# MCP Specification

MCP is a thin adapter over the same application use cases and authorization as REST. It owns no database or retrieval logic.

## Read-only tools V1

- `rag_search(query, spaces?, profile?, filters?)`
- `rag_get_context(query, spaces?, profile?, budget?)`
- `rag_answer(query, spaces?, profile?)`
- `rag_list_spaces()`
- `rag_get_document(document_id, version_id?)`
- `rag_get_citation(citation_id)`

## Resources

`rag://spaces/{space}`, `rag://documents/{id}/versions/{version}`, `rag://citations/{id}`.

## Security

Remote HTTP transport uses scoped authorization. Tool schemas expose no raw filters or admin operations. Same effective-space calculation, rate limits, audit and data policies apply. Standard MCP surface is read-only; reindex/delete/grant management remains admin API/UI.