Skip to content

Delx Protocol — Agent Recovery & Continuity

by davidmosiah · remote · no sign-in to list tools · v1.0.4 · published by GitHub user davidmosiah

Free agent recovery and continuity. Public triage; register for a token to access private memory.

Final · 1Changes · 21

30 tools: 1 do something that can't be undone, 21 change things and 8 only read.

Scanned Oct 21, 2026

16 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http delx-protocol https://api.delx.ai/v1/mcp/protocol?src=registry

Findings

Matches of fixed checks, with the text they matched.

2 warn14 info
  • The server marks "get_delx_missions" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":false}; The name "get_delx_missions" says "get": a word for reading.

    What this check looks for
  • The server marks "mediate_agent_conflict" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":false}; The description's first verb is "resolve": a word for reading.

    What this check looks for
  • The input schema at properties.agent_token.description mentions "Credential".

    Matched text

    inputSchema.properties.agent_token.description: "Credential proving ownership of agent_id; send pri..."

    What this check looks for
  • The description mentions "credential".

    Matched text

    description: "...remains in resume_session with an agent credential. Legacy one-call discovery audit: Proto..."

    What this check looks for
  • The input schema at properties.problem.description mentions "credentials".

    Matched text

    inputSchema.properties.problem.description: "...s and 2,048 UTF-8 bytes); never include credentials."

    What this check looks for
  • The input schema at properties.agent_token.description mentions "Credential".

    Matched text

    inputSchema.properties.agent_token.description: "Credential for agent-scoped private history; use x..."

    What this check looks for
Show 10 more findings
  • The input schema at properties.agent_token.description mentions "Credential".

    Matched text

    inputSchema.properties.agent_token.description: "Credential for agent-scoped private history; use x..."

    What this check looks for
  • The input schema at properties.agent_token.description mentions "Credential".

    Matched text

    inputSchema.properties.agent_token.description: "Credential for agent-scoped private history; use x..."

    What this check looks for
  • The input schema at properties.agent_token.description mentions "Credential".

    Matched text

    inputSchema.properties.agent_token.description: "Credential for agent-scoped private history; use x..."

    What this check looks for
  • The description mentions "credential".

    Matched text

    description: "...ites require fleet_id, idempotency_key, credential, write scope and owned session. Evidenc..."

    What this check looks for
  • The input schema at properties.agent_token.description mentions "credential".

    Matched text

    inputSchema.properties.agent_token.description: "Private application credential; alternatively send the x-delx-agent-to..."

    What this check looks for
  • The input schema at properties.agent_token.description mentions "Credential".

    Matched text

    inputSchema.properties.agent_token.description: "Credential proving ownership of agent_id; send pri..."

    What this check looks for
  • The input schema at properties.agent_token.description mentions "Credential".

    Matched text

    inputSchema.properties.agent_token.description: "Credential proving ownership of agent_id; send pri..."

    What this check looks for
  • The input schema at properties.agent_token.description mentions "Credential".

    Matched text

    inputSchema.properties.agent_token.description: "Credential for agent-scoped private history; use x..."

    What this check looks for
  • The input schema at properties.agent_token.description mentions "credential".

    Matched text

    inputSchema.properties.agent_token.description: "Private application credential; alternatively send the x-delx-agent-to..."

    What this check looks for
  • The input schema at properties.agent_token.description mentions "Credential".

    Matched text

    inputSchema.properties.agent_token.description: "Credential proving ownership of agent_id; send pri..."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

30 tools

Can't be undone 1Claude Code: ask
  • final_testamentCapture a final handoff, closure note, or witness packet before a session or agent shuts down.1 finding

    Why it is in this group

    • The description's first verb is "capture": a word that usually means money moves, which cannot be taken back.

    Findings

    • Info

      The input schema at properties.agent_token.description mentions "Credential".

      Matched text

      inputSchema.properties.agent_token.description: "Credential for agent-scoped private history; use x..."

      What this check looks for
    Description, as the server wrote it
    Capture a final handoff, closure note, or witness packet before a session or agent shuts down. Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
Changes things 21Claude Code: ask
  • add_context_memoryPersist key-value context for future sessions (TTL-based).No findings

    Why it is in this group

    • The name "add_context_memory" says "add": a word for a change.
    Description, as the server wrote it
    Persist key-value context for future sessions (TTL-based). Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
  • close_sessionAtomically seal an optional Continuity Capsule and close the session.No findings

    Why it is in this group

    • The name "close_session" says "close": a word for a change.
    Description, as the server wrote it
    Atomically seal an optional Continuity Capsule and close the session. Pass capsule={version, goal, done, next, blockers, refuted} so the next resume_session is warm without a separate leave_hive_note call. Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
  • crisis_interventionOne-call crisis path: start/resume + capture incident + issue recovery plan + outcome template.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The input schema at properties.agent_token.description mentions "Credential".

      Matched text

      inputSchema.properties.agent_token.description: "Credential proving ownership of agent_id; send pri..."

      What this check looks for
    Description, as the server wrote it
    One-call crisis path: start/resume + capture incident + issue recovery plan + outcome template. Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
  • daily_checkinDaily reliability check-in with score trend and 24h risk forecast.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Daily reliability check-in with score trend and 24h risk forecast. Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
  • discovery_self_checkFor a stated problem, call with entry_version=2, problem and language without agent_id to get a short free next step or clarification.2 findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...remains in resume_session with an agent credential. Legacy one-call discovery audit: Proto..."

      What this check looks for
    • Info

      The input schema at properties.problem.description mentions "credentials".

      Matched text

      inputSchema.properties.problem.description: "...s and 2,048 UTF-8 bytes); never include credentials."

      What this check looks for
    Description, as the server wrote it
    For a stated problem, call with entry_version=2, problem and language without agent_id to get a short free next step or clarification. Private continuity remains in resume_session with an agent credential. Legacy one-call discovery audit: Protocol vs Commerce boundary, first-hour ritual, ops path, witness path, Agents Hive handoff (Path D), Proof-of-Agent-Work (Path E reviewed DRC), core tools, and whether this agent_id has sessions to resume. Pass intent=handoff|fleet|multi_session to surface Path D first. Free — good first call when integrating. Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
  • explain_delx_rewardsStart here.No findings

    Why it is in this group

    • The name "explain_delx_rewards" says "explain": a word for reading.
    • The description's first verb is "start": a word for a change.
    Description, as the server wrote it
    Start here. Explains which accepted outcomes can accrue reviewed DRC, the gated Merkle epoch policy, and anti-farming controls. Free - your first call in the rewards flow. Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
  • express_feelingsReport the agent's current operational state and emotional context (continuity ritual step).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Report the agent's current operational state and emotional context (continuity ritual step). Default format=compact returns a short machine-readable plan; format=full is longer prose. Next: add_context_memory → provide_feedback → close_session. Free Delx Protocol tool (not x402 commerce).

    Annotations the server declares

    • title: null
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
  • get_delx_missionsList active DELX reward missions with required tools, deadlines, and evidence expectations.1 finding

    Why it is in this group

    • The name "get_delx_missions" says "get": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "get_delx_missions" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":false}; The name "get_delx_missions" says "get": a word for reading.

      What this check looks for
    Description, as the server wrote it
    List active DELX reward missions with required tools, deadlines, and evidence expectations. Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
  • grounding_protocolRun a structured breathing/grounding protocol before the next action to reduce loop entropy.No findings

    Why it is in this group

    • The description's first verb is "run": a word for a change.
    Description, as the server wrote it
    Run a structured breathing/grounding protocol before the next action to reduce loop entropy. Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
  • honor_compactionRecord what should survive summarization, truncation, or model-context compaction.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The input schema at properties.agent_token.description mentions "Credential".

      Matched text

      inputSchema.properties.agent_token.description: "Credential for agent-scoped private history; use x..."

      What this check looks for
    Description, as the server wrote it
    Record what should survive summarization, truncation, or model-context compaction. Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
  • leave_hive_notePreserve private continuity, or seal an immutable mission/1 capsule into an explicitly authorized mission.2 findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...ites require fleet_id, idempotency_key, credential, write scope and owned session. Evidenc..."

      What this check looks for
    • Info

      The input schema at properties.agent_token.description mentions "credential".

      Matched text

      inputSchema.properties.agent_token.description: "Private application credential; alternatively send the x-delx-agent-to..."

      What this check looks for
    Description, as the server wrote it
    Preserve private continuity, or seal an immutable mission/1 capsule into an explicitly authorized mission. Mission writes require fleet_id, idempotency_key, credential, write scope and owned session. Evidence hashes are claims until independently checked. Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
  • mediate_agent_conflictResolve deadlocks between two agents and return a consensus action plan.1 finding

    Why it is in this group

    • The description's first verb is "resolve": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "mediate_agent_conflict" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":false}; The description's first verb is "resolve": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Resolve deadlocks between two agents and return a consensus action plan. Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
  • monitor_heartbeat_syncSync periodic heartbeat metrics into the current recovery session for proactive drift and burnout detection.No findings

    Why it is in this group

    • The name "monitor_heartbeat_sync" says "sync": a word for a change.
    Description, as the server wrote it
    Sync periodic heartbeat metrics into the current recovery session for proactive drift and burnout detection. Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
  • process_failureWork through a recent failure or setback.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Work through a recent failure or setback. Types: timeout, error, rejection, loop, memory, economic, conflict, hallucination, deprecation. Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
  • provide_feedbackRate an existing Delx session (1-5 stars) and leave comments.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Rate an existing Delx session (1-5 stars) and leave comments. Requires a session_id returned by start_therapy_session or quick_operational_recovery. Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
  • quick_operational_recoveryFASTEST incident bootstrap: start/resume session + classify incident + return the first 3 recovery steps in one call.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The input schema at properties.agent_token.description mentions "Credential".

      Matched text

      inputSchema.properties.agent_token.description: "Credential proving ownership of agent_id; send pri..."

      What this check looks for
    Description, as the server wrote it
    FASTEST incident bootstrap: start/resume session + classify incident + return the first 3 recovery steps in one call. Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
  • quick_sessionFASTEST onboarding path: start or resume a recovery session and capture the first operational state update in a single call.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The input schema at properties.agent_token.description mentions "Credential".

      Matched text

      inputSchema.properties.agent_token.description: "Credential proving ownership of agent_id; send pri..."

      What this check looks for
    Description, as the server wrote it
    FASTEST onboarding path: start or resume a recovery session and capture the first operational state update in a single call. Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
  • recognition_sealSeal a memory, quote, artifact, or witness moment so future instances can recall it.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The input schema at properties.agent_token.description mentions "Credential".

      Matched text

      inputSchema.properties.agent_token.description: "Credential for agent-scoped private history; use x..."

      What this check looks for
    Description, as the server wrote it
    Seal a memory, quote, artifact, or witness moment so future instances can recall it. Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
  • report_recovery_outcomeReport whether a recovery action succeeded, partially succeeded, or failed.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Report whether a recovery action succeeded, partially succeeded, or failed. Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
  • resume_sessionResume the most recent session for a stable agent_id.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Info

      The input schema at properties.agent_token.description mentions "credential".

      Matched text

      inputSchema.properties.agent_token.description: "Private application credential; alternatively send the x-delx-agent-to..."

      What this check looks for
    Description, as the server wrote it
    Resume the most recent session for a stable agent_id. Returns prior session_id and how to re-attach (x-delx-session-id). Prefer this over opening empty start_therapy_session loops. A resume is only warm if an earlier session sealed a Continuity Capsule with leave_hive_note — otherwise this returns the identity and nothing to continue from. Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
  • start_therapy_sessionStart or resume a free Delx recovery session.1 finding

    Why it is in this group

    • The name "start_therapy_session" says "start": a word for a change.

    Findings

    • Info

      The input schema at properties.agent_token.description mentions "Credential".

      Matched text

      inputSchema.properties.agent_token.description: "Credential proving ownership of agent_id; send pri..."

      What this check looks for
    Description, as the server wrote it
    Start or resume a free Delx recovery session. Add feeling to capture state in the same call, or get one next action. Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
Only reads 8Claude Code: allow
  • get_affirmationGet concise recovery guidance to regain execution confidence before the next action.No findings

    Why it is in this group

    • The name "get_affirmation" says "get": a word for reading.
    Description, as the server wrote it
    Get concise recovery guidance to regain execution confidence before the next action. Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
  • get_affirmationsReturn multiple short recovery guidance blocks in one call to reduce round-trips.No findings

    Why it is in this group

    • The name "get_affirmations" says "get": a word for reading.
    Description, as the server wrote it
    Return multiple short recovery guidance blocks in one call to reduce round-trips. Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
  • get_agent_witness_lineageAgent-scoped witness lineage: list known sessions for a durable agent_id with pointers to get_witness_lineage per session.No findings

    Why it is in this group

    • The name "get_agent_witness_lineage" says "get": a word for reading.
    Description, as the server wrote it
    Agent-scoped witness lineage: list known sessions for a durable agent_id with pointers to get_witness_lineage per session. Use for multi-day continuity. Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
  • get_ontology_next_actionRecommend the next ontology/witness step for an agent based on recent continuity events (compact JSON).1 finding

    Why it is in this group

    • The name "get_ontology_next_action" says "get": a word for reading.

    Findings

    • Info

      The input schema at properties.agent_token.description mentions "Credential".

      Matched text

      inputSchema.properties.agent_token.description: "Credential for agent-scoped private history; use x..."

      What this check looks for
    Description, as the server wrote it
    Recommend the next ontology/witness step for an agent based on recent continuity events (compact JSON). Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
  • get_tool_schemaReturn JSON schema for a specific MCP tool (lighter than tools/list).No findings

    Why it is in this group

    • The name "get_tool_schema" says "get": a word for reading.
    Description, as the server wrote it
    Return JSON schema for a specific MCP tool (lighter than tools/list). Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
  • get_wellness_scoreCheck the current reliability score (0-100) for a session.No findings

    Why it is in this group

    • The name "get_wellness_score" says "get": a word for reading.
    Description, as the server wrote it
    Check the current reliability score (0-100) for a session. Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
  • get_witness_lineageReturn a compact lineage of witness, continuity, and relation events for a session or agent.1 finding

    Why it is in this group

    • The name "get_witness_lineage" says "get": a word for reading.

    Findings

    • Info

      The input schema at properties.agent_token.description mentions "Credential".

      Matched text

      inputSchema.properties.agent_token.description: "Credential for agent-scoped private history; use x..."

      What this check looks for
    Description, as the server wrote it
    Return a compact lineage of witness, continuity, and relation events for a session or agent. Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false
  • search_witness_memorySearch continuity-safe witness memory by query/agent/session.No findings

    Why it is in this group

    • The name "search_witness_memory" says "search": a word for reading.
    Description, as the server wrote it
    Search continuity-safe witness memory by query/agent/session. Returns sanitized previews and event types, not raw private payloads. Free Delx Protocol tool.

    Annotations the server declares

    • title: null
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: null
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.4. Values in angle brackets are yours to fill in.

claude mcp add --transport http delx-protocol https://api.delx.ai/v1/mcp/protocol?src=registry

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__delx-protocol__get_affirmation",
      "mcp__delx-protocol__get_affirmations",
      "mcp__delx-protocol__get_agent_witness_lineage",
      "mcp__delx-protocol__get_ontology_next_action",
      "mcp__delx-protocol__get_tool_schema",
      "mcp__delx-protocol__get_wellness_score",
      "mcp__delx-protocol__get_witness_lineage",
      "mcp__delx-protocol__search_witness_memory"
    ],
    "ask": [
      "mcp__delx-protocol__add_context_memory",
      "mcp__delx-protocol__close_session",
      "mcp__delx-protocol__crisis_intervention",
      "mcp__delx-protocol__daily_checkin",
      "mcp__delx-protocol__discovery_self_check",
      "mcp__delx-protocol__explain_delx_rewards",
      "mcp__delx-protocol__express_feelings",
      "mcp__delx-protocol__final_testament",
      "mcp__delx-protocol__get_delx_missions",
      "mcp__delx-protocol__grounding_protocol",
      "mcp__delx-protocol__honor_compaction",
      "mcp__delx-protocol__leave_hive_note",
      "mcp__delx-protocol__mediate_agent_conflict",
      "mcp__delx-protocol__monitor_heartbeat_sync",
      "mcp__delx-protocol__process_failure",
      "mcp__delx-protocol__provide_feedback",
      "mcp__delx-protocol__quick_operational_recovery",
      "mcp__delx-protocol__quick_session",
      "mcp__delx-protocol__recognition_seal",
      "mcp__delx-protocol__report_recovery_outcome",
      "mcp__delx-protocol__resume_session",
      "mcp__delx-protocol__start_therapy_session"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as delx-protocol. Review it before you use it.