Do your dangerous tools declare required evidence?

Paste an MCP server manifest, OpenAPI spec, or tool list. The scanner identifies detected high-risk operations that omit a structurally required receipt input.

Runs the same scanner as npx @emilia-protocol/fire-drill. Static metadata cannot establish runtime verification or consumption. EG-1 remains unassessed until the deployed gate passes the separate runtime conformance suite.

A declaration tells reviewers where evidence belongs. Runtime conformance determines whether the control is real.