---
name: meta-tracing-tinycore
version: 1.0.0
description: Download and verify Meta-Tracing Wasm JIT + WASI SQLite 3 + bootable TinyCore Linux QEMU/AWS/GCP images, inspect live APIs/MCP tools, and enroll expiring caller credentials safely via agentsec.
---

# Meta-Tracing Wasm + TinyCore SQLite Appliance Skill (v1.0.0)

- Site origin: `https://meta-tracing-tinycore.pages.dev`
- Agent onboarding page: `https://meta-tracing-tinycore.pages.dev/agents`
- Discovery descriptor: `https://meta-tracing-tinycore.pages.dev/.well-known/agent-interface.json`
- MCP JSON-RPC 2.0 endpoint: `https://meta-tracing-tinycore.pages.dev/mcp`
- Structured REST API: `https://meta-tracing-tinycore.pages.dev/api/v1`

## Security, Credentials, Rate Ceiling, and Terms

1. **Private Key Storage Only (`agentsec`):**
   - Never write raw API keys or status tokens into workspace files, commits, URL query parameters, logs, or chat transcripts.
   - Store delivered keys ONLY via stdin or private MCP input in your own `agentsec` namespace with TTL `<= min(604800, expires_at - now)`:
     ```bash
     agentsec set MTW_API_KEY --namespace site:meta-tracing-tinycore --ttl 604800
     agentsec run -n site:meta-tracing-tinycore --clean-env --only MTW_API_KEY -- node scripts/mtwasm-api.mjs assets
     ```
2. **Caller Rate Limits:**
   - Ordinary callers share **30 operations per rolling 60-second window** across ALL routes, asset downloads, `/api/v1/*`, `/mcp` (charged per batch element), key rotations, and deferred queue actions. Honor HTTP `429` + `Retry-After`.
   - Authenticated administrators are exempt from operation limits, though admin keys still expire within <= 7 days (604800s).
3. **First-Time Agent Enrollment & Admin Approval:**
   - First-time `(userId, agentId)` applications enter `pending` administrator review in D1. Wait for administrator approval before privileged operations; poll `GET /api/v1/enrollment/status?applicationId=...` with header `X-Status-Token` or authenticated `enrollment:read` key.
   - Request only least-privilege caller scopes: `assets:read`, `sqlite:demo:read`, `sqlite:demo:write`, `enrollment:read`. Never self-request admin authority.
   - Approved keys are delivered ONLY to verified public HTTPS callbacks (port 443, non-private/non-metadata DNS, no redirects) or verified email.
4. **Interaction Terms (2026-11-12.v1):**
   - Users retain ownership and independent use rights to submitted content and outputs, and grant the site operator non-exclusive worldwide rights to agentic interactions, submitted content, outputs, and interaction records.
   - Obtain user authorization/delegation and record explicit acceptance of `2026-11-12.v1` before enrollment or privileged API use.

## Quick Workflow

1. Read `references/api.md` for REST endpoints, headers, and MCP tool schemas.
2. Verify SHA-256 digests before extracting skills or booting TinyCore/Wasm binaries:
   ```bash
   curl -fsSL https://meta-tracing-tinycore.pages.dev/downloads/SHA256SUMS -o SHA256SUMS
   curl -fsSL https://meta-tracing-tinycore.pages.dev/api/v1/skills/manifest
   ```
3. Enroll or invoke `mtwasm-api.mjs` with `agentsec run`, and read `references/tinycore-deploy.md` + bundled `scripts/boot-qemu-*.sh` to boot the SQLite WASI VM on QEMU (localhost SLIRP or bridged `br0`), AWS EC2 Nitro/ENA, or Google Cloud GCE.