Ask Hosted about status

What you'll do

Rehearse how Claude Code asks the Hosted protected-preview service for authorised qualification status through read-only MCP. Use synthetic questions and metadata. You will distinguish discovery, scope, freshness and certification limits without configuring a live connection or publishing internal service URLs.

Understand the preview connection

Hosted provides five bounded read-only MCP tool surfaces for organisation, project, qualification, attestation and certification-summary reads. Claude Code has documented Entra-based protected-preview connection instructions. That implementation and channel packaging do not establish a completed deployed login journey in every real host.

Use only the approved connection instructions supplied to an admitted preview participant. The protected preview supports configured Entra sign-in and existing verified identity links. It is not public self-signup, email auto-linking or a general production SSO guarantee. This lesson deliberately provides no internal origin or invented setup command.

Let authorised discovery establish scope

Ask the assistant to use the connected read-only tools to establish the permitted organisation and project context. Select from authorised results rather than supplying a guessed identifier or broadening the request to another client's project. A role, paid subscription or OAuth scope alone does not grant project access.

Current membership and exact action/project grants are checked in addition to entitlements. A denied response should remain denied; it is not an invitation to try alternate identifiers. If an intended project is absent, record the missing access as an owner action and continue with the synthetic exercise.

Synthetic status prompt
Using only the connected read-only Hosted tools, establish my
permitted context. For the project I select from those results,
report qualification scope, observation time, expiry and limitations.
Do not infer certification or request private numerical evidence.

This is a prompt example, not a tool schema. Use the actual tool names and arguments exposed by the approved connection. The course does not invent executable MCP methods from the five read categories.

Read status without expanding the claim

A current signed attestation reports a bounded local qualification claim. Hosted verifies provenance, integrity, scope, freshness and authority; it does not rerun source SQL or recover private expected values from commitments. Claude should describe the returned metadata, not announce that it independently audited the business numbers.

Ask follow-up questions about observation, expiry, revoked signer status, missing evidence or the selected history. Expired, revoked, missing and current are materially different findings. If the tools return no evidence for a claim, say unavailable or unknown as appropriate rather than converting absence into failure or success.

Produce an honest assistant answer

Write a synthetic response containing the authorised project label, declared scope, observed state, observation/expiry and one limitation. Keep account identifiers, protected origins and client evidence out of the academy transcript. If you need to diagnose a numerical mismatch, return to the approved local evidence workflow rather than asking Hosted for raw numbers it does not receive.

Your expected output is the prompt and annotated response. Mark live connection unperformed unless you actually used an authorised preview session. Channel packaging for Claude Code, Codex, ChatGPT or M365 is distinct from a completed real-host journey or approved marketplace listing. This lab teaches how to interpret bounded reads; it provides neither production access nor an assurance credential.

Check your understanding

1. How should Claude establish project scope without guessing identifiers?
2. Why can Hosted report signed status without recomputing business totals?
3. What must the assistant say when an approved certificate binding is unavailable?