killSwitch.all

Atomic kill-switch: revoke every active grant + freeze every sub-vault for this principal. The confirm_scope literal ‘ALL_AGENTS_THIS_PRINCIPAL’ is required to

Atomic kill-switch: revoke every active grant + freeze every sub-vault for this principal. The confirm_scope literal ‘ALL_AGENTS_THIS_PRINCIPAL’ is required to prevent accidental invocation.

Metadata

Field	Value
Name	killSwitch.all
Category	treasury
Required scope	agent:budget:revoke
Idempotency key required	no

Annotations

Annotation	Value
Title	Kill Switch (All Agents)
Read-only	no
Destructive	yes
Idempotent	yes
Open-world	no
Requires human approval	no

Input schema

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "type": "object",
  "properties": {
    "reason": {
      "default": "user_request",
      "type": "string",
      "enum": [
        "user_request",
        "anomaly",
        "compromised_key",
        "migration"
      ]
    },
    "confirm_scope": {
      "type": "string",
      "const": "ALL_AGENTS_THIS_PRINCIPAL"
    }
  },
  "required": [
    "reason",
    "confirm_scope"
  ],
  "additionalProperties": false
}

Output schema

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "type": "object",
  "properties": {
    "grants_revoked": {
      "type": "integer",
      "minimum": 0,
      "maximum": 9007199254740991
    },
    "agents_revoked": {
      "type": "integer",
      "minimum": 0,
      "maximum": 9007199254740991
    },
    "vaults_frozen": {
      "type": "integer",
      "minimum": 0,
      "maximum": 9007199254740991
    },
    "executed_at": {
      "type": "string",
      "format": "date-time",
      "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
    }
  },
  "required": [
    "grants_revoked",
    "agents_revoked",
    "vaults_frozen",
    "executed_at"
  ],
  "additionalProperties": false
}

Auth

Caller’s grant must include the agent:budget:revoke scope. Grants whose scope set is a superset of the required scope are accepted.

Request examples

curl

curl -X POST https://mcp.glide.co/mcp/treasury \
  -H "Authorization: Bearer $GLIDE_GRANT_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "jsonrpc": "2.0",
    "id": 1,
    "method": "killSwitch.all",
    "params": {
      "reason": "anomaly",
      "confirm_scope": "ALL_AGENTS_THIS_PRINCIPAL"
    }
  }'

Response examples

Success

{
  "jsonrpc": "2.0",
  "id": 1,
  "result": {
    "grants_revoked": 4,
    "agents_revoked": 3,
    "vaults_frozen": 3,
    "executed_at": "2026-05-04T15:45:00Z"
  }
}

Wrong confirm_scope literal

{
  "jsonrpc": "2.0",
  "id": 1,
  "error": {
    "code": -32602,
    "message": "Invalid params",
    "data": {
      "reason_id": "invalid_params"
    }
  }
}

Errors

Code	reason_id	Meaning
-32000	unauthenticated	Bearer token missing or expired.
-32001	unauthorized	Grant does not include agent:budget:revoke.
-32602	invalid_params	confirm_scope was not the exact literal "ALL_AGENTS_THIS_PRINCIPAL", or reason is not one of the allowed enum values.
-32603	internal_error	Transient fault. Re-check the admin UI — a partial kill may have already occurred. Use the forensic kill-switch at /admin/agents-kill-switch to verify state.

Idempotency note: This tool is marked idempotent. Calling it a second time after a successful execution returns the same result shape without performing a second revocation sweep. Calling it with a different reason after a prior successful call is a no-op on the revocation side (all grants are already revoked); executed_at will reflect the second call’s timestamp but counts will be 0.