# MCP and integration contract lab

Run `python mcp_cases.py` from the repository root. The lab executes local contract logic for MCP-style tools, resources and prompts; argument/output validation; identity; least privilege; pagination; rate limits; tenant isolation; approvals; audit minimization; drift and security review.

No MCP SDK/server/client, OAuth provider, network service, agent runtime or external API executes. The examples demonstrate protocol-independent contract and authorization boundaries; articles must not claim a deployed MCP server.

The verifier passed all 20 checks on 20 September 2026 and saved `mcp-verification.json`. Its first run caught and corrected a redaction regex that consumed a JSON quote. Human/security review remains pending.