Overview

Concrete ways to apply the current authorization primitives to agent tools.

The full demo uses a legal assistant because document scope, external communication, payments, and human approval are easy to understand together. The authorization primitives are not legal-specific.

The examples here separate implemented prototype behavior from natural future applications of the same model.

Trusted metadata

Carry privileged authorization context outside ordinary model-controlled tool arguments and verify it before constructing the private proof statement.

Legal agent

The complete zkMCP demo: matter-scoped documents, external email approval, and private payment limits.