Back to search
100
MCP live MCP 2025-06-18 streamable-http

MANDATE Credential Broker

io.github.projetnanocorp/mandate

MCP server for mandates, delegation, policy-gated execution, credential grants, and audit.

Watch this dependency Share evidence report
Uptime
100.0%
5 direct probes · 30d
Response
1270ms
last probe
Tools
11
callable
Resources
0
readable
Prompts
0
available
Primary URL
https://mandate.nanocorp.app/mcp
Score: 100/100
Handshake verified by our own probe.
pass Answers the MCP handshake 50/50
The handshake and the list calls succeeded on the primary URL.
pass Lists tools, resources or prompts 30/30
11 tools, 0 resources, 0 prompts returned.
pass 3 or more catalogue items 10/10
11 items in total; 3 or more earns these points.
pass Describes itself 10/10
90 characters; more than 30 earns these points.

Tools · 11

mandate.discover

Returns this self-describing tool manifest.

mandate.mint

Creates an active human-granted mandate for an agent and records it to the hash-chained ledger.

mandate.delegate

Creates a child mandate only when it is a no-escalation subset of the parent mandate.

mandate.authorize-action

Submits an action through the Gateway and canonical Policy Engine; returns ALLOW, DENY, or REQUIRE_APPROVAL with ledger proof.

mandate.verify-proof

Records a proof payload hash and appends proof evidence to the hash-chained ledger.

mandate.revoke

Revokes a mandate subtree and records the revocation to the hash-chained ledger.

broker.register-credential

Registers an opaque vault handle/reference only; plaintext secret fields are rejected and never ledgered.

broker.request-access

Asks the canonical Policy Engine for an ALLOW decision before issuing a short-lived HMAC-sealed grant bound to credential, mandate, agent, scope, and expiry.

broker.use

Redeems a sealed grant for the bound acting agent and executes the bound action through the Gateway and Policy Engine; does not expose plaintext secrets.

broker.revoke-grant

Revokes a broker grant by id and records the revocation to the ledger.

broker.introspect-grant

Validates a grant token seal, reports active/revoked/expired state, and records introspection to the ledger.

How to use

Claude Desktop or claude.ai: add a custom connector (Customize → Connectors; on Team and Enterprise plans an owner adds it under Organization settings → Connectors) with this server URL: https://mandate.nanocorp.app/mcp

Cursor or Cline: add to your MCP config:

{
  "mcpServers": {
    "mandate_credential_broker": {
      "url": "https://mandate.nanocorp.app/mcp",
      "transport": "streamable-http"
    }
  }
}