MCP server for mandates, delegation, policy-gated execution, credential grants, and audit.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Validates a grant token seal, reports active/revoked/expired state, and records introspection to the ledger.
This tool takes no arguments.
This tool isn't marked read-only, so it may change something on the server or in an account you connected.
Validates a grant token seal, reports active/revoked/expired state, and records introspection to the ledger.
No arguments.
{
"type": "object",
"required": [
"grant_token"
]
}Registers an opaque vault handle/reference only; plaintext secret fields are rejected and never ledgered.
| Argument | Type | Description |
|---|---|---|
| metadata | object | |
| vault_handle* | string | Opaque vault reference such as vault://provider/path; never a plaintext secret. |
{
"type": "object",
"required": [
"organization_id",
"registered_by_agent_id",
"label",
"credential_type",
"vault_handle",
"allowed_action_type"
],
"properties": {
"metadata": {
"type": "object"
},
"vault_handle": {
"type": "string",
"description": "Opaque vault reference such as vault://provider/path; never a plaintext secret."
}
}
}Asks the canonical Policy Engine for an ALLOW decision before issuing a short-lived HMAC-sealed grant bound to credential, mandate, agent, scope, and expiry.
No arguments.
{
"type": "object",
"required": [
"credential_id",
"acting_agent_id",
"mandate_id",
"action"
]
}Revokes a broker grant by id and records the revocation to the ledger.
No arguments.
{
"type": "object",
"required": [
"revoked_by_agent_id",
"reason"
]
}Redeems a sealed grant for the bound acting agent and executes the bound action through the Gateway and Policy Engine; does not expose plaintext secrets.
No arguments.
{
"type": "object",
"required": [
"grant_token",
"acting_agent_id"
]
}Submits an action through the Gateway and canonical Policy Engine; returns ALLOW, DENY, or REQUIRE_APPROVAL with ledger proof.
No arguments.
{
"type": "object",
"required": [
"acting_agent_id",
"action_type",
"amount_minor",
"counterparty"
]
}Creates a child mandate only when it is a no-escalation subset of the parent mandate.
No arguments.
{
"type": "object",
"required": [
"parent_mandate_id",
"delegator_agent_id",
"delegate_agent_id",
"budget_total",
"per_action_limit",
"starts_at",
"expires_at",
"scopes"
]
}Returns this self-describing tool manifest.
No arguments.
{
"type": "object",
"properties": {},
"additionalProperties": false
}Creates an active human-granted mandate for an agent and records it to the hash-chained ledger.
No arguments.
{
"type": "object",
"required": [
"organization_id",
"agent_id",
"grantor_principal_id",
"budget_currency",
"budget_total",
"per_action_limit",
"expires_at",
"scopes"
]
}Revokes a mandate subtree and records the revocation to the hash-chained ledger.
No arguments.
{
"type": "object",
"required": [
"revoked_by_principal_id",
"reason"
]
}Records a proof payload hash and appends proof evidence to the hash-chained ledger.
No arguments.
{
"type": "object",
"required": [
"organization_id",
"subject_type",
"subject_id",
"proof_type",
"payload"
]
}