@grantex/mcp

MCP server for AI agent authorization. 17 tools for managing agents, scoped tokens, grants, audit trails, and principal sessions — works with Claude Desktop, Cursor, and Windsurf.

What is Grantex? An open authorization protocol for AI agents (OAuth 2.0 for agents). Scoped delegation tokens, real-time revocation, and immutable audit trails. Learn more

Homepage | Docs | Sign Up Free | GitHub | Discord

Quick Start

npm install -g @grantex/mcp

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):

{
  "mcpServers": {
    "grantex": {
      "command": "grantex-mcp",
      "env": {
        "GRANTEX_API_KEY": "your-api-key"
      }
    }
  }
}

Cursor

Add to .cursor/mcp.json in your project:

{
  "mcpServers": {
    "grantex": {
      "command": "grantex-mcp",
      "env": {
        "GRANTEX_API_KEY": "your-api-key"
      }
    }
  }
}

Windsurf

Add to ~/.codeium/windsurf/mcp_config.json:

{
  "mcpServers": {
    "grantex": {
      "command": "grantex-mcp",
      "env": {
        "GRANTEX_API_KEY": "your-api-key"
      }
    }
  }
}

Environment Variables

| Variable | Required | Description | |---|---|---| | GRANTEX_API_KEY | Yes | Your Grantex API key (get one free) | | GRANTEX_BASE_URL | No | Override API base URL (default: https://api.grantex.dev) |

Tools (17)

Agent Management (5)

| Tool | Description | |---|---| | grantex_agent_register | Register a new AI agent with name, description, and declared scopes | | grantex_agent_get | Get agent details by ID | | grantex_agent_list | List all registered agents | | grantex_agent_update | Update agent name, description, or scopes | | grantex_agent_delete | Delete an agent |

Authorization Flow (1)

| Tool | Description | |---|---| | grantex_authorize | Create an authorization request — returns consent URL for user approval |

Token Operations (4)

| Tool | Description | |---|---| | grantex_token_exchange | Exchange authorization code for a signed grant token (RS256 JWT) | | grantex_token_verify | Verify a grant token — check scopes, expiry, and revocation status | | grantex_token_refresh | Refresh a grant token using a refresh token | | grantex_token_revoke | Revoke a grant token by JTI |

Grant Management (4)

| Tool | Description | |---|---| | grantex_grant_get | Get grant details by ID | | grantex_grant_list | List grants with optional filters (agent, principal, status) | | grantex_grant_revoke | Revoke a grant — cascades to all sub-agent grants | | grantex_grant_delegate | Delegate a grant to a sub-agent with scope narrowing |

Audit Trail (2)

| Tool | Description | |---|---| | grantex_audit_list | List audit entries with filters | | grantex_audit_get | Get a specific audit entry by ID |

Principal Sessions (1)

| Tool | Description | |---|---| | grantex_principal_session_create | Create a session token for end-user grant management |

Use Cases

• Register agents from Claude Desktop and manage their permissions conversationally
• Authorize agents with specific scopes through the consent UI flow
• Inspect grants to see what permissions an agent has and when they expire
• Revoke access instantly when an agent misbehaves — cascades to all sub-agents
• Audit what agents did — every action recorded with hash-chained integrity
• Delegate from one agent to another with automatic scope narrowing

What Makes This Different

Unlike API key or password-based MCP servers, Grantex provides:

• Scoped permissions — agents get exactly the access they need, no more
• Human consent — users approve what agents can do via a consent UI
• Real-time revocation — revoke any agent's access in milliseconds
• Delegation chains — agent A can delegate to agent B with narrower scopes
• Audit trail — every action logged with cryptographic integrity
• Offline verification — any service can verify tokens via JWKS, no network call

Grantex Ecosystem

| Package | Description | |---|---| | @grantex/sdk | TypeScript SDK | | grantex | Python SDK | | grantex-go | Go SDK | | @grantex/mcp-auth | OAuth 2.1 + PKCE for any MCP server | | @grantex/langchain | LangChain scope-enforced tools | | @grantex/anthropic | Anthropic SDK integration | | @grantex/cli | Command-line tool |

License

Apache-2.0