io.github.zapsoblige-hash/policyvault

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-09-15T02:31:19.606561Z",
      "publishedAt": "2026-09-15T02:31:19.606561Z",
      "statusChangedAt": "2026-09-15T02:31:19.606561Z"
    }
  },
  "server": {
    "name": "io.github.zapsoblige-hash/policyvault",
    "_meta": {
      "io.modelcontextprotocol.registry/publisher-provided": {
        "custody": "This server holds no keys, signs nothing, broadcasts nothing. Every tool call is an ordinary authenticated HTTP request subject to server-side tenancy, scope, governance, risk, and covenant decisions.",
        "protocolRevisions": [
          "2025-11-25",
          "2025-06-18"
        ],
        "authorityStatement": "AI MAY REQUEST. POLICYVAULT DETERMINISTICALLY DECIDES. THE COVENANT ENFORCES. SIGNERS RETAIN CUSTODY."
      }
    },
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "version": "1.6.2",
    "packages": [
      {
        "version": "1.6.2",
        "transport": {
          "type": "stdio"
        },
        "identifier": "policyvault-mcp",
        "registryType": "npm",
        "environmentVariables": [
          {
            "name": "POLICYVAULT_MCP_SERVER_URL",
            "format": "string",
            "isRequired": true,
            "description": "Bare origin of the PolicyVault server (e.g. https://app.policy-vault.org, or your self-hosted origin). Refused if it embeds credentials or a path."
          },
          {
            "name": "POLICYVAULT_MCP_TOKEN",
            "format": "string",
            "isSecret": true,
            "isRequired": true,
            "description": "Machine-identity bearer credential (pvmk_...), minted by the vault operator in the PolicyVault app with exactly the scopes the agent should hold. Never logged; deleted from the process environment after being read."
          },
          {
            "name": "POLICYVAULT_MCP_SCOPES",
            "format": "string",
            "description": "Optional comma-separated scope list to narrow which tools are advertised (display-side only; enforcement is always server-side)."
          }
        ]
      }
    ],
    "repository": {
      "url": "https://github.com/zapsoblige-hash/PolicyVault",
      "source": "github"
    },
    "description": "Non-custodial Kaspa policy enforcement for AI agents; signers retain custody."
  }
}