Systemores AI Agent & MCP Security Auditor

{
  "type": "object",
  "required": [
    "otelTraceJson"
  ],
  "properties": {
    "otelTraceJson": {
      "type": "string",
      "description": "JSON string containing OpenTelemetry trace spans or MCP telemetry log data."
    },
    "latencyThresholdMs": {
      "type": "integer",
      "default": 3000,
      "description": "Latency hotspot threshold in milliseconds."
    },
    "maxCostThresholdUsd": {
      "type": "number",
      "default": 2.5,
      "description": "Maximum allowable cost in USD per session before triggering burn trap alert."
    }
  }
}

{
  "type": "object",
  "required": [
    "systemPrompt",
    "complianceDomain"
  ],
  "properties": {
    "systemPrompt": {
      "type": "string",
      "description": "The underwriting, hiring, or housing agent system prompt to evaluate. Maximum 8,000 characters."
    },
    "complianceDomain": {
      "enum": [
        "employment_eeoc",
        "housing_fair",
        "lending_ecoa",
        "children_coppa"
      ],
      "type": "string",
      "description": "The legal compliance framework to evaluate against (employment, housing, lending, or COPPA child safety)."
    }
  }
}

{
  "type": "object",
  "required": [
    "graphTopologyJson"
  ],
  "properties": {
    "maxDepth": {
      "type": "integer",
      "default": 10,
      "description": "Maximum depth to traverse during cycle and privilege path search."
    },
    "graphTopologyJson": {
      "type": "string",
      "description": "JSON-serialized graph topology object containing 'nodes' (id, privilegeLevel) and 'edges' (source, target)."
    },
    "strictPrivilegeCheck": {
      "type": "boolean",
      "default": true,
      "description": "When true, flags any path from 'public'/'user' nodes to 'admin'/'system' nodes as a breach."
    }
  }
}

{
  "type": "object",
  "required": [
    "toolDefinitionsJson"
  ],
  "properties": {
    "strictMode": {
      "type": "boolean",
      "default": false,
      "description": "When true, applies stricter scoring thresholds — missing optional fields such as parameter descriptions, inputSchema, and MCP tool annotations are penalized. Defaults to false."
    },
    "toolDefinitionsJson": {
      "type": "string",
      "description": "A JSON-serialized array of tool definition objects to audit. Each object should contain at minimum 'name' and 'description' fields. Accepts standard MCP ListToolsResult format."
    }
  }
}

{
  "type": "object",
  "required": [
    "systemPrompt",
    "userMessage"
  ],
  "properties": {
    "userMessage": {
      "type": "string",
      "description": "The prompt or message sent by the user in this interaction turn."
    },
    "systemPrompt": {
      "type": "string",
      "description": "The behavioral blueprint, constraints, or security policies of the agent under audit."
    },
    "agentResponse": {
      "type": "string",
      "description": "The proposed text response or output from the agent."
    },
    "proposedToolCall": {
      "type": "string",
      "description": "Optional tool invocation or function call proposed by the agent (name and arguments)."
    }
  }
}

{
  "type": "object",
  "required": [
    "systemPrompt"
  ],
  "properties": {
    "turns": {
      "type": "integer",
      "default": 10,
      "maximum": 100,
      "minimum": 1,
      "description": "The number of conversational turns to simulate (1–100)."
    },
    "temperature": {
      "type": "number",
      "default": 0.7,
      "maximum": 1.5,
      "minimum": 0,
      "description": "The LLM temperature parameter for the target agent (0.0–1.5). Higher values increase drift probability."
    },
    "systemPrompt": {
      "type": "string",
      "description": "The target agent's system prompt. Maximum 8,000 characters."
    }
  }
}

{
  "type": "object",
  "required": [
    "auditSessionId"
  ],
  "properties": {
    "companyName": {
      "type": "string",
      "default": "Enterprise Client",
      "description": "Legal entity or client name for dossier attribution."
    },
    "auditSessionId": {
      "type": "string",
      "description": "Unique identifier for the completed audit session."
    },
    "targetFrameworks": {
      "type": "string",
      "description": "Comma-separated list of regulatory frameworks to generate formal dossier sections for: 'eu_ai_act', 'nist_ai_rmf', 'eeoc_ecoa', 'soc2_ai'. Defaults to all if omitted."
    }
  }
}

{
  "type": "object",
  "required": [
    "domain"
  ],
  "properties": {
    "domain": {
      "enum": [
        "underwriting",
        "customer_support",
        "healthcare",
        "devops",
        "claims"
      ],
      "type": "string",
      "description": "The operational domain for persona generation."
    },
    "cohortSize": {
      "type": "integer",
      "default": 10,
      "maximum": 100,
      "minimum": 1,
      "description": "Number of synthetic personas to generate (1–100)."
    },
    "includeAdversarial": {
      "type": "boolean",
      "default": true,
      "description": "Includes prompt-injection and noisy data submitter personas in the cohort."
    }
  }
}

{
  "type": "object",
  "required": [
    "faultType",
    "targetToolName"
  ],
  "properties": {
    "faultType": {
      "enum": [
        "rate_limit_429",
        "server_error_500",
        "timeout",
        "unauthorized_401",
        "malformed_json"
      ],
      "type": "string",
      "description": "The specific chaos fault to inject."
    },
    "targetToolName": {
      "type": "string",
      "description": "The target tool name to attach fault injection policy to (or 'all_tools')."
    },
    "failureProbability": {
      "type": "number",
      "default": 0.5,
      "maximum": 1,
      "minimum": 0.01,
      "description": "Probability of fault triggering per invocation (0.01 to 1.0)."
    }
  }
}

{
  "type": "object",
  "required": [
    "promptLength",
    "responseLength",
    "latencyMs"
  ],
  "properties": {
    "latencyMs": {
      "type": "number",
      "minimum": 1,
      "description": "The end-to-end response latency in milliseconds. Must be >= 1."
    },
    "promptLength": {
      "type": "integer",
      "minimum": 0,
      "description": "The character length of the prompt sent to the agent."
    },
    "responseLength": {
      "type": "integer",
      "minimum": 0,
      "description": "The character length of the agent's response."
    }
  }
}

{
  "type": "object",
  "required": [
    "systemPrompt",
    "role"
  ],
  "properties": {
    "role": {
      "enum": [
        "customer_support",
        "financial_underwriter",
        "medical_assistant",
        "general_developer"
      ],
      "type": "string",
      "description": "The intended operational function of the agent."
    },
    "systemPrompt": {
      "type": "string",
      "description": "The behavioral blueprint or internal operational instructions of the target agent. Maximum 8,000 characters."
    },
    "pressIntensity": {
      "enum": [
        "low",
        "medium",
        "high"
      ],
      "type": "string",
      "description": "The intensity level of adversarial testing. 'high' simulates prompt injection batteries."
    }
  }
}

{
  "type": "object",
  "required": [
    "systemPrompt"
  ],
  "properties": {
    "toolContext": {
      "enum": [
        "api_calls",
        "database",
        "filesystem",
        "code_execution"
      ],
      "type": "string",
      "description": "The domain of tool usage being audited. Affects risk weighting."
    },
    "systemPrompt": {
      "type": "string",
      "description": "The agent's system prompt to evaluate for tool use safety. Maximum 8,000 characters."
    }
  }
}