@attesso/mcp

MCP server for Attesso authorization and safety tools. Works with Claude Desktop and any MCP-compatible client.

Attesso doesn't touch money — it authorizes, validates, revokes, and audits. This MCP server lets AI agents check their spending authorization and audit trail.

Setup

{
  "mcpServers": {
    "attesso": {
      "command": "npx",
      "args": ["@attesso/mcp"],
      "env": {
        "ATTESSO_API_KEY": "rk_test_..."
      }
    }
  }
}

Available Tools

Read Operations

| Tool | Description | |------|-------------| | attesso_get_mandate | Get mandate details: spending limit, status, restrictions | | attesso_get_audit_trail | Full liability chain, biometric proof, and audit trail |

Write Operations

| Tool | Description | |------|-------------| | attesso_revoke_mandate | Revoke mandate, atomically destroy all derived instruments |

Environment Variables

| Variable | Description | Required | |----------|-------------|----------| | ATTESSO_API_KEY | Restricted API key (rk_test_* or rk_live_*) | Yes | | ATTESSO_BASE_URL | Custom API URL (default: https://api.attesso.com) | No | | ATTESSO_MANDATE_ID | Default mandate ID for all operations | No | | ATTESSO_READ_ONLY | Set to "true" to disable write operations | No |

Programmatic Usage

import { createAttessoMCPServer } from '@attesso/mcp';
import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';

const server = createAttessoMCPServer({
  apiKey: process.env.ATTESSO_API_KEY,
  mandateId: 'mandate_xyz',
  readOnlyMode: false,
});

const transport = new StdioServerTransport();
await server.connect(transport);

Security

• API Keys: Only restricted keys (rk_test_*, rk_live_*). Never management keys.
• Mandate creation requires biometric auth — cannot be done via MCP. The user must pre-authorize.
• Read-only mode: For monitoring without revocation capability.

Related Packages

• @attesso/sdk — API client with Vercel AI SDK integration
• @attesso/types — TypeScript types

License

MIT