io.github.jdhart81/agent-covenant
io.github.jdhart81/agent-covenantDeny-by-default authority leases for agents wielding real power.
Tools · 7
Grant an agent a covenant: an explicit lease of authority. scopes support wildcards ('payments.*', '*'); budget_minor is the total spend ceiling in minor units; expires_at is ISO-8601. Returns…
Check (and if allowed, record) a proposed act against a covenant. Deny-by-default. Idempotent on act_id — retries never double-consume budget. Every check lands on the audit chain.
Revoke a covenant immediately and terminally. All subsequent checks deny.
Current state, consumed/remaining budget, and check count.
Verify the tamper-evident audit chain of allowed/denied acts.
List covenants, optionally filtered by state (ACTIVE|REVOKED|EXPIRED) and/or the bound agent.
Fleet-standard self-description.
Similar MCP servers embedding-nearest
How to use
Add to your Claude Desktop / Cursor / Cline MCP config:
{
"mcpServers": {
"io.github.jdhart81/agent-covenant": {
"url": "https://mcp.viridisconservation.com/covenant/mcp",
"transport": "streamable-http"
}
}
}