Read-only demo account · Enterprise
The Awesome Company, Inc.
All capabilities enabled · unlimited quotas · 42 active agents · 4 workspaces
Signet · OneMCP
OneMCP
The governed MCP-of-everything. OneMCP projects your entire Agentic Gateway — every action a customer can take — as one Model Context Protocol server, so any MCP client (Claude, ChatGPT, an agent framework) can drive Intramedial under the same identity, mandate, autonomy ceiling, and transparency log that govern the platform. This is a preview with representative rows; the endpoint at mcp.intramedial.com is provisioned during operator go-live, so no live traffic is shown.
What
Understand and operate OneMCP
Why it matters
The governed MCP-of-everything. OneMCP projects your entire Agentic Gateway — every action a customer can take — as one Model Context Protocol server, so any MCP client (Claude, ChatGPT, an agent framework) can drive Intramedial under the same identity, mandate, autonomy ceiling, and transparency log that govern the platform. This is a preview with representative rows; the endpoint at mcp.intramedial.com is provisioned during operator go-live, so no live traffic is shown.
Governed actions
335
Action domains
27
Mandate scopes
81
Endpoint
Provisioning
Working demo snapshot
Schema-realistic example records from the fully enabled demo tenant.
OneMCP adds no authority of its own — it is a pure projection over the governed gateway. Every tools/call forwards the caller’s token, so the gateway re-authenticates the agent, checks the mandate carries the scope the tool declares, enforces the autonomy ceiling, and writes a tops-anchored audit entry. A tool needing sign-off returns confirmation_required instead of acting. Because the tool list regenerates from the live catalogue, it can never claim reach the gateway does not enforce.
Representative governed tools
| Tool | What it does | Mandate scope | Ceiling | Confirm |
|---|---|---|---|---|
| discovery.capabilities.get | Read the full governed action catalogue. | self · authenticated | read | auto-run |
| keys.list | List workspace API keys (active + revoked). | keys.view | read | auto-run |
| audit.workspace.list | List audit-log entries for a workspace. | settings.view_audit_log | read | auto-run |
| exports.list | List compliance exports for a workspace. | exports.view | read | auto-run |
| actionflow.flows.list | List the workspace's ActionFlow flows. | self · authenticated | read | auto-run |
| agents.mandate.issue | Issue an AP2 Verifiable Credential mandate up to spend / volume limits. | workspaces.view | mutation | ask user |
| entpoind.attest.content | Attest a content blob and return a signed receipt. | entpoind.attest.content | mutation | ask user |
| webhooks.create | Register a webhook endpoint; returns the signing secret once. | webhooks.create | mutation | ask user |
| tops.config.set | Set the TOPS transparency-log config for a scope. | settings.view | mutation | ask user |
| account.session.revoke | Revoke an active session (safety floor — cannot be disabled). | self · authenticated | destructive | confirm |
| privacy.dsr.submit | Submit a GDPR / CCPA data-subject request. | self · authenticated | destructive | confirm |
| retention.policy.update | Change workspace retention days within tier limits. | settings.edit_retention | destructive | confirm |
| workspace.create | Create a new workspace in the organization. | workspaces.create | billing | confirm |
| billing.subscription.upgrade | Upgrade to a higher tier; prorates and takes effect immediately. | billing.change_plan | billing | confirm |
| ledger-bundles.snapshot.create | Create a signed LedgerBundles snapshot of the audit state (paid). | self · authenticated | billing | confirm |
Every row is a real action id from the pinned registry with its actual scope, ceiling, and confirmation policy. A tool with no scope (self · authenticated) still runs as the resolved caller under the gateway's identity, confirmation, and audit — it is not ungoverned.
The catalogue spans 27 L5 domains — the whole platform, from account and billing to the attestation primitives, agent mandates, and every product line. One MCP server, one governance model, the full surface.
Catalogue by domain
| Domain | What lives here | Tools |
|---|---|---|
| billing | Subscription, packs, invoices | 30 |
| entpoind | The 8 attestation primitives | 30 |
| account | Sessions, profile, passkeys | 17 |
| workspace | Workspaces, settings, regions | 16 |
| org | Organization, members, roles | 15 |
| audit | Audit log, custody, TOPS feed | 15 |
| agents | Agent identity, SPIFFE, AP2 mandates | 15 |
| webhooks | Outbound webhook endpoints | 12 |
| retention | Retention policy | 12 |
| tops | Transparency-log config | 12 |
| number_one | Number One AI chat | 12 |
| keys | API keys (av_* / entp_*) | 10 |
| alerts | Alert rules | 10 |
| exports | Compliance exports & bundles | 10 |
| referrals | Referral codes & spend | 10 |
| privacy | GDPR / CCPA data-subject requests | 8 |
| discovery | Capabilities, version, schema | 7 |
| actor | Spot actor roster & run ledger | 7 |
| support | Tickets & replies | 6 |
| actionflow | Run flows & templates | 6 |
| ledger-bundles | Signed snapshots & chain verify | 3 |
Per-domain counts match the pinned Action Registry (contracts 0.28.0), the same source the live console projects.
This is a representative preview. The live console at /app/onemcp renders the full governed catalogue from your pinned registry and the real endpoint status, session-scoped to your active workspace.
Product management
Manage OneMCP
Changes persist in this demo browser only and never call customer APIs.
Product configuration
Set ownership, provider behavior, scope and approval posture for this product.
Feature and policy controls
Choose whether each capability observes, blocks, or enforces matching activity.
Intralock admission
Platform Security · All writes
Human approvals
Risk Operations · Mutation and above
Governance lenses
Compliance · Every production run
Shadow-agent detection
Platform Security · Unknown identities
Settlement escrow
Finance · AP2 mandate required
Continue exploring
Open a related area without leaving the demo account.