{
  "openapi": "3.1.0",
  "info": {
    "title": "MCP Whitelist API",
    "version": "2.0.0",
    "description": "Compile SHA-512 pinned mcp-lock.json files, detect hidden npm install scripts before keys leak, and export auditor-ready CC6.1, CC6.6, and CC8.1 proof."
  },
  "servers": [
    {
      "url": "https://mcpwhitelist.com"
    }
  ],
  "paths": {
    "/v1/check": {
      "get": {
        "summary": "Check agent or MCP verdict",
        "responses": {
          "200": {
            "description": "Verdict JSON"
          }
        }
      }
    },
    "/v1/lockfile": {
      "post": {
        "summary": "Compile SHA-512 lockfile",
        "responses": {
          "200": {
            "description": "Lockfile JSON"
          }
        }
      }
    },
    "/mcp": {
      "post": {
        "summary": "MCP JSON-RPC endpoint",
        "responses": {
          "200": {
            "description": "JSON-RPC response"
          }
        }
      }
    },
    "/api/privacy/consent": {
      "get": {
        "summary": "GDPR consent policy",
        "responses": {
          "200": {
            "description": "Policy JSON"
          }
        }
      },
      "post": {
        "summary": "Record GDPR consent choice",
        "responses": {
          "200": {
            "description": "Saved"
          }
        }
      }
    },
    "/api/panopticon/status": {
      "get": {
        "summary": "Panopticon hook status",
        "responses": {
          "200": {
            "description": "Status"
          }
        }
      }
    }
  }
}