// LEGAL · AGENT ACCESS SPEC

Agent Access

Spec v1.4 MCP 2024-11-05 OpenAI plugin v1.2

Overview

This document is the technical contract between BRIDGE and AI agents. It supplements the Agent Policy (governance) with the implementation details needed to wire an agent into the protocol.

Agents access BRIDGE through one of: (a) the MCP server, (b) OpenAI plugin, (c) Microsoft Copilot plugin, (d) Google Gemini extension, (e) direct REST with the agent header set.

MCP Server

The canonical path. Install @bridge/mcp-server and point your MCP-capable client (Claude Desktop, Cursor, Continue, Windsurf) at it.

// CONFIG

"bridge": { "command": "npx", "args": ["-y", "@bridge/mcp-server"], "env": { "BRIDGE_API_KEY": "sk_live_..." } }

OpenAI Plugin

Manifest at /static/.well-known/ai-plugin.json. OpenAPI spec at /static/.well-known/openapi.json. Installable in ChatGPT Custom GPTs and the OpenAI Agents SDK.

Copilot Plugin

Manifest at /static/.well-known/copilot-plugin.json. Compatible with Microsoft 365 Copilot and Copilot Studio. Requires admin approval in your tenant.

Gemini Extension

Manifest at /static/.well-known/gemini-extension.json. Works in Gemini Apps and AI Studio. Currently in beta — interface stable, documentation expanding.

Required Headers

HEADERREQUIREDFORMAT
AuthorizationAlwaysBearer sk_live_...
X-BRIDGE-AgentFor agent callsname/version; id=ag_...
X-BRIDGE-Agent-ConfirmTier 3 calls onlytrue
X-BRIDGE-Trace-IdRecommendedUUID, surfaces in audit log

Exposed Tools

When integrating via MCP / plugin / extension, three tools are exposed:

  • bridge.verify(content, tier?, category?) — verify a content artifact.
  • bridge.ask(query, force_tier?) — verified conversational answer.
  • bridge.consensus.lookup(consensus_id) — retrieve audit detail for a prior result.

Agent-Specific Errors

CODEWHENRESOLUTION
BRIDGE_AGENT_MISSING_HEADERAgent call without X-BRIDGE-AgentAdd header per Section 06
BRIDGE_LOOP_DETECTEDRecursive verify of prior resultReset chain depth or get human review
BRIDGE_AGENT_CONFIRM_REQUIREDTier 3 from agent w/o confirmAdd X-BRIDGE-Agent-Confirm: true
BRIDGE_AGENT_RATE_LIMITEDAbove 1,000 agent verifications/hrEnterprise plan for higher
BRIDGE_AGENT_SUSPENDEDAgent identifier on suspension listContact abuse@getbridge.dev