
"items": {
"type": "string",
"minLength": 1
},
"description": "Tool names the authenticated inspection may call with this profile"
},
"lifecycle_key": {
"type": "string",
"minLength": 32
},
"principal_key": {
"type": "string",
"minLength": 32
},
"target_origin": {
"type": "string",
"format": "uri",
"description": "The creator-owned endpoint the credential authorizes; SSRF-guarded, private/loopback rejected"
}
}
}No endpoints wrapped at confidence ≥ 0.70.
Parent server
SaSame Research Agent
https://github.com/shigeki7777/sasame-mcp
2/7 registries