Security

Token, audit, and privacy boundaries

Bearer tokens are paid access credentials; logs avoid full tokens and raw sensitive request bodies.

Endpoint

https://geminiupgradeqa.clauxel.com/mcp

Authentication

Production calls require a paid bearer token. The checkout and token-claim endpoints return machine-readable instructions for agents.

Available tools

  • run_gemini_upgrade_eval returns structured JSON with verdict, reason, receipt_id, usage_units, and next_action.
  • compare_prompt_outputs returns structured JSON with verdict, reason, receipt_id, usage_units, and next_action.
  • detect_model_regression returns structured JSON with verdict, reason, receipt_id, usage_units, and next_action.
  • issue_upgrade_receipt returns structured JSON with verdict, reason, receipt_id, usage_units, and next_action.
  • export_eval_audit returns structured JSON with verdict, reason, receipt_id, usage_units, and next_action.

Example call

{"jsonrpc":"2.0","id":"call-1","method":"tools/call","params":{"name":"run_gemini_upgrade_eval","arguments":{"sample":"Twelve production prompts with golden answers, target Gemini 2.5 Pro, risk tags, launch owner, and planned upgrade date."}}}

Setup pages