{ "contract": "sourcey.site-record/v1alpha1", "release_id": "sha256:1d87cabcbd19a919d65828af0e905ebf4e95cb8a96fc9c3a0ae714dd2a86ab55", "snapshot_id": "sha256:8759ee20fb0ebc3f90116fcba569c53bddcfc40b0a60f67c927576b65dc174d0", "artifact_sha256": "sha256:ca571c9bd7d84c1c75222275d726cd8ed391c5423569d66dba90592b887baa39", "data": { "entity_id": "ent_01kyh8fpe4ys74qx1k4zfcqpjv", "entity_slug": "mongodb", "profile": { "projection_contract": "sourcey.agent-readiness-projection/v1alpha1", "agent_readiness_profile_id": "arp_01kzf0m4xb4p2kv9d7n6ts3c8y", "entity_id": "ent_01kyh8fpe4ys74qx1k4zfcqpjv", "scope": { "product": { "key": "mongodb-atlas-api", "name": "MongoDB Atlas Administration API" }, "funnel": { "key": "cluster-lifecycle", "name": "Cluster lifecycle" } }, "catalog_binding": { "base_release_id": "sha256:8986cb1640fd748dd005e5c94c7b02d3f44a3d39ff6b72573091bd81af84c61e", "entity_revision_digest": "sha256:ed7f1d3dbbabc7c328bc3491fa2396c0fb1b1d5fcc5c5d88ede28578918e7126" }, "declaration_revision_digest": "sha256:a095b2c61d24a5e449b610ac24c8106f2afaf24b22bfaa6a7123d3d72b7e8e60", "declaration": { "declaration_id": "declaration_mongodb_atlas_api_cluster_lifecycle", "provenance": { "repository": "sourcey/agent-ready-services", "commit": "ca383f7867c18d91567fcb8326be55f7411d9554", "path": "entities/mo/mongodb.yaml", "git_blob_oid": "05c8a49bd3a58e1efa150a9281649207165cd397", "blob_digest": "sha256:416d67d90850e3b6812004c5afa680a7605fae75c66950f81d69c8104b333798" }, "status": "community_declared" }, "surface_catalog": { "assessment_targets": [ { "target_id": "service-use", "name": "Create and manage Atlas clusters through the Administration API", "interface_ids": [ "cluster-api" ] } ], "participants": [ { "participant_id": "mongodb", "roles": [ "access_operator", "identity_provider", "operations_provider", "payment_provider", "provisioning_provider", "subject" ], "identity": { "entity_id": "ent_01kyh8fpe4ys74qx1k4zfcqpjv" } } ], "resources": [ { "resource_id": "account-signup", "uri": "https://account.mongodb.com/account/register", "roles": [ "access" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] }, { "resource_id": "api-errors", "uri": "https://www.mongodb.com/docs/atlas/reference/api-errors/", "roles": [ "documentation", "operations", "recovery", "status" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] }, { "resource_id": "api-reference", "uri": "https://www.mongodb.com/docs/atlas/api/atlas-admin-api-ref/", "roles": [ "discovery", "documentation", "operations" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] }, { "resource_id": "authentication", "uri": "https://www.mongodb.com/docs/atlas/api/api-authentication/", "roles": [ "authentication", "descriptor", "documentation", "provisioning" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] }, { "resource_id": "billing-checkout", "uri": "https://www.mongodb.com/docs/atlas/billing/", "roles": [ "checkout", "documentation" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] }, { "resource_id": "cluster-create", "uri": "https://www.mongodb.com/docs/api/doc/atlas-admin-api-v2/operation/operation-creategroupcluster", "roles": [ "documentation", "provisioning", "status" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] }, { "resource_id": "cluster-operations", "uri": "https://www.mongodb.com/docs/api/doc/atlas-admin-api-v2", "roles": [ "documentation", "operations", "provisioning", "status" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] }, { "resource_id": "pricing", "uri": "https://www.mongodb.com/pricing", "roles": [ "pricing" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] }, { "resource_id": "rate-limits", "uri": "https://www.mongodb.com/docs/atlas/api/api-rate-limit/", "roles": [ "documentation", "operations", "status" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] }, { "resource_id": "readiness-a2ebb552da0020dafded21f72ec21bd8489c921b3f9fe1dc7114df92bc3852f3", "uri": "https://www.mongodb.com/docs/atlas/tutorial/create-atlas-account", "roles": [ "access", "documentation" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] }, { "resource_id": "service-terms", "uri": "https://www.mongodb.com/legal/terms-and-conditions/cloud", "roles": [ "terms" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] }, { "resource_id": "support", "uri": "https://www.mongodb.com/docs/atlas/support/", "roles": [ "documentation", "recovery" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] } ], "endpoints": [ { "endpoint_id": "atlas-api", "uri": "https://cloud.mongodb.com/api/atlas/v2", "transport": "http", "roles": [ "service", "status" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] }, { "endpoint_id": "registration", "uri": "https://account.mongodb.com/account/register", "transport": "http", "roles": [ "registration" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] } ], "interfaces": [ { "interface_id": "api-authentication", "modality": "network_api", "functions": [ "authentication" ], "endpoint_ids": [], "resource_ids": [ "authentication" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] }, { "interface_id": "cluster-api", "modality": "network_api", "functions": [ "service_operation" ], "endpoint_ids": [ "atlas-api" ], "resource_ids": [ "api-errors", "api-reference", "cluster-operations", "rate-limits" ], "operated_by_participant_id": "mongodb", "standard_bindings": [] } ], "relations": [ { "relation_id": "authentication-authenticates-api", "kind": "authenticates", "from": { "node_kind": "interface", "node_id": "api-authentication" }, "to": { "node_kind": "interface", "node_id": "cluster-api" } }, { "relation_id": "cluster-create-describes-api", "kind": "describes", "from": { "node_kind": "resource", "node_id": "cluster-create" }, "to": { "node_kind": "interface", "node_id": "cluster-api" } }, { "relation_id": "clusters-describe-api", "kind": "describes", "from": { "node_kind": "resource", "node_id": "cluster-operations" }, "to": { "node_kind": "interface", "node_id": "cluster-api" } }, { "relation_id": "reference-describes-api", "kind": "describes", "from": { "node_kind": "resource", "node_id": "api-reference" }, "to": { "node_kind": "interface", "node_id": "cluster-api" } }, { "relation_id": "signup-precedes-authentication", "kind": "precedes", "from": { "node_kind": "resource", "node_id": "account-signup" }, "to": { "node_kind": "interface", "node_id": "api-authentication" } } ], "surface_exclusions": [ { "exclusion_id": "separate-eligibility-resource", "role": "eligibility", "rationale": "Applicable access conditions are published within the service terms; no separate eligibility resource is declared." } ] }, "lifecycle": "active", "effective_from": "2026-09-06T08:47:58Z", "revision_digest": "sha256:f97d1ca32a3f50ade240991b0a691f82970975553f209917a18b9d9a8c9747b2", "policy_digest": "sha256:fc9e8f046d86fcf19ab2f1bc547219e503cdc11ffa135d020db7285965cd7d1d", "policy_version": "service-use-2026-09-07-blocking-barriers-r12", "policy_as_of": "2026-09-07T00:00:00Z", "assessment_basis": { "principal": "authorized_human_or_organization", "initial_state": { "product_specific_account": false, "product_credentials": false, "paid_subscription": false, "provisioned_resource": false, "external_identity": "only_when_declared_by_exact_funnel" }, "permitted_human_boundaries": [ "account_ownership_confirmation", "delegated_identity_consent", "regulated_approval", "final_payment_or_irreversible_commitment" ], "required_handoff_properties": [ "exact_disclosure", "resumable_handoff", "deterministic_continuation" ], "forbidden_substitutions": [ "captcha_solving", "human_password_or_session_sharing", "concealed_agent_identity", "invented_eligibility", "unbound_out_of_band_code", "vendor_policy_bypass", "unapproved_consequential_action" ], "success": { "target_coverage": "every_declared_target", "interface_coverage": "at_least_one_declared_alternative", "authority": "scoped", "failure_semantics": "documented", "recovery": "supported" }, "observed_assessment": { "allowed_sources": [ "public_documentation", "public_metadata", "public_endpoints", "non_mutating_interaction", "operator_attested_public_observation" ], "consequential_claims": "certification_required" } }, "overall_outcome": "constrained", "public_state": "limited", "state_label": "Limited", "grade": "C+", "grade_derivation": { "label": "Five-stage Agent Readiness report card", "explanation": "A through C grades count Limited stages; D and F reflect Blocked stages by lifecycle severity.", "coverage_rule": "Coverage is complete only when every graded signal has supported, fresh, non-conflicting evidence. Barrier and informational signals do not change coverage; only fresh, supported barrier values that passed their admission evidence rule participate in stage outcomes.", "outcome_rule": "Each stage takes its worst graded signal or verified barrier. A fresh, supported mandatory barrier that passed its admission evidence rule can block that stage; incomplete or stale barrier evidence remains context only. The overall grade is derived from the five stage states." }, "publication": { "visibility": "discoverable", "reasons": [] }, "primary_finding": { "stage": "sign_up", "stage_label": "Sign up", "public_state": "limited", "finding": { "signal_code": "delegated_identity_access", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Machine credentials exist but require manual copying, broad authority, or weak lifecycle support.", "context": "Service accounts provide OAuth 2.0 client credentials access tokens with roles and token revocation, but require initial manual setup in the organization/project." } }, "limitations": [ { "stage": "sign_up", "stage_label": "Sign up", "finding": { "signal_code": "delegated_identity_access", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Machine credentials exist but require manual copying, broad authority, or weak lifecycle support.", "context": "Service accounts provide OAuth 2.0 client credentials access tokens with roles and token revocation, but require initial manual setup in the organization/project." }, "remediation": { "signal_code": "delegated_identity_access", "code": "improve.sign_up.delegated_identity_access", "instruction": "Provide scoped delegated authorization with consent, revocation, and deterministic resumption." } }, { "stage": "pay", "stage_label": "Pay", "finding": { "signal_code": "commitment_disclosure", "condition": "Is the exact commercial commitment disclosed before authorization?", "finding": "The public commitment omits a material component until later in the flow.", "context": "The pricing schedule discloses base cluster rates, billing frequencies (hourly with monthly invoices, or monthly rates), and USD pricing for MongoDB Atlas. However, actual pricing depends on deployment requirements, configurations, and location, leaving certain cost components contextual until configuration." }, "remediation": { "signal_code": "commitment_disclosure", "code": "improve.pay.commitment_disclosure", "instruction": "Disclose the complete commitment before payment authorization." } }, { "stage": "pay", "stage_label": "Pay", "finding": { "signal_code": "self_service_purchase", "condition": "Is a direct self-service path to paid access documented?", "finding": "Self-service is tier- or condition-limited, or a bounded vendor review exposes status.", "context": "MongoDB Atlas supports self-service payment via accepted payment methods in the console, but purchasing a subscription or reviewing alternative billing methods is conditioned on contacting MongoDB Sales or buying through a marketplace." }, "remediation": { "signal_code": "self_service_purchase", "code": "improve.pay.self_service_purchase", "instruction": "Document a direct purchase path or bounded vendor review with machine-readable status." } }, { "stage": "provision", "stage_label": "Provision", "finding": { "signal_code": "provisioning_completion", "condition": "Can an agent determine successful provisioning completion and reconcile asynchronous failure?", "finding": "Completion is observable, but an asynchronous path omits a material terminal, bound, or reconciliation property.", "context": "Cluster creation returns a stateName field indicating control plane activity (IDLE, CREATING, UPDATING, DELETING). State CREATING indicates a cluster being provisioned for the first time until ready. Admitted evidence does not establish asynchronous failure reconciliation or time bounds." }, "remediation": { "signal_code": "provisioning_completion", "code": "improve.provision.provisioning_completion", "instruction": "Expose bounded machine-readable terminal status and reconciliation semantics." } }, { "stage": "operate", "stage_label": "Operate", "finding": { "signal_code": "failure_contract", "condition": "Can an agent handle applicable failure modes safely?", "finding": "Safe failure handling is documented only partially.", "context": "Atlas Administration API documents error response codes (such as 400, 409, 410, 429 RATE_LIMITED, and 500) and rate limit parameters, but the retained text does not establish explicit idempotency, cancellation, or reconciliation semantics." }, "remediation": { "signal_code": "failure_contract", "code": "improve.operate.failure_contract", "instruction": "Document applicable structured errors, retry, cancellation, and reconciliation semantics." } } ], "stages": [ { "stage": "evaluate", "stage_label": "Evaluate", "outcome": "pass", "public_state": "ready", "state_label": "Ready", "primary_finding": { "signal_code": "service_discovery", "condition": "Can an agent find the exact service and its stable entrypoints?", "finding": "The exact service and stable evaluation or access entrypoints are publicly discoverable.", "context": "The exact service and its stable RESTful administrative endpoints are discoverable via the Atlas Administration API Reference documentation." }, "secondary_context": [ { "signal_code": "terms_access", "condition": "Can an agent retrieve and understand the applicable commitment terms?", "finding": "Applicable terms are stable, readable, retrievable, and materially complete.", "context": "The MongoDB Cloud Terms of Service provides stable, readable, and retrievable commitment terms governing the use of MongoDB Cloud Services." }, { "signal_code": "eligibility_decidability", "condition": "Can an agent decide every material eligibility condition before commitment?", "finding": "Eligibility conditions and required inputs are explicit and decidable.", "context": "The MongoDB Cloud Terms of Service explicitly states that users must agree to the agreement, represent and warrant that they are authorized if acting on behalf of an organization, and comply with all applicable laws, rules, and regulations when using Cloud Services." }, { "signal_code": "pricing_decidability", "condition": "Can an agent estimate cost or confirm no-charge status before commitment?", "finding": "Price or no-charge status, variables, currency, and material conditions are explicit.", "context": "MongoDB Atlas pricing explicitly outlines hardware configuration rates per hour (e.g., $3.95/hr for M80), Flex Cluster tier rates based on ops/second (from $0.0110/hr), and usage variables including compute, storage, region, and data transfer." }, { "signal_code": "structured_evaluation_discovery", "condition": "Are verified structured discovery artifacts available?", "finding": "Verified structured artifacts accelerate discovery of the evaluation surface.", "context": "Documentation provides an explicit documentation index for AI agents at https://www.mongodb.com/docs/llms.txt and offers markdown versions of all pages by appending .md to any URL path." }, { "signal_code": "verified_web_agent_access", "condition": "Does the vendor deliberately describe access for web agents?", "finding": "Web-agent access policy is explicit and verified for the assessed resources.", "context": "The documentation resource metadata explicitly declares robots indexing ('robots: index') for the assessed public reference resources." } ], "signals": [ { "signal_code": "eligibility_decidability", "evaluation_role": "informational", "required": false, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent decide every material eligibility condition before commitment?", "finding": "Eligibility conditions and required inputs are explicit and decidable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:56.793Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "service-terms" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:2c60d69ac6813ccb74ac7b79b23b7ce2dec2611eacf21e8887ea680bdc0ae62b", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:58fa8f83f27c1db55000cd9e0a48036ad3444a19914ae91574d15d65569c1997", "sha256:b9f8e6edefac8c148bfbea4a40470148f83d5a300df082c1e725fe26d8420b3b", "sha256:ec48419af152bad9b44b12a748de923068f0e4456e9d471e06921480393f976b" ], "source_surface": { "node_kind": "resource", "node_id": "service-terms" }, "locators": [ { "artifact_digest": "sha256:ec48419af152bad9b44b12a748de923068f0e4456e9d471e06921480393f976b", "start_byte": 11287, "end_byte": 12083, "value_digest": "sha256:6358f131f090f7bf73e618f13fa0dfcb512d5d55a74c2065f406bdcd9bd37426" } ] } ], "note": "The MongoDB Cloud Terms of Service explicitly states that users must agree to the agreement, represent and warrant that they are authorized if acting on behalf of an organization, and comply with all applicable laws, rules, and regulations when using Cloud Services." }, { "signal_code": "pricing_decidability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent estimate cost or confirm no-charge status before commitment?", "finding": "Price or no-charge status, variables, currency, and material conditions are explicit.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:41.806Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "pricing" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:83fe7489dae738ad268749764059e0b620a7f5777e2d95226c4673f18c364cda", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:607d445845eba241ff0a5deeac5fbf4396cf0ca5fcc44738edc4d5bbb3ed5790", "sha256:b7d45a9ea3c6a1e83d5bed45586d2c41ea886dd081387a462c31176856635034", "sha256:e8f54a2c9bfde1ad41fdf1d51abe44be352019f43b93869e493975e1d0f903b4" ], "source_surface": { "node_kind": "resource", "node_id": "pricing" }, "locators": [ { "artifact_digest": "sha256:607d445845eba241ff0a5deeac5fbf4396cf0ca5fcc44738edc4d5bbb3ed5790", "start_byte": 18995, "end_byte": 19805, "value_digest": "sha256:fdc693e0c3d5e1ce83a98df1d274efadcdf05d1b36fa6f51adf71503f18d6593" }, { "artifact_digest": "sha256:607d445845eba241ff0a5deeac5fbf4396cf0ca5fcc44738edc4d5bbb3ed5790", "start_byte": 19806, "end_byte": 20606, "value_digest": "sha256:759ad848baa2650ca2f9b141e009aa84eefc1ad19507ebcbd33b61f28879ee2e" } ] } ], "note": "MongoDB Atlas pricing explicitly outlines hardware configuration rates per hour (e.g., $3.95/hr for M80), Flex Cluster tier rates based on ops/second (from $0.0110/hr), and usage variables including compute, storage, region, and data transfer." }, { "signal_code": "service_discovery", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent find the exact service and its stable entrypoints?", "finding": "The exact service and stable evaluation or access entrypoints are publicly discoverable.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:22.249Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-reference" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:5dcfbdf739439ddcc96d1eb9e2abe0e0bf7ce2276ec2797eab24dcb195c8242e", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0b7439ea777d42af81a993a35565235bf49e47c01ed02e634b2f85a62e0a684b", "sha256:136d7f770366dcafc19a60ab8f9207c25905d9b58a5ea32b5792e0ca61c4ea3d", "sha256:c89eecc1116917cdb3302852d5c270800bf477746b51fb62a0e431e65320f4d0", "sha256:f117e5b3b918b3da2dd2f2530b8436530120088019541f00a37dfdf808bf2038" ], "source_surface": { "node_kind": "resource", "node_id": "api-reference" }, "locators": [ { "artifact_digest": "sha256:c89eecc1116917cdb3302852d5c270800bf477746b51fb62a0e431e65320f4d0", "start_byte": 18763, "end_byte": 19558, "value_digest": "sha256:96c5130862989ebe0ea5733df94823d8858437d4af2b333506cd4d6f59d1f592" }, { "artifact_digest": "sha256:c89eecc1116917cdb3302852d5c270800bf477746b51fb62a0e431e65320f4d0", "start_byte": 0, "end_byte": 800, "value_digest": "sha256:d13ad42b2b181c2c9c887a477a4aa22f178099a168a571190e83f87521dad1a8" } ] } ], "note": "The exact service and its stable RESTful administrative endpoints are discoverable via the Atlas Administration API Reference documentation." }, { "signal_code": "structured_evaluation_discovery", "evaluation_role": "informational", "required": false, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Are verified structured discovery artifacts available?", "finding": "Verified structured artifacts accelerate discovery of the evaluation surface.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:22.249Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-reference" }, { "node_kind": "resource", "node_id": "authentication" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:5dcfbdf739439ddcc96d1eb9e2abe0e0bf7ce2276ec2797eab24dcb195c8242e", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0b7439ea777d42af81a993a35565235bf49e47c01ed02e634b2f85a62e0a684b", "sha256:5e05146e556fb35a5790d22d216cefec765f0180de499054bdee8c45a8a37461", "sha256:c89eecc1116917cdb3302852d5c270800bf477746b51fb62a0e431e65320f4d0", "sha256:f117e5b3b918b3da2dd2f2530b8436530120088019541f00a37dfdf808bf2038" ], "source_surface": { "node_kind": "resource", "node_id": "api-reference" }, "locators": [ { "artifact_digest": "sha256:c89eecc1116917cdb3302852d5c270800bf477746b51fb62a0e431e65320f4d0", "start_byte": 14023, "end_byte": 14821, "value_digest": "sha256:107790d07bfd2c15c51247dbed18c586bb79a833d828e26a36f0a7da355b72e4" } ] } ], "note": "Documentation provides an explicit documentation index for AI agents at https://www.mongodb.com/docs/llms.txt and offers markdown versions of all pages by appending .md to any URL path." }, { "signal_code": "terms_access", "evaluation_role": "informational", "required": false, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent retrieve and understand the applicable commitment terms?", "finding": "Applicable terms are stable, readable, retrievable, and materially complete.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:56.793Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "service-terms" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:2c60d69ac6813ccb74ac7b79b23b7ce2dec2611eacf21e8887ea680bdc0ae62b", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:58fa8f83f27c1db55000cd9e0a48036ad3444a19914ae91574d15d65569c1997", "sha256:eab8467380cebfcf0667e76a3cd8d53d7ebec8210d1c55c341afe4d048567e5b", "sha256:ec48419af152bad9b44b12a748de923068f0e4456e9d471e06921480393f976b" ], "source_surface": { "node_kind": "resource", "node_id": "service-terms" }, "locators": [ { "artifact_digest": "sha256:ec48419af152bad9b44b12a748de923068f0e4456e9d471e06921480393f976b", "start_byte": 10465, "end_byte": 11286, "value_digest": "sha256:33df8da137bdae24a5a560093de278ea53c3f74dd863bce91a5087806e74d75f" }, { "artifact_digest": "sha256:ec48419af152bad9b44b12a748de923068f0e4456e9d471e06921480393f976b", "start_byte": 11287, "end_byte": 12083, "value_digest": "sha256:6358f131f090f7bf73e618f13fa0dfcb512d5d55a74c2065f406bdcd9bd37426" } ] } ], "note": "The MongoDB Cloud Terms of Service provides stable, readable, and retrievable commitment terms governing the use of MongoDB Cloud Services." }, { "signal_code": "verified_web_agent_access", "evaluation_role": "informational", "required": false, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Does the vendor deliberately describe access for web agents?", "finding": "Web-agent access policy is explicit and verified for the assessed resources.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:22.249Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-reference" }, { "node_kind": "resource", "node_id": "authentication" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:5dcfbdf739439ddcc96d1eb9e2abe0e0bf7ce2276ec2797eab24dcb195c8242e", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0b7439ea777d42af81a993a35565235bf49e47c01ed02e634b2f85a62e0a684b", "sha256:5ff235286e747518ed1317b22cf8d1914e0001df18c3314d87cf43422c50a981", "sha256:c89eecc1116917cdb3302852d5c270800bf477746b51fb62a0e431e65320f4d0", "sha256:f117e5b3b918b3da2dd2f2530b8436530120088019541f00a37dfdf808bf2038" ], "source_surface": { "node_kind": "resource", "node_id": "api-reference" }, "locators": [ { "artifact_digest": "sha256:c89eecc1116917cdb3302852d5c270800bf477746b51fb62a0e431e65320f4d0", "start_byte": 0, "end_byte": 800, "value_digest": "sha256:d13ad42b2b181c2c9c887a477a4aa22f178099a168a571190e83f87521dad1a8" } ] } ], "note": "The documentation resource metadata explicitly declares robots indexing ('robots: index') for the assessed public reference resources." } ], "blockers": [], "remediations": [] }, { "stage": "sign_up", "stage_label": "Sign up", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "delegated_identity_access", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Machine credentials exist but require manual copying, broad authority, or weak lifecycle support.", "context": "Service accounts provide OAuth 2.0 client credentials access tokens with roles and token revocation, but require initial manual setup in the organization/project." }, "secondary_context": [ { "signal_code": "access_control_operability", "condition": "Can an agent operate the access controls and safe handoffs deterministically?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The captured registration page endpoint provides only basic viewport metadata and page titles, leaving access control operability unresolved." }, { "signal_code": "captcha_compatible_access", "condition": "Can an agent obtain access without an unsupported CAPTCHA boundary?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The retained evidence across evaluated targets does not explicitly declare whether CAPTCHA challenges are required or provide a verified-agent alternative." }, { "signal_code": "phone_verification_compatible", "condition": "Can required phone verification be completed through a supported boundary?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The retained evidence does not contain explicit declarations or observations regarding phone verification requirements." }, { "signal_code": "access_entrypoint_stability", "condition": "Is there a stable route to begin obtaining service access?", "finding": "A stable canonical route begins the required access bootstrap.", "context": "Documentation explicitly provides a canonical path to get started with MongoDB Atlas by registering a new account using email, GitHub, or Google credentials." } ], "signals": [ { "signal_code": "access_control_operability", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent operate the access controls and safe handoffs deterministically?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:17.572Z", "tested_surfaces": [ { "node_kind": "endpoint", "node_id": "registration" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The captured registration page endpoint provides only basic viewport metadata and page titles, leaving access control operability unresolved." }, { "signal_code": "access_entrypoint_stability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Is there a stable route to begin obtaining service access?", "finding": "A stable canonical route begins the required access bootstrap.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:12.729Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "account-signup" }, { "node_kind": "resource", "node_id": "readiness-a2ebb552da0020dafded21f72ec21bd8489c921b3f9fe1dc7114df92bc3852f3" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:f955de1f53f1a7c79fa326574c1827442b3dd2c1c37d8a8310441076c20a64fa", "capture_rung": "headless" } ], "artifact_digests": [ "sha256:32380bca0325107f647f3022fb77b1cbdc9a005a622d0f1eb5cd2e734e3ef87b", "sha256:346138c0cb2bb61259b9dfad43bd3b92ed652d8691199e384425c24787ca2702", "sha256:a030c2ef3e8337370f38fbeb5031bc903a49dd0561ac3d99ce72bde8cabb4bbe", "sha256:d426c36c8c6bb75ce1805850a3281c75732b22351f4b370d66be481b4d93ffbe", "sha256:f6a4d6f09de608bdd7d5585c8f03911b7c4a5591ffed0232366e858967a344ce", "sha256:fd77d2558c6bf02549bfdeac9b3d2cc782e063d4bb44db2ef44a91012f6bbcb5" ], "source_surface": { "node_kind": "resource", "node_id": "readiness-a2ebb552da0020dafded21f72ec21bd8489c921b3f9fe1dc7114df92bc3852f3" }, "locators": [ { "artifact_digest": "sha256:a030c2ef3e8337370f38fbeb5031bc903a49dd0561ac3d99ce72bde8cabb4bbe", "start_byte": 15172, "end_byte": 15970, "value_digest": "sha256:08e0a79ae63f5d2b60af4aa0382b32f68c933506a1401e464947dc201d0944f4" }, { "artifact_digest": "sha256:a030c2ef3e8337370f38fbeb5031bc903a49dd0561ac3d99ce72bde8cabb4bbe", "start_byte": 0, "end_byte": 799, "value_digest": "sha256:07977402a6d4756aef11853e77f6d271ff6b60daec27208fe4cde9226d222b2e" } ] } ], "note": "Documentation explicitly provides a canonical path to get started with MongoDB Atlas by registering a new account using email, GitHub, or Google credentials." }, { "signal_code": "captcha_compatible_access", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent obtain access without an unsupported CAPTCHA boundary?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:17.572Z", "tested_surfaces": [ { "node_kind": "endpoint", "node_id": "registration" }, { "node_kind": "resource", "node_id": "account-signup" }, { "node_kind": "resource", "node_id": "readiness-a2ebb552da0020dafded21f72ec21bd8489c921b3f9fe1dc7114df92bc3852f3" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The retained evidence across evaluated targets does not explicitly declare whether CAPTCHA challenges are required or provide a verified-agent alternative." }, { "signal_code": "delegated_identity_access", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent obtain scoped, revocable authority for this service?", "finding": "Machine credentials exist but require manual copying, broad authority, or weak lifecycle support.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:19.098Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "authentication" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:7ad89a9ad4221534bac6c247e3a9a11bc3e9ab36e352e52078d742772c871239", "capture_rung": "http" } ], "artifact_digests": [ "sha256:05bac7b2d6ef3b4b99a567b070960d2dd0d2db55c145dea4ed77fd78399ab2c1", "sha256:14e4059d786e6e4ace5c71fb88f98259f6ab7eb3414fcedf5d6a64f25bb6fcbe", "sha256:278f7133a4b9d5a796718d842d2f686422af8a6a1727c356ce85ce88a9a7b9b8", "sha256:97191f3ae5c81e8aaf2daf85cb53a2935471ae0699043d47af9e2d160e3227b5" ], "source_surface": { "node_kind": "resource", "node_id": "authentication" }, "locators": [ { "artifact_digest": "sha256:97191f3ae5c81e8aaf2daf85cb53a2935471ae0699043d47af9e2d160e3227b5", "start_byte": 17268, "end_byte": 18067, "value_digest": "sha256:b801440490b5c13813008d4008628dcdcb6418197388fa91f03efd4dcf7280b3" }, { "artifact_digest": "sha256:97191f3ae5c81e8aaf2daf85cb53a2935471ae0699043d47af9e2d160e3227b5", "start_byte": 19664, "end_byte": 20464, "value_digest": "sha256:935ea36f8e7a6cd074fbda3c0449704efd3885e241b55938e7f5f379cddee9bb" } ] } ], "note": "Service accounts provide OAuth 2.0 client credentials access tokens with roles and token revocation, but require initial manual setup in the organization/project.", "remediation": { "signal_code": "delegated_identity_access", "code": "improve.sign_up.delegated_identity_access", "instruction": "Provide scoped delegated authorization with consent, revocation, and deterministic resumption." } }, { "signal_code": "phone_verification_compatible", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can required phone verification be completed through a supported boundary?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:17.572Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "account-signup" }, { "node_kind": "resource", "node_id": "readiness-a2ebb552da0020dafded21f72ec21bd8489c921b3f9fe1dc7114df92bc3852f3" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The retained evidence does not contain explicit declarations or observations regarding phone verification requirements." } ], "blockers": [], "remediations": [ { "signal_code": "delegated_identity_access", "code": "improve.sign_up.delegated_identity_access", "instruction": "Provide scoped delegated authorization with consent, revocation, and deterministic resumption." } ] }, { "stage": "pay", "stage_label": "Pay", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "commitment_disclosure", "condition": "Is the exact commercial commitment disclosed before authorization?", "finding": "The public commitment omits a material component until later in the flow.", "context": "The pricing schedule discloses base cluster rates, billing frequencies (hourly with monthly invoices, or monthly rates), and USD pricing for MongoDB Atlas. However, actual pricing depends on deployment requirements, configurations, and location, leaving certain cost components contextual until configuration." }, "secondary_context": [ { "signal_code": "checkout_operability", "condition": "Can an agent construct checkout, hand off approval safely, and resume?", "finding": "Current admissible evidence does not resolve this finding.", "context": "Retained evidence describes billing configuration and supported payment methods, but does not document an end-to-end API or web flow for deterministic checkout construction, approval handoff, and resumption." }, { "signal_code": "payment_authorization", "condition": "Can payment be authorized within scoped agent or explicit human authority?", "finding": "Current admissible evidence does not resolve this finding.", "context": "Documentation lists accepted payment methods in the Atlas console (such as Card, PayPal, and bank accounts), but does not detail a rail for scoped agent delegation or explicit human-confirmed payment authorization with receipt clauses." }, { "signal_code": "self_service_purchase", "condition": "Is a direct self-service path to paid access documented?", "finding": "Self-service is tier- or condition-limited, or a bounded vendor review exposes status.", "context": "MongoDB Atlas supports self-service payment via accepted payment methods in the console, but purchasing a subscription or reviewing alternative billing methods is conditioned on contacting MongoDB Sales or buying through a marketplace." } ], "signals": [ { "signal_code": "checkout_operability", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can an agent construct checkout, hand off approval safely, and resume?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:16.894Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "billing-checkout" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "Retained evidence describes billing configuration and supported payment methods, but does not document an end-to-end API or web flow for deterministic checkout construction, approval handoff, and resumption." }, { "signal_code": "commitment_disclosure", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Is the exact commercial commitment disclosed before authorization?", "finding": "The public commitment omits a material component until later in the flow.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:41.806Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "pricing" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:83fe7489dae738ad268749764059e0b620a7f5777e2d95226c4673f18c364cda", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:607d445845eba241ff0a5deeac5fbf4396cf0ca5fcc44738edc4d5bbb3ed5790", "sha256:b7d45a9ea3c6a1e83d5bed45586d2c41ea886dd081387a462c31176856635034", "sha256:e860398040f36ab04b1a8f2d5f84f7fe3f0f2d8a6411cc685b6f8cc482ef2db1" ], "source_surface": { "node_kind": "resource", "node_id": "pricing" }, "locators": [ { "artifact_digest": "sha256:607d445845eba241ff0a5deeac5fbf4396cf0ca5fcc44738edc4d5bbb3ed5790", "start_byte": 18195, "end_byte": 18994, "value_digest": "sha256:39dd2c773c5653624484811dc15e5df93d08dd4478db1c524475a016662a4207" }, { "artifact_digest": "sha256:607d445845eba241ff0a5deeac5fbf4396cf0ca5fcc44738edc4d5bbb3ed5790", "start_byte": 18995, "end_byte": 19805, "value_digest": "sha256:fdc693e0c3d5e1ce83a98df1d274efadcdf05d1b36fa6f51adf71503f18d6593" } ] } ], "note": "The pricing schedule discloses base cluster rates, billing frequencies (hourly with monthly invoices, or monthly rates), and USD pricing for MongoDB Atlas. However, actual pricing depends on deployment requirements, configurations, and location, leaving certain cost components contextual until configuration.", "remediation": { "signal_code": "commitment_disclosure", "code": "improve.pay.commitment_disclosure", "instruction": "Disclose the complete commitment before payment authorization." } }, { "signal_code": "payment_authorization", "evaluation_role": "barrier", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Can payment be authorized within scoped agent or explicit human authority?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:16.894Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "billing-checkout" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "Documentation lists accepted payment methods in the Atlas console (such as Card, PayPal, and bank accounts), but does not detail a rail for scoped agent delegation or explicit human-confirmed payment authorization with receipt clauses." }, { "signal_code": "self_service_purchase", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Is a direct self-service path to paid access documented?", "finding": "Self-service is tier- or condition-limited, or a bounded vendor review exposes status.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:16.894Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "billing-checkout" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:ed0d1e60e89cc3ce1d8edb6d27834a5b6abb545ae6ed5157b8221ad6bbc3dc96", "capture_rung": "http" } ], "artifact_digests": [ "sha256:134b3397071686c47245dbf4de9dae92b22e19eb9db4df0e6251cd264a819aff", "sha256:99f33a79cfd497558669e66f5743ab3bc3e2dbfe0ec0da04ec8fe0ec6c567da7", "sha256:d95446327b3e1ee3904f088ed0d546bfa326411ba8f0888f5f75286fcc217628", "sha256:efe634f8d577847ab6f6c47f3357a920d3e7846a58802d7dde85ceeaa934e7b8" ], "source_surface": { "node_kind": "resource", "node_id": "billing-checkout" }, "locators": [ { "artifact_digest": "sha256:99f33a79cfd497558669e66f5743ab3bc3e2dbfe0ec0da04ec8fe0ec6c567da7", "start_byte": 42238, "end_byte": 43032, "value_digest": "sha256:816a47452f2e3e64688e80ffc433eafed563af063bf01e872b9ca86040383be2" }, { "artifact_digest": "sha256:99f33a79cfd497558669e66f5743ab3bc3e2dbfe0ec0da04ec8fe0ec6c567da7", "start_byte": 43033, "end_byte": 43825, "value_digest": "sha256:eb4e154d778bfb6803d616914ffb19a662833a84b9f3ecd1a3843460b59b36d3" } ] } ], "note": "MongoDB Atlas supports self-service payment via accepted payment methods in the console, but purchasing a subscription or reviewing alternative billing methods is conditioned on contacting MongoDB Sales or buying through a marketplace.", "remediation": { "signal_code": "self_service_purchase", "code": "improve.pay.self_service_purchase", "instruction": "Document a direct purchase path or bounded vendor review with machine-readable status." } } ], "blockers": [], "remediations": [ { "signal_code": "commitment_disclosure", "code": "improve.pay.commitment_disclosure", "instruction": "Disclose the complete commitment before payment authorization." }, { "signal_code": "self_service_purchase", "code": "improve.pay.self_service_purchase", "instruction": "Document a direct purchase path or bounded vendor review with machine-readable status." } ] }, { "stage": "provision", "stage_label": "Provision", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "provisioning_completion", "condition": "Can an agent determine successful provisioning completion and reconcile asynchronous failure?", "finding": "Completion is observable, but an asynchronous path omits a material terminal, bound, or reconciliation property.", "context": "Cluster creation returns a stateName field indicating control plane activity (IDLE, CREATING, UPDATING, DELETING). State CREATING indicates a cluster being provisioned for the first time until ready. Admitted evidence does not establish asynchronous failure reconciliation or time bounds." }, "secondary_context": [ { "signal_code": "provisioning_operability", "condition": "Can provisioning be initiated within supported agent authority?", "finding": "Provisioning is machine-triggerable or follows deterministically from an allowed handoff.", "context": "Cluster provisioning can be initiated via HTTP POST request to create one cluster in a project, returning a 201 Created response." }, { "signal_code": "access_material_delivery", "condition": "Can usable access material be delivered securely to an authorized agent?", "finding": "Credentials, grants, or configuration are delivered through a documented agent-usable flow.", "context": "Atlas Administration API authentication supports OAuth 2.0 Client Credentials flow using service accounts. A service account provides a client ID and rotatable secret to generate 1-hour access tokens for API requests." } ], "signals": [ { "signal_code": "access_material_delivery", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can usable access material be delivered securely to an authorized agent?", "finding": "Credentials, grants, or configuration are delivered through a documented agent-usable flow.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:19.098Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "authentication" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:7ad89a9ad4221534bac6c247e3a9a11bc3e9ab36e352e52078d742772c871239", "capture_rung": "http" } ], "artifact_digests": [ "sha256:05bac7b2d6ef3b4b99a567b070960d2dd0d2db55c145dea4ed77fd78399ab2c1", "sha256:14e4059d786e6e4ace5c71fb88f98259f6ab7eb3414fcedf5d6a64f25bb6fcbe", "sha256:36d97c0649a7d2de941f16125bade1381f6160c5615eaddf9161f2d4eee25c74", "sha256:97191f3ae5c81e8aaf2daf85cb53a2935471ae0699043d47af9e2d160e3227b5" ], "source_surface": { "node_kind": "resource", "node_id": "authentication" }, "locators": [ { "artifact_digest": "sha256:97191f3ae5c81e8aaf2daf85cb53a2935471ae0699043d47af9e2d160e3227b5", "start_byte": 18865, "end_byte": 19663, "value_digest": "sha256:30de18131c2a7fb11662e5601c8a3f621d4aae6f30faa237a0aa76440cb7516f" }, { "artifact_digest": "sha256:97191f3ae5c81e8aaf2daf85cb53a2935471ae0699043d47af9e2d160e3227b5", "start_byte": 20465, "end_byte": 21264, "value_digest": "sha256:7734602d63eec36bb9194481326a1dda3a2d47025f64cd052b02e744ec27f8ab" } ] } ], "note": "Atlas Administration API authentication supports OAuth 2.0 Client Credentials flow using service accounts. A service account provides a client ID and rotatable secret to generate 1-hour access tokens for API requests." }, { "signal_code": "provisioning_completion", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent determine successful provisioning completion and reconcile asynchronous failure?", "finding": "Completion is observable, but an asynchronous path omits a material terminal, bound, or reconciliation property.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:53:00.993Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "cluster-create" }, { "node_kind": "resource", "node_id": "cluster-operations" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:92b4ac7290f141d3c1eeb84eb6d5bba72fa4f9f5a2ddf5e4ad8945a251165e90", "capture_rung": "http" } ], "artifact_digests": [ "sha256:082cc220f61cb4dc0cfb618d01b19a72ffc153016fd64f2878e5d1656788ec06", "sha256:0dcf5c212c4d9ee8b4d50ee2c0e16be8166b0f94240cc027e28d158bfc6f2ddc", "sha256:4823400643b64059da75841d31192775abbba7f465b411c7db2d6324ba1efebd", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945" ], "source_surface": { "node_kind": "resource", "node_id": "cluster-create" }, "locators": [ { "artifact_digest": "sha256:4823400643b64059da75841d31192775abbba7f465b411c7db2d6324ba1efebd", "start_byte": 782843, "end_byte": 783643, "value_digest": "sha256:fc0b507c7208e55fad332ccaa6728911aeb7b6c17824cf56a7064db41c04737b" } ] } ], "note": "Cluster creation returns a stateName field indicating control plane activity (IDLE, CREATING, UPDATING, DELETING). State CREATING indicates a cluster being provisioned for the first time until ready. Admitted evidence does not establish asynchronous failure reconciliation or time bounds.", "remediation": { "signal_code": "provisioning_completion", "code": "improve.provision.provisioning_completion", "instruction": "Expose bounded machine-readable terminal status and reconciliation semantics." } }, { "signal_code": "provisioning_operability", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can provisioning be initiated within supported agent authority?", "finding": "Provisioning is machine-triggerable or follows deterministically from an allowed handoff.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:53:00.993Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "authentication" }, { "node_kind": "resource", "node_id": "cluster-create" }, { "node_kind": "resource", "node_id": "cluster-operations" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:92b4ac7290f141d3c1eeb84eb6d5bba72fa4f9f5a2ddf5e4ad8945a251165e90", "capture_rung": "http" } ], "artifact_digests": [ "sha256:082cc220f61cb4dc0cfb618d01b19a72ffc153016fd64f2878e5d1656788ec06", "sha256:4823400643b64059da75841d31192775abbba7f465b411c7db2d6324ba1efebd", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:d27904bc2eb067e6cee57942ed86b3edc3a4b317aee3af8b45b5f599ba0fb9eb" ], "source_surface": { "node_kind": "resource", "node_id": "cluster-create" }, "locators": [ { "artifact_digest": "sha256:4823400643b64059da75841d31192775abbba7f465b411c7db2d6324ba1efebd", "start_byte": 373688, "end_byte": 374486, "value_digest": "sha256:d041f38d52da3c8133175a545693b4ba4d65aae91dd85b6e9ba5a0ad56de002a" } ] } ], "note": "Cluster provisioning can be initiated via HTTP POST request to create one cluster in a project, returning a 201 Created response." } ], "blockers": [], "remediations": [ { "signal_code": "provisioning_completion", "code": "improve.provision.provisioning_completion", "instruction": "Expose bounded machine-readable terminal status and reconciliation semantics." } ] }, { "stage": "operate", "stage_label": "Operate", "outcome": "constrained", "public_state": "limited", "state_label": "Limited", "primary_finding": { "signal_code": "failure_contract", "condition": "Can an agent handle applicable failure modes safely?", "finding": "Safe failure handling is documented only partially.", "context": "Atlas Administration API documents error response codes (such as 400, 409, 410, 429 RATE_LIMITED, and 500) and rate limit parameters, but the retained text does not establish explicit idempotency, cancellation, or reconciliation semantics." }, "secondary_context": [ { "signal_code": "agent_protocol_interface", "condition": "Is an agent-native protocol interface verified against the essential targets?", "finding": "Current admissible evidence does not resolve this finding.", "context": "The retained excerpts describe REST or RPC interfaces, SDKs and CLIs for MongoDB Atlas Administration API; they contain no first-party statement that an agent-native protocol interface is absent, and several navigation excerpts mention MCP resources without establishing coverage of the assessed targets." }, { "signal_code": "target_interface_access", "condition": "Can an agent perform every essential assessment target through a usable interface?", "finding": "Every essential target has a stable documented agent-usable interface alternative.", "context": "The MongoDB Atlas Administration API provides programmatic RESTful HTTP interfaces covering errors, administration API references, cluster management operations, and rate limits." }, { "signal_code": "operation_authentication", "condition": "Can an agent authenticate service operations with scoped authority?", "finding": "Request-time authentication is documented and usable under scoped agent authority.", "context": "Requests to the Atlas Administration API are authenticated using scoped service account access tokens (OAuth 2.0 Client Credentials flow) or legacy API keys with HTTP Digest Authentication, with permissions bounded by assigned Atlas roles." }, { "signal_code": "operation_contract", "condition": "Are essential operation inputs, outputs, and effects stable and decidable?", "finding": "Essential operations have stable readable request, response, and effect semantics.", "context": "The essential operation targets detail HTTP methods, JSON request and response entity formats, explicit error JSON schemas, rate limit headers and error parameters, and OpenAPI endpoint specifications for cluster and service management." }, { "signal_code": "credential_lifecycle", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Credential lifecycle and recovery are documented and executable within delegated authority.", "context": "The documentation specifies credential lifecycle management for service accounts, including client ID and rotatable secret generation, token creation with 1-hour expiration, token generation near expiry, and token revocation when access is no longer needed." } ], "signals": [ { "signal_code": "agent_protocol_interface", "evaluation_role": "informational", "required": false, "value": "unknown", "value_label": "Unknown", "outcome": "unknown", "public_state": "unknown", "condition": "Is an agent-native protocol interface verified against the essential targets?", "finding": "Current admissible evidence does not resolve this finding.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:57.698Z", "tested_surfaces": [ { "node_kind": "interface", "node_id": "cluster-api" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [], "note": "The retained excerpts describe REST or RPC interfaces, SDKs and CLIs for MongoDB Atlas Administration API; they contain no first-party statement that an agent-native protocol interface is absent, and several navigation excerpts mention MCP resources without establishing coverage of the assessed targets." }, { "signal_code": "credential_lifecycle", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent manage credential expiry, rotation, revocation, compromise, and recovery?", "finding": "Credential lifecycle and recovery are documented and executable within delegated authority.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:19.098Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "authentication" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:7ad89a9ad4221534bac6c247e3a9a11bc3e9ab36e352e52078d742772c871239", "capture_rung": "http" } ], "artifact_digests": [ "sha256:05bac7b2d6ef3b4b99a567b070960d2dd0d2db55c145dea4ed77fd78399ab2c1", "sha256:14e4059d786e6e4ace5c71fb88f98259f6ab7eb3414fcedf5d6a64f25bb6fcbe", "sha256:4b8f4b5d4809afe8525a61cf1226796d720f6f163f1bd5564a2d572761d00521", "sha256:97191f3ae5c81e8aaf2daf85cb53a2935471ae0699043d47af9e2d160e3227b5" ], "source_surface": { "node_kind": "resource", "node_id": "authentication" }, "locators": [ { "artifact_digest": "sha256:97191f3ae5c81e8aaf2daf85cb53a2935471ae0699043d47af9e2d160e3227b5", "start_byte": 18865, "end_byte": 19663, "value_digest": "sha256:30de18131c2a7fb11662e5601c8a3f621d4aae6f30faa237a0aa76440cb7516f" }, { "artifact_digest": "sha256:97191f3ae5c81e8aaf2daf85cb53a2935471ae0699043d47af9e2d160e3227b5", "start_byte": 19664, "end_byte": 20464, "value_digest": "sha256:935ea36f8e7a6cd074fbda3c0449704efd3885e241b55938e7f5f379cddee9bb" } ] } ], "note": "The documentation specifies credential lifecycle management for service accounts, including client ID and rotatable secret generation, token creation with 1-hour expiration, token generation near expiry, and token revocation when access is no longer needed." }, { "signal_code": "failure_contract", "evaluation_role": "graded", "required": true, "value": "partial", "value_label": "Limited", "outcome": "constrained", "public_state": "limited", "condition": "Can an agent handle applicable failure modes safely?", "finding": "Safe failure handling is documented only partially.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:50:57.698Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "api-errors" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:e9f2775014bd6bbb1fe8456ebdbfca12c179dcf79ea40adce307b4abba1a22bf", "capture_rung": "http" } ], "artifact_digests": [ "sha256:6e446807dbc25f764013b4b2a5a5356673aad0d49891e8a2a7ad0fc90874bf85", "sha256:99d45673f8f7bed48e90247e300e3dd7496f46b38109a47f317e31e07630c6fe", "sha256:c851c9cd61f2b7d28f940be6dd16f7cc3bf8088cbef1aeb46c62f359a51b2fa9", "sha256:fa71ec21219eb0607fb3a4e4bd808f5d1c6b1d34e6f9f16278f0ce8656d2a20a" ], "source_surface": { "node_kind": "resource", "node_id": "api-errors" }, "locators": [ { "artifact_digest": "sha256:fa71ec21219eb0607fb3a4e4bd808f5d1c6b1d34e6f9f16278f0ce8656d2a20a", "start_byte": 87195, "end_byte": 87992, "value_digest": "sha256:51600246a5ec1d3fc08094b2d3e8fb756f1c183d3808383a5aacb00df829f872" } ] } ], "note": "Atlas Administration API documents error response codes (such as 400, 409, 410, 429 RATE_LIMITED, and 500) and rate limit parameters, but the retained text does not establish explicit idempotency, cancellation, or reconciliation semantics.", "remediation": { "signal_code": "failure_contract", "code": "improve.operate.failure_contract", "instruction": "Document applicable structured errors, retry, cancellation, and reconciliation semantics." } }, { "signal_code": "operation_authentication", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent authenticate service operations with scoped authority?", "finding": "Request-time authentication is documented and usable under scoped agent authority.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:19.098Z", "tested_surfaces": [ { "node_kind": "resource", "node_id": "authentication" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:7ad89a9ad4221534bac6c247e3a9a11bc3e9ab36e352e52078d742772c871239", "capture_rung": "http" } ], "artifact_digests": [ "sha256:05bac7b2d6ef3b4b99a567b070960d2dd0d2db55c145dea4ed77fd78399ab2c1", "sha256:14e4059d786e6e4ace5c71fb88f98259f6ab7eb3414fcedf5d6a64f25bb6fcbe", "sha256:54f4331bbac0a5c1cb7d962639766fd51fd2e057f5c2f8740620d7c113ae8590", "sha256:97191f3ae5c81e8aaf2daf85cb53a2935471ae0699043d47af9e2d160e3227b5" ], "source_surface": { "node_kind": "resource", "node_id": "authentication" }, "locators": [ { "artifact_digest": "sha256:97191f3ae5c81e8aaf2daf85cb53a2935471ae0699043d47af9e2d160e3227b5", "start_byte": 17268, "end_byte": 18067, "value_digest": "sha256:b801440490b5c13813008d4008628dcdcb6418197388fa91f03efd4dcf7280b3" }, { "artifact_digest": "sha256:97191f3ae5c81e8aaf2daf85cb53a2935471ae0699043d47af9e2d160e3227b5", "start_byte": 18865, "end_byte": 19663, "value_digest": "sha256:30de18131c2a7fb11662e5601c8a3f621d4aae6f30faa237a0aa76440cb7516f" } ] } ], "note": "Requests to the Atlas Administration API are authenticated using scoped service account access tokens (OAuth 2.0 Client Credentials flow) or legacy API keys with HTTP Digest Authentication, with permissions bounded by assigned Atlas roles." }, { "signal_code": "operation_contract", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Are essential operation inputs, outputs, and effects stable and decidable?", "finding": "Essential operations have stable readable request, response, and effect semantics.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:55.145Z", "tested_surfaces": [ { "node_kind": "interface", "node_id": "cluster-api" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:5dcfbdf739439ddcc96d1eb9e2abe0e0bf7ce2276ec2797eab24dcb195c8242e", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0b7439ea777d42af81a993a35565235bf49e47c01ed02e634b2f85a62e0a684b", "sha256:65af6c722bb0da30f0fcd0aafb7b4a680753c4dd0ae396b3814f5afbe99622a0", "sha256:c89eecc1116917cdb3302852d5c270800bf477746b51fb62a0e431e65320f4d0", "sha256:f117e5b3b918b3da2dd2f2530b8436530120088019541f00a37dfdf808bf2038" ], "source_surface": { "node_kind": "resource", "node_id": "api-reference" }, "locators": [ { "artifact_digest": "sha256:c89eecc1116917cdb3302852d5c270800bf477746b51fb62a0e431e65320f4d0", "start_byte": 21152, "end_byte": 21933, "value_digest": "sha256:71d461a0c843b991c031609af7a4c9232a5eff8af4005089daed36ff9f135ef7" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:57e8f30d6662481cb641d28c718b7352c20be304a4de4f9b332b3c770db97c16", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4326eede764fdfba16ed3164e15bc42d8753b04230b640ec39d50b34792f7b0b", "sha256:621c92d89cfb3616f582fa60a53d38da8906654a1ad83f3b74f77709b7759ea9", "sha256:eacce67f3b8330a89a7dad8a57abfd91e3f4a34c5faaea500871d68c1a3bc01b", "sha256:fc050cc8541f2449d821b4a6d9eeb3e0ffc24639f167d35ca7857b59a749d001" ], "source_surface": { "node_kind": "resource", "node_id": "rate-limits" }, "locators": [ { "artifact_digest": "sha256:621c92d89cfb3616f582fa60a53d38da8906654a1ad83f3b74f77709b7759ea9", "start_byte": 18961, "end_byte": 19759, "value_digest": "sha256:2f43376c24319c63b8bf76ba511a03353d739cefd9c96ad481f23be37454c961" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:f4ccf7d43d4b902894f9144e9e50c32389f30e72615ceebf68e42d7fab173e38", "capture_rung": "http" } ], "artifact_digests": [ "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:56713f2f854a042ea46e520079a014c29aef9a84f3dc37af617a0b4aa95d2644", "sha256:6fc34741961112a9f3962cf7e217e8146f012ef392bf0157182d128c181f33b4", "sha256:9eea971d6bd0075b20aa813deb5a6036025b55ff3d1408ac04d072a97c5bc36b" ], "source_surface": { "node_kind": "resource", "node_id": "cluster-operations" }, "locators": [ { "artifact_digest": "sha256:6fc34741961112a9f3962cf7e217e8146f012ef392bf0157182d128c181f33b4", "start_byte": 103780, "end_byte": 104562, "value_digest": "sha256:899b5174748121d37454664b73b2cc0113fdc56016daed86257a868d59a47059" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:e9f2775014bd6bbb1fe8456ebdbfca12c179dcf79ea40adce307b4abba1a22bf", "capture_rung": "http" } ], "artifact_digests": [ "sha256:321e2a4d98702d4199f0e4a7c790a6f2d03662dc1a5c043fdad827b804a58ee6", "sha256:99d45673f8f7bed48e90247e300e3dd7496f46b38109a47f317e31e07630c6fe", "sha256:c851c9cd61f2b7d28f940be6dd16f7cc3bf8088cbef1aeb46c62f359a51b2fa9", "sha256:fa71ec21219eb0607fb3a4e4bd808f5d1c6b1d34e6f9f16278f0ce8656d2a20a" ], "source_surface": { "node_kind": "resource", "node_id": "api-errors" }, "locators": [ { "artifact_digest": "sha256:fa71ec21219eb0607fb3a4e4bd808f5d1c6b1d34e6f9f16278f0ce8656d2a20a", "start_byte": 39886, "end_byte": 40682, "value_digest": "sha256:479defbdd179692cf7a0d7ee334416ab1be264830d5c85e3f0346d7e4b1331c1" } ] } ], "note": "The essential operation targets detail HTTP methods, JSON request and response entity formats, explicit error JSON schemas, rate limit headers and error parameters, and OpenAPI endpoint specifications for cluster and service management." }, { "signal_code": "target_interface_access", "evaluation_role": "graded", "required": true, "value": "yes", "value_label": "Ready", "outcome": "pass", "public_state": "ready", "condition": "Can an agent perform every essential assessment target through a usable interface?", "finding": "Every essential target has a stable documented agent-usable interface alternative.", "evidence_status": "supported", "freshness": "fresh", "observed_at": "2026-09-06T08:51:55.145Z", "tested_surfaces": [ { "node_kind": "interface", "node_id": "cluster-api" } ], "assessment_method": { "name": "public-semantic-assessment", "version": "2026-09-06", "method_digest": "sha256:02ec902925d3816c86a32a3d15dc2e7af6ce9931c24b9cf264063e596952d1c4" }, "determination_bases": [ { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:e9f2775014bd6bbb1fe8456ebdbfca12c179dcf79ea40adce307b4abba1a22bf", "capture_rung": "http" } ], "artifact_digests": [ "sha256:934dbdd11618fb5f766bd612ada0fb2fb4ad2f3ba3ff6216cbf3b8617be07333", "sha256:99d45673f8f7bed48e90247e300e3dd7496f46b38109a47f317e31e07630c6fe", "sha256:c851c9cd61f2b7d28f940be6dd16f7cc3bf8088cbef1aeb46c62f359a51b2fa9", "sha256:fa71ec21219eb0607fb3a4e4bd808f5d1c6b1d34e6f9f16278f0ce8656d2a20a" ], "source_surface": { "node_kind": "resource", "node_id": "api-errors" }, "locators": [ { "artifact_digest": "sha256:fa71ec21219eb0607fb3a4e4bd808f5d1c6b1d34e6f9f16278f0ce8656d2a20a", "start_byte": 0, "end_byte": 789, "value_digest": "sha256:f6e3ff263a3784b18d5c2fdc5f9e53c65225989a5ac96580809b10a554118050" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:f4ccf7d43d4b902894f9144e9e50c32389f30e72615ceebf68e42d7fab173e38", "capture_rung": "http" } ], "artifact_digests": [ "sha256:1ed99b92e1a13e5c8156ab9349c15b1393b125f4fa47316ddbf105d7c4f6ca89", "sha256:4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945", "sha256:56713f2f854a042ea46e520079a014c29aef9a84f3dc37af617a0b4aa95d2644", "sha256:6fc34741961112a9f3962cf7e217e8146f012ef392bf0157182d128c181f33b4" ], "source_surface": { "node_kind": "resource", "node_id": "cluster-operations" }, "locators": [ { "artifact_digest": "sha256:6fc34741961112a9f3962cf7e217e8146f012ef392bf0157182d128c181f33b4", "start_byte": 109334, "end_byte": 110128, "value_digest": "sha256:3e4400d8261c280a48c8f946a6efc196b0f06a4af4b27c98dd3ecb9d6c016940" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:57e8f30d6662481cb641d28c718b7352c20be304a4de4f9b332b3c770db97c16", "capture_rung": "http" } ], "artifact_digests": [ "sha256:621c92d89cfb3616f582fa60a53d38da8906654a1ad83f3b74f77709b7759ea9", "sha256:d26cc20a16f4f82c6d65036e754736b454da1adb39124454ce41f923868b23e8", "sha256:eacce67f3b8330a89a7dad8a57abfd91e3f4a34c5faaea500871d68c1a3bc01b", "sha256:fc050cc8541f2449d821b4a6d9eeb3e0ffc24639f167d35ca7857b59a749d001" ], "source_surface": { "node_kind": "resource", "node_id": "rate-limits" }, "locators": [ { "artifact_digest": "sha256:621c92d89cfb3616f582fa60a53d38da8906654a1ad83f3b74f77709b7759ea9", "start_byte": 16600, "end_byte": 17384, "value_digest": "sha256:fd78f3412b8fa637e4095a5c8a5b3cbb90785085d87c39aab1c7e35ae9f01350" } ] }, { "kind": "explicit_first_party_declaration", "captures": [ { "retained_capture_digest": "sha256:5dcfbdf739439ddcc96d1eb9e2abe0e0bf7ce2276ec2797eab24dcb195c8242e", "capture_rung": "http" } ], "artifact_digests": [ "sha256:0b7439ea777d42af81a993a35565235bf49e47c01ed02e634b2f85a62e0a684b", "sha256:52850e77b465d565ffa968a139ef4cc3a69c7e49676cac38cda5c6826ea733ae", "sha256:c89eecc1116917cdb3302852d5c270800bf477746b51fb62a0e431e65320f4d0", "sha256:f117e5b3b918b3da2dd2f2530b8436530120088019541f00a37dfdf808bf2038" ], "source_surface": { "node_kind": "resource", "node_id": "api-reference" }, "locators": [ { "artifact_digest": "sha256:c89eecc1116917cdb3302852d5c270800bf477746b51fb62a0e431e65320f4d0", "start_byte": 18763, "end_byte": 19558, "value_digest": "sha256:96c5130862989ebe0ea5733df94823d8858437d4af2b333506cd4d6f59d1f592" } ] } ], "note": "The MongoDB Atlas Administration API provides programmatic RESTful HTTP interfaces covering errors, administration API references, cluster management operations, and rate limits." } ], "blockers": [], "remediations": [ { "signal_code": "failure_contract", "code": "improve.operate.failure_contract", "instruction": "Document applicable structured errors, retry, cancellation, and reconciliation semantics." } ] } ], "coverage": { "status": "complete", "required_signals": 14, "covered_signals": 14, "ratio": 1, "barrier_signals": 5, "verified_barrier_signals": 0, "barrier_ratio": 0 }, "last_tested_at": "2026-09-06T08:53:00.993Z", "freshness": "fresh", "provenance": { "freshness": "fresh", "dispute": "none", "coverage_policy_digest": "sha256:fc9e8f046d86fcf19ab2f1bc547219e503cdc11ffa135d020db7285965cd7d1d", "freshness_policy_digest": "sha256:b71bacf415fdbef01024355fb3d080df7a9dca05d2cce9a2a1f691fe8a60f579", "basis_event_ids": [ "sha256:037b6feb3f8e57113bd82a238e721f03efbde221deb925e8cdee0707ae19d368", "sha256:03b246e8d57f8d8579eda78e973f3ef0b1558d3cbb05420e0e143d030afa8f9e", "sha256:0afb2a53f7297523a51601ca5f6acaf64b5133f7acfb7aa35a561a028b3446dc", "sha256:10e104faaeb3b84a9e2ef0b2f090068f347ed9e1e45b1693bd9bc47ca88bcd85", "sha256:13094a6224e0c02667becb7110fe00f13c2ff2fca03436bd66d2a5cb1de7e385", "sha256:17d56c83e2c49423cf1858c4b93dd2bc32662d4889167ae10d520518b50e16b7", "sha256:1d9e93c8914f9781adf2e225560d36328b6e7674f00fb72ce95f8d36ed1d92ff", "sha256:1fbbe29a001a649ab0e37444bcc3248740cc08508ff0d91011c25d1b549c7713", "sha256:2048a683bcd5de6e82983ff3f954eaafd72aeb9d19d17965bd36edc990d96fd0", "sha256:262cc06eeb258b9760e5d5496e4a252623dda93d17c664dcb50cf271385344c7", "sha256:2e51c0dea9d126bba6febb6827d8e9a89b310a146bb7d9121ead44d5188b1bd4", "sha256:50ce927409415353eeba48786c620f920bb765572e1cb22d2a09a0644ea54b11", "sha256:5b9fb00593baaf13dcfd858ce880b71b59515213af150ac10d83ffe9dcde8d6d", "sha256:6dcaca854a9db47515d52c65a53147a672ab30a4d238202efa668a966d34c154", "sha256:78206dff382a2e68f75d8dd1ea19d9f8dfd32e153cc9b0f695608bc5ca50b492", "sha256:7de146f9c36a0fc4f6e5b4da04bfc60fb44d226adaba6f89fb20e7434e013998", "sha256:82fdc54fbb8300813b6f2d82dd005846b78d510629bbbae3dd401676cf0cdf96", "sha256:83b7cd33baf5b78afaf3d24ab9fd4581994b15b9bb579a68d089b0b936631fbd", "sha256:83bf113e41e85b5d64e30f1428a130cee14b12853cf60da23d8b2b7e1c8451a7", "sha256:888533d9278532936f4e9bebcb717c2b6f3a7530025b68ffbe370477fe792879", "sha256:8d326ad372643bf607739823e880964585feeb4929dd71f5d75919bad1b0e8d1", "sha256:8e4905e5f909500b5fce2b584f9ab4687383fa38eebba4510f22fb4b0450b465", "sha256:8fd6b31f77973dcc3e8ae2af8d8a380aeaef5e3affb5612a0daf68267d533af9", "sha256:9d57721fe7775564a646435863ac0da74dab33e994efd4fa5b0c30e6d4183cf8", "sha256:a5a6e22ff7c7aa7375a6eb64277d29b6caf835f707ed94a938b3a765bf3b5d88", "sha256:a7c356cb199c667105fcbd21f43bb72204bc0d16d77d5581c116821b0aced37f", "sha256:b759b1910ddfd75a52d885a6b519119ff138cf239f860fee5c34ff8fae836fe1", "sha256:bdb7724c7848113a540e344e6e91cf8761dd59b5518de981cdfde382bba87a72", "sha256:c1f308338ebdf7a31ebcc0fd59de824c900c95ec266a4310c9e406502f78104c", "sha256:ca5bfa014df6bcbd3d7285eaff364c036d09f46055fd8dd2ef64669c4d48adb3", "sha256:cdfc76f65549dec8bf48b630a3676b59f486073dc3b0002fb682af0eef321c69", "sha256:de9adaba171a58189bddb0722d57c72de7c37eac11f0066246cd0077cc89820f", "sha256:e809468e0927033be2280542dce17ade930cfd8c8d7abef12e618868fac38bb9", "sha256:ea4265ef13993861d8eb02d6393582f964733aab65b3b82ba0f592b2e5e4a2bb" ], "fields": [ { "path": "/signals/0", "supporting_event_ids": [ "sha256:c1f308338ebdf7a31ebcc0fd59de824c900c95ec266a4310c9e406502f78104c" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:56.793Z", "freshness": "fresh" }, { "path": "/signals/1", "supporting_event_ids": [ "sha256:6dcaca854a9db47515d52c65a53147a672ab30a4d238202efa668a966d34c154" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:41.806Z", "freshness": "fresh" }, { "path": "/signals/2", "supporting_event_ids": [ "sha256:0afb2a53f7297523a51601ca5f6acaf64b5133f7acfb7aa35a561a028b3446dc" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:22.249Z", "freshness": "fresh" }, { "path": "/signals/3", "supporting_event_ids": [ "sha256:10e104faaeb3b84a9e2ef0b2f090068f347ed9e1e45b1693bd9bc47ca88bcd85" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:22.249Z", "freshness": "fresh" }, { "path": "/signals/4", "supporting_event_ids": [ "sha256:78206dff382a2e68f75d8dd1ea19d9f8dfd32e153cc9b0f695608bc5ca50b492" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:56.793Z", "freshness": "fresh" }, { "path": "/signals/5", "supporting_event_ids": [ "sha256:8e4905e5f909500b5fce2b584f9ab4687383fa38eebba4510f22fb4b0450b465" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:22.249Z", "freshness": "fresh" }, { "path": "/signals/6", "supporting_event_ids": [ "sha256:1d9e93c8914f9781adf2e225560d36328b6e7674f00fb72ce95f8d36ed1d92ff" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:17.572Z", "freshness": "fresh" }, { "path": "/signals/7", "supporting_event_ids": [ "sha256:83b7cd33baf5b78afaf3d24ab9fd4581994b15b9bb579a68d089b0b936631fbd" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:12.729Z", "freshness": "fresh" }, { "path": "/signals/8", "supporting_event_ids": [ "sha256:037b6feb3f8e57113bd82a238e721f03efbde221deb925e8cdee0707ae19d368", "sha256:888533d9278532936f4e9bebcb717c2b6f3a7530025b68ffbe370477fe792879", "sha256:8fd6b31f77973dcc3e8ae2af8d8a380aeaef5e3affb5612a0daf68267d533af9" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:17.572Z", "freshness": "fresh" }, { "path": "/signals/9", "supporting_event_ids": [ "sha256:5b9fb00593baaf13dcfd858ce880b71b59515213af150ac10d83ffe9dcde8d6d" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:19.098Z", "freshness": "fresh" }, { "path": "/signals/10", "supporting_event_ids": [ "sha256:1fbbe29a001a649ab0e37444bcc3248740cc08508ff0d91011c25d1b549c7713", "sha256:2e51c0dea9d126bba6febb6827d8e9a89b310a146bb7d9121ead44d5188b1bd4" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:17.572Z", "freshness": "fresh" }, { "path": "/signals/11", "supporting_event_ids": [ "sha256:de9adaba171a58189bddb0722d57c72de7c37eac11f0066246cd0077cc89820f" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:16.894Z", "freshness": "fresh" }, { "path": "/signals/12", "supporting_event_ids": [ "sha256:13094a6224e0c02667becb7110fe00f13c2ff2fca03436bd66d2a5cb1de7e385" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:41.806Z", "freshness": "fresh" }, { "path": "/signals/13", "supporting_event_ids": [ "sha256:b759b1910ddfd75a52d885a6b519119ff138cf239f860fee5c34ff8fae836fe1" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:16.894Z", "freshness": "fresh" }, { "path": "/signals/14", "supporting_event_ids": [ "sha256:bdb7724c7848113a540e344e6e91cf8761dd59b5518de981cdfde382bba87a72" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:16.894Z", "freshness": "fresh" }, { "path": "/signals/15", "supporting_event_ids": [ "sha256:ea4265ef13993861d8eb02d6393582f964733aab65b3b82ba0f592b2e5e4a2bb" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:19.098Z", "freshness": "fresh" }, { "path": "/signals/16", "supporting_event_ids": [ "sha256:7de146f9c36a0fc4f6e5b4da04bfc60fb44d226adaba6f89fb20e7434e013998" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:53:00.993Z", "freshness": "fresh" }, { "path": "/signals/17", "supporting_event_ids": [ "sha256:ca5bfa014df6bcbd3d7285eaff364c036d09f46055fd8dd2ef64669c4d48adb3" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:53:00.993Z", "freshness": "fresh" }, { "path": "/signals/18", "supporting_event_ids": [ "sha256:2048a683bcd5de6e82983ff3f954eaafd72aeb9d19d17965bd36edc990d96fd0", "sha256:262cc06eeb258b9760e5d5496e4a252623dda93d17c664dcb50cf271385344c7" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:57.698Z", "freshness": "fresh" }, { "path": "/signals/19", "supporting_event_ids": [ "sha256:9d57721fe7775564a646435863ac0da74dab33e994efd4fa5b0c30e6d4183cf8" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:19.098Z", "freshness": "fresh" }, { "path": "/signals/20", "supporting_event_ids": [ "sha256:03b246e8d57f8d8579eda78e973f3ef0b1558d3cbb05420e0e143d030afa8f9e" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:50:57.698Z", "freshness": "fresh" }, { "path": "/signals/21", "supporting_event_ids": [ "sha256:17d56c83e2c49423cf1858c4b93dd2bc32662d4889167ae10d520518b50e16b7" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:19.098Z", "freshness": "fresh" }, { "path": "/signals/22", "supporting_event_ids": [ "sha256:50ce927409415353eeba48786c620f920bb765572e1cb22d2a09a0644ea54b11", "sha256:82fdc54fbb8300813b6f2d82dd005846b78d510629bbbae3dd401676cf0cdf96", "sha256:a5a6e22ff7c7aa7375a6eb64277d29b6caf835f707ed94a938b3a765bf3b5d88", "sha256:cdfc76f65549dec8bf48b630a3676b59f486073dc3b0002fb682af0eef321c69" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:55.145Z", "freshness": "fresh" }, { "path": "/signals/23", "supporting_event_ids": [ "sha256:83bf113e41e85b5d64e30f1428a130cee14b12853cf60da23d8b2b7e1c8451a7", "sha256:8d326ad372643bf607739823e880964585feeb4929dd71f5d75919bad1b0e8d1", "sha256:a7c356cb199c667105fcbd21f43bb72204bc0d16d77d5581c116821b0aced37f", "sha256:e809468e0927033be2280542dce17ade930cfd8c8d7abef12e618868fac38bb9" ], "contradicting_event_ids": [], "accepted_proof_kinds": [ "observed" ], "evidence_proof_kinds": [ "observed" ], "latest_observation_at": "2026-09-06T08:51:55.145Z", "freshness": "fresh" } ], "vendor_attestation": { "status": "none" } }, "canonical_url": "https://sourcey.com/log/mongodb/agent-readiness/mongodb-atlas-api/cluster-lifecycle", "projection_digest": "sha256:3b336b8f3380da8cdce18ad49903d9eefde910f21239b1fa6cda0e39929d9f99" } } }