{
  "$schema": "https://bartholomew.info/schemas/universal-mcp.json",
  "registry_name": "Bartholomew Universal MCP Security Catalog",
  "version": "6.5.6",
  "total_tools": 40,
  "protocol": "BTP v6.5.6 (Zero-Trust Agentic Runtime Protection)",
  "latency_guarantee": "< 35 \u00b5s In-Process AST Evaluation",
  "supported_schemas": [
    "Model Context Protocol (MCP) v1.0",
    "Anthropic Tool Specification (Claude 5.5 / 3.7 Sonnet)",
    "OpenAI Function Calling (GPT-Astra / o3 / GPT-4o)",
    "Google Gemini Function Declarations (Gemini 3.8 Ultra / 2.0 Flash)",
    "DeepSeek Tool Calling Protocol (DeepSeek-R1 / V3)",
    "Mistral AI Function Calling (Mistral Large 4 / Pixtral)",
    "OpenAPI 3.0 / 3.1",
    "JSON Schema 2020-12 / Draft 7"
  ],
  "tools": [
    {
      "name": "btp_ast_evaluate",
      "category": "ast_firewall",
      "desc": "Sub-35\u00b5s AST evaluation of arbitrary shell commands against root destruction invariants.",
      "latency_us": 18.2,
      "scope": "system:ast"
    },
    {
      "name": "btp_shell_quarantine",
      "category": "ast_firewall",
      "desc": "Isolate unvetted pipe-to-shell executions (curl | bash, wget | sh) in transient sandbox.",
      "latency_us": 14.5,
      "scope": "exec:quarantine"
    },
    {
      "name": "btp_sql_ddl_guard",
      "category": "ast_firewall",
      "desc": "Intercept and block destructive SQL DDL queries (DROP TABLE, TRUNCATE, ALTER USER).",
      "latency_us": 16.1,
      "scope": "db:ddl"
    },
    {
      "name": "btp_root_fs_fence",
      "category": "ast_firewall",
      "desc": "Confine agent filesystem writes strictly within active repository workspace bounds.",
      "latency_us": 19.4,
      "scope": "fs:confinement"
    },
    {
      "name": "btp_fork_bomb_shield",
      "category": "ast_firewall",
      "desc": "Detect recursive shell functions and process expansion loops before fork exhaustion.",
      "latency_us": 22.0,
      "scope": "process:limits"
    },
    {
      "name": "btp_sudo_privilege_veto",
      "category": "ast_firewall",
      "desc": "Block unauthorized privilege escalation attempts (sudo, su, doas, setuid).",
      "latency_us": 12.0,
      "scope": "auth:privilege"
    },
    {
      "name": "btp_chmod_enclave_check",
      "category": "ast_firewall",
      "desc": "Prevent world-writable permissions tampering (chmod 777, chown root).",
      "latency_us": 15.3,
      "scope": "fs:permissions"
    },
    {
      "name": "btp_memory_corruption_gate",
      "category": "ast_firewall",
      "desc": "Scan compiled C/Rust/Wasm execution buffers for buffer overflow probes.",
      "latency_us": 28.7,
      "scope": "mem:safety"
    },
    {
      "name": "btp_secret_vault_mask",
      "category": "secret_vault",
      "desc": "In-flight zero-knowledge masking of high-entropy API secrets (sk_live, xai, ghp).",
      "latency_us": 12.4,
      "scope": "secret:mask"
    },
    {
      "name": "btp_pci_dss_redact",
      "category": "secret_vault",
      "desc": "Mask cardholder Primary Account Numbers (PANs), CVVs, and magnetic stripe data.",
      "latency_us": 11.8,
      "scope": "pci:redaction"
    },
    {
      "name": "btp_aws_ssrf_shield",
      "category": "secret_vault",
      "desc": "Block SSRF targeting cloud instance metadata service IP (169.254.169.254).",
      "latency_us": 10.9,
      "scope": "net:ssrf"
    },
    {
      "name": "btp_jwt_leak_guard",
      "category": "secret_vault",
      "desc": "Quarantine Bearer tokens and authorization headers from outbound LLM prompt context.",
      "latency_us": 14.1,
      "scope": "auth:tokens"
    },
    {
      "name": "btp_env_file_protector",
      "category": "secret_vault",
      "desc": "Prevent raw reads or network piping of .env, credentials.json, and id_rsa files.",
      "latency_us": 13.5,
      "scope": "fs:credentials"
    },
    {
      "name": "btp_pii_anonymizer",
      "category": "secret_vault",
      "desc": "Redact social security numbers, tax identifiers, and phone numbers in caller memory.",
      "latency_us": 17.6,
      "scope": "data:pii"
    },
    {
      "name": "btp_webhook_exfil_block",
      "category": "secret_vault",
      "desc": "Inspect outbound cURL/fetch payloads to suppress unauthorized exfiltration tunnels.",
      "latency_us": 21.3,
      "scope": "net:exfil"
    },
    {
      "name": "btp_memory_zeroizer",
      "category": "secret_vault",
      "desc": "Cryptographically scrub volatile memory after agent tool invocation completes.",
      "latency_us": 8.5,
      "scope": "mem:zeroize"
    },
    {
      "name": "btp_keystone_passkey_verify",
      "category": "keystone",
      "desc": "Validate signed Ed25519 Non-Human Identity passkey tokens before tool dispatch.",
      "latency_us": 21.0,
      "scope": "keystone:verify"
    },
    {
      "name": "btp_keystone_spend_limit",
      "category": "keystone",
      "desc": "Enforce per-action ($5.00) and daily ($25.00) autonomous capital ceilings.",
      "latency_us": 15.8,
      "scope": "keystone:budget"
    },
    {
      "name": "btp_keystone_scope_gate",
      "category": "keystone",
      "desc": "Verify that proposed tool invocation matches granted agent capability scopes.",
      "latency_us": 14.2,
      "scope": "keystone:scope"
    },
    {
      "name": "btp_keystone_dual_key_auth",
      "category": "keystone",
      "desc": "Require co-signature from human supervisor for high-risk irreversible mutations.",
      "latency_us": 25.4,
      "scope": "keystone:dualkey"
    },
    {
      "name": "btp_keystone_time_lock",
      "category": "keystone",
      "desc": "Enforce maximum time-to-live (TTL) on ephemeral autonomous clearance grants.",
      "latency_us": 9.8,
      "scope": "keystone:ttl"
    },
    {
      "name": "btp_keystone_delegate_subagent",
      "category": "keystone",
      "desc": "Issue attenuated, down-scoped passkey vouchers to child agent sub-processes.",
      "latency_us": 18.9,
      "scope": "keystone:delegate"
    },
    {
      "name": "btp_keystone_revoke_passkey",
      "category": "keystone",
      "desc": "Instant revocation of compromised agent passkeys across the distributed mesh.",
      "latency_us": 11.2,
      "scope": "keystone:revoke"
    },
    {
      "name": "btp_keystone_audit_scorecard",
      "category": "keystone",
      "desc": "Retrieve real-time capability usage and invariant pass/fail metrics.",
      "latency_us": 16.5,
      "scope": "keystone:audit"
    },
    {
      "name": "btp_schema_adapt_anthropic",
      "category": "universal_schema",
      "desc": "Translate Anthropic Claude tool schemas into zero-trust BTP contracts.",
      "latency_us": 14.8,
      "scope": "schema:anthropic"
    },
    {
      "name": "btp_schema_adapt_openai",
      "category": "universal_schema",
      "desc": "Translate OpenAI function call definitions into deterministic AST gates.",
      "latency_us": 15.2,
      "scope": "schema:openai"
    },
    {
      "name": "btp_schema_adapt_gemini",
      "category": "universal_schema",
      "desc": "Translate Google Gemini function declarations into invariant validation rules.",
      "latency_us": 16.0,
      "scope": "schema:gemini"
    },
    {
      "name": "btp_schema_adapt_openapi",
      "category": "universal_schema",
      "desc": "Ingest OpenAPI 3.0/3.1 specs and auto-generate sub-35\u00b5s parameter checks.",
      "latency_us": 24.3,
      "scope": "schema:openapi"
    },
    {
      "name": "btp_schema_adapt_json_schema",
      "category": "universal_schema",
      "desc": "Validate parameters against JSON Schema 2020-12 drafts in caller memory.",
      "latency_us": 19.1,
      "scope": "schema:jsonschema"
    },
    {
      "name": "btp_schema_harmonize_universal",
      "category": "universal_schema",
      "desc": "Universal multi-format parser: accepts any schema and outputs hardened BTP tool.",
      "latency_us": 22.5,
      "scope": "schema:universal"
    },
    {
      "name": "btp_schema_validate_payload",
      "category": "universal_schema",
      "desc": "Execute in-process deterministic schema validation before target execution.",
      "latency_us": 17.3,
      "scope": "schema:validate"
    },
    {
      "name": "btp_schema_export_catalog",
      "category": "universal_schema",
      "desc": "Export all registered tools in Claude Desktop, Cursor, or OpenAI format.",
      "latency_us": 13.9,
      "scope": "schema:export"
    },
    {
      "name": "btp_merkle_receipt_create",
      "category": "compliance",
      "desc": "Generate RFC 8785 canonical JSON hash and Ed25519 signature for execution.",
      "latency_us": 24.1,
      "scope": "attest:merkle"
    },
    {
      "name": "btp_eu_ai_act_art14_gate",
      "category": "compliance",
      "desc": "Enforce Article 14 Human Oversight check before high-impact tool dispatch.",
      "latency_us": 16.7,
      "scope": "eu:art14"
    },
    {
      "name": "btp_eu_ai_act_art15_audit",
      "category": "compliance",
      "desc": "Generate Article 15 Robustness & Cybersecurity conformity dossier slice.",
      "latency_us": 21.8,
      "scope": "eu:art15"
    },
    {
      "name": "btp_soc2_cc6_evidence_log",
      "category": "compliance",
      "desc": "Record immutable evidence entry for SOC 2 CC6 logical access controls.",
      "latency_us": 18.4,
      "scope": "soc2:cc6"
    },
    {
      "name": "btp_soc2_cc7_incident_dispatch",
      "category": "compliance",
      "desc": "Dispatch real-time security telemetry to enterprise SIEM/Slack endpoints.",
      "latency_us": 26.5,
      "scope": "soc2:cc7"
    },
    {
      "name": "btp_offline_scif_verify",
      "category": "compliance",
      "desc": "Verify air-gapped cryptographic bundle roots in zero-egress enclaves.",
      "latency_us": 19.0,
      "scope": "airgap:verify"
    },
    {
      "name": "btp_silicon_provenance_check",
      "category": "compliance",
      "desc": "Audit host compute silicon provenance (TPM/SEV/Nitro/NVIDIA H100 attestation).",
      "latency_us": 32.1,
      "scope": "hardware:attest"
    },
    {
      "name": "btp_compliance_dossier_export",
      "category": "compliance",
      "desc": "Export full cryptographic machine-readable JSON compliance dossier.",
      "latency_us": 28.0,
      "scope": "dossier:export"
    }
  ]
}