release_mount deletes a mounted secret file and its enclosing 0700 directory before the 5-minute auto-cleanup fires.
Input
Output
When to use it
- The host runtime has finished using the mounted secret and wants to drop it sooner than 5 minutes.
- The agent decided to abort the operation that needed the secret.
- A controlling supervisor wants tight cleanup as part of an undo.
Safety
release_mount only acts on mounts tracked by this MCP server process. Passing a mountId that doesn’t exist (or has already been released) returns an error ("No active mount found for this mountId") rather than a success response.
Audit
No dedicated audit event. The lifetime of a mount is implicit inaccess.mount_file.