Mahaba · second instance

The pharmacy checks you qualify,
not who you are.

The same capability-gate primitive as the benefits wallet, a different domain. A restricted-medicine checkout verifies that a buyer clears an age limit and has no conflicting condition, without ever reading the date of birth or the medical history. The claims compare; they never reveal.

Agent capabilities

Read from the browser's own tool registry. A withdrawn capability is not disabled, it stops existing.

What you permit

One claim, one tool. It answers a comparison and returns nothing else.

Restricted products

A gate stays unresolved until the claim answering it is permitted. Nothing is inferred from data the agent has not been allowed to test.

Disclosure log

Append-only. Records which comparison was made, never the value it was made against.

    Your details

    Synthetic data, held in this browser only. No tool returns any field from it. Change anything and the product verdicts follow.

    Environment

    WebMCP needs an origin-isolated, secure document. If originAgentCluster is false, no tool can be registered.