LA CLÉ
Français Overview

REMOTE MCP SERVER · v2.1

A human-control layer for AI agents.

ChatGPT, Codex, and compatible agents can call focused tools to define limited authority, stage an action for human review, record the real outcome, and revoke the mandate. Private decisions remain linked to the authenticated LA CLÉ profile.

https://la-cle.app/api/mcp

The agent prepares

It structures the mandate or proposed action with explicit, testable fields.

LA CLÉ evaluates

The server checks status, permissions, data scopes, budget, expiry, and approval mode.

The human decides

Activation, sensitive actions, and revocation require an explicit human decision.

Available tools

Narrow tools reduce ambiguous authority and accidental activation.

draft_mandate

Define bounded authority without creating any real permission.

simulate_action

Test AUTHORIZED, CONFIRMATION_REQUIRED, or BLOCKED without acting.

verify_mandate_proof

Verify the public status and limits associated with a CLE-… proof code.

get_profile

Identify the connected LA CLÉ profile through OAuth without asking for credentials.

create_mandate_for_review

Save an inactive mandate for the human owner to review and activate.

list_mandates

Read the connected profile’s mandates and limits without returning secret tokens.

list_pending_actions

View requests that are waiting for a human decision.

stage_assistant_action

Stage an exact Gmail or Google Calendar action without executing it.

list_ready_actions

Return only actions the human owner has already approved.

record_action_result

Record completed or failed only after a real external attempt.

revoke_mandate

Permanently revoke a mandate after explicit confirmation.

Safety rules

  • Private access uses OAuth 2.1, PKCE S256, short-lived access tokens, and rotating refresh tokens.
  • No tool asks for a password, cookie, payment detail, API key, or mandate token in chat.
  • A mandate created by an agent remains inactive until its owner reviews and activates it.
  • Staging an action never executes it. A provider is called only after approval.
  • LA CLÉ governs only agents and services that call its API or tools.