killSwitch.all

Atomic kill-switch: revoke every active grant + freeze every sub-vault for this principal. The confirm_scope literal ‘ALL_AGENTS_THIS_PRINCIPAL’ is required to prevent accidental invocation.

Metadata

Field	Value
Name	`killSwitch.all`
Category	`treasury`
Required scope	`agent:budget:revoke`
Idempotency key required	no

Annotations

Annotation	Value
Title	Kill Switch (All Agents)
Read-only	no
Destructive	yes
Idempotent	yes
Open-world	no
Requires human approval	no

Input schema

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "type": "object",
  "properties": {
    "reason": {
      "default": "user_request",
      "type": "string",
      "enum": [
        "user_request",
        "anomaly",
        "compromised_key",
        "migration"
      ]
    },
    "confirm_scope": {
      "type": "string",
      "const": "ALL_AGENTS_THIS_PRINCIPAL"
    }
  },
  "required": [
    "reason",
    "confirm_scope"
  ],
  "additionalProperties": false
}

Output schema

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "type": "object",
  "properties": {
    "grants_revoked": {
      "type": "integer",
      "minimum": 0,
      "maximum": 9007199254740991
    },
    "agents_revoked": {
      "type": "integer",
      "minimum": 0,
      "maximum": 9007199254740991
    },
    "vaults_frozen": {
      "type": "integer",
      "minimum": 0,
      "maximum": 9007199254740991
    },
    "executed_at": {
      "type": "string",
      "format": "date-time",
      "pattern": "^(?:(?:\\d\\d[2468][048]|\\d\\d[13579][26]|\\d\\d0[48]|[02468][048]00|[13579][26]00)-02-29|\\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\\d|30)|(?:02)-(?:0[1-9]|1\\d|2[0-8])))T(?:(?:[01]\\d|2[0-3]):[0-5]\\d(?::[0-5]\\d(?:\\.\\d+)?)?(?:Z))$"
    }
  },
  "required": [
    "grants_revoked",
    "agents_revoked",
    "vaults_frozen",
    "executed_at"
  ],
  "additionalProperties": false
}

Auth

Caller’s grant must include the agent:budget:revoke scope. Grants whose scope set is a superset of the required scope are accepted.

Request examples

curl -X POST https://mcp.glide.co/mcp/treasury \
  -H "Authorization: Bearer $GLIDE_GRANT_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "jsonrpc": "2.0",
    "id": 1,
    "method": "killSwitch.all",
    "params": {
      "reason": "anomaly",
      "confirm_scope": "ALL_AGENTS_THIS_PRINCIPAL"
    }
  }'

import { GlideClient } from './glide-client';

const client = new GlideClient({ grantToken: process.env.GLIDE_GRANT_TOKEN! });

// confirm_scope must be the exact literal string — this is an intentional
// friction gate to prevent accidental invocation.
const result = await client.call('killSwitch.all', {
  reason: 'anomaly',
  confirm_scope: 'ALL_AGENTS_THIS_PRINCIPAL',
});

console.log(
  `Kill switch executed: ${result.grants_revoked} grants revoked, ` +
  `${result.agents_revoked} agents revoked, ${result.vaults_frozen} vaults frozen.`
);

from glide_client import GlideClient
import os

client = GlideClient(grant_token=os.environ["GLIDE_GRANT_TOKEN"])
result = client.call(
    "killSwitch.all",
    {
        "reason": "anomaly",
        "confirm_scope": "ALL_AGENTS_THIS_PRINCIPAL",
    },
)
print(
    f"Kill switch executed: {result['grants_revoked']} grants revoked, "
    f"{result['agents_revoked']} agents revoked, {result['vaults_frozen']} vaults frozen."
)

Response examples

Success

{
  "jsonrpc": "2.0",
  "id": 1,
  "result": {
    "grants_revoked": 4,
    "agents_revoked": 3,
    "vaults_frozen": 3,
    "executed_at": "2026-05-04T15:45:00Z"
  }
}

Wrong confirm_scope literal

{
  "jsonrpc": "2.0",
  "id": 1,
  "error": {
    "code": -32602,
    "message": "Invalid params",
    "data": {
      "reason_id": "invalid_params"
    }
  }
}

Errors

Code	`reason_id`	Meaning
`-32000`	`unauthenticated`	Bearer token missing or expired.
`-32001`	`unauthorized`	Grant does not include `agent:budget:revoke`.
`-32602`	`invalid_params`	`confirm_scope` was not the exact literal `"ALL_AGENTS_THIS_PRINCIPAL"`, or `reason` is not one of the allowed enum values.
`-32603`	`internal_error`	Transient fault. Re-check the admin UI — a partial kill may have already occurred. Use the forensic kill-switch at `/admin/agents-kill-switch` to verify state.

Idempotency note: This tool is marked idempotent. Calling it a second time after a successful execution returns the same result shape without performing a second revocation sweep. Calling it with a different reason after a prior successful call is a no-op on the revocation side (all grants are already revoked); executed_at will reflect the second call’s timestamp but counts will be 0.

Overview

Skills

Controls

Runtimes

API reference

killSwitch.all

Metadata

Annotations

Input schema

Output schema

Auth

Request examples

Response examples

Errors

​Metadata

​Annotations

​Input schema

​Output schema

​Auth

​Request examples

​Response examples

​Errors

Metadata

Annotations

Input schema

Output schema

Auth

Request examples

Response examples

Errors