{
  "schemaVersion": "ivision-mcp-access.v1",
  "appId": "calendar",
  "displayName": "Vision Calendar MCP",
  "version": "1.0.1",
  "lifecycle": "preview",
  "authority": "calendar_http_contract_only",
  "transport": {
    "status": "capability-inventory-only",
    "endpoint": null
  },
  "authentication": {
    "credentialType": "vision-service-credential.v1",
    "audienceProfile": "Vision Calendar App profile",
    "appEntitlement": "calendar",
    "workspacePattern": "^CWS-[A-Z0-9]{12}$",
    "requiredScope": "Operation-specific Calendar scope from the authoritative OpenAPI x-required-scope; write operations also require an Idempotency-Key"
  },
  "capabilities": [
    "list_calendars",
    "create_calendar",
    "list_events",
    "get_event",
    "create_event",
    "update_event",
    "cancel_event",
    "respond_to_invitation",
    "find_available_slots",
    "create_request_call_hold",
    "confirm_request_call",
    "release_request_call_hold",
    "cancel_request_call_event",
    "list_provider_connections"
  ],
  "prohibited": [
    "bypass_actor_binding",
    "bypass_workspace_scope",
    "bypass_operation_scope",
    "replay_idempotency_key_with_different_body",
    "claim_external_notification_delivery",
    "connect_google_account",
    "connect_microsoft_account",
    "reveal_provider_tokens",
    "issue_public_rsvp_link",
    "run_sql"
  ],
  "notes": "This is an authoritative capability inventory derived from Calendar's HTTP authority, not a reachable MCP transport. Any future MCP adapter must call the Calendar API without weakening actor binding, app entitlement, workspace isolation, operation scopes, record-version concurrency, or idempotency. Provider connection and external notification delivery remain unavailable."
}