Secureframe uses one key, x-mcp-description, and what they put in it is the clearest example I have found of the thing OpenAPI has never been able to express. Here it is, on the operation that attaches an evidence file to a compliance test: Attach an evidence file to a Test. The bytes are not sent here.
Secureframe Is Teaching Agents A Multi-Step Workflow
calendar_today
September 24, 2026
domain
api-evangelist