@gtcx/mcp

Status: v0.1.0 Standard: Model Context Protocol (MCP)

GTCX MCP server — exposes the verification rail as MCP tools that any MCP-capable agent can discover and invoke.

What's in v0.1.0

• McpToolRegistry class with dispatch + RBAC enforcement
• 9 default GTCX tools: verify_credential, verify_lot, verify_seal, get_gci_score, discover_jurisdictions, audit_query, predicate.resolve, catalog.list_commodities, catalog.coverage_status
• Tool input schemas (JSON Schema)
• stdio transport CLI with --rest wiring to a GTCX protocol server
• streamable HTTP transport used by the in-tree protocol server at POST /mcp

What's NOT in v0.1.0

• npm publication — Sprint 11.3
• Discoverability tools beyond the v0.1.0 catalog — Sprint 11+

Sprint 11 follow-up plan

| Task | Status | | ----------------------------------------------- | ------------------------ | | 11.1 — stdio transport wiring | complete | | 11.2 — streamable-http transport | complete | | 11.3 — publish to npm with SLSA provenance | prep done — see docs/operations/npm-publish-mcp-runbook.md; human npm publish | | 11.4 — TradeCV portable-reputation registry MVP | pending (separate route) | | 11.5 — NL query endpoint | pending (separate route) |

Usage (current)

import { createDefaultMcpToolCatalog } from '@gtcx/mcp';

const registry = createDefaultMcpToolCatalog(myRestClient);
const tools = registry.list(); // 9 tools
const result = await registry.dispatch(
  'verify_lot',
  { lotId: 'lot:gh-gld-...' },
  {
    permissions: ['protocol:read'],
    requestId: 'req-1',
  }
);

gtcx-mcp --stdio --rest https://example.gtcx.trade --token "$GTCX_API_KEY"

References

• ADR-012 — Universal Commodity Contract
• ADR-014 — Agentic Schema Forge (forge tools may extend this catalog)
• Server in-tree copy — server/src/mcp/
• Sovereign positioning — docs/gtm/sovereign-positioning.md
• Sprint 6.1 (initial scaffold) + Sprint 11 (extraction + live transport) — docs/agile/sprint-plan-2026-Q2.md + docs/agile/sprint-plan-2026-Q3.md