@kavachos/express

Express adapter for KavachOS.

Install

pnpm add kavachos @kavachos/express

Usage

import express from 'express';
import { createKavach } from 'kavachos';
import { kavachExpress } from '@kavachos/express';

const app = express();
app.use(express.json());
app.use(express.urlencoded({ extended: true }));

const kavach = createKavach({
  database: { provider: 'sqlite', url: 'kavach.db' },
});

// Mount all KavachOS routes at /auth
app.use('/auth', kavachExpress(kavach));

app.listen(3000);

This mounts the full KavachOS REST API: agent CRUD, authorization, delegations, audit logs, and dashboard stats.

With MCP OAuth 2.1

import { createMcpModule } from 'kavachos/mcp';
import { kavachExpress } from '@kavachos/express';

const mcp = createMcpModule({
  issuer: 'https://your-app.com',
  // ...
});

app.use('/auth', kavachExpress(kavach, { mcp }));

When mcp is provided, the OAuth 2.1 endpoints are enabled:

• GET /.well-known/oauth-authorization-server
• GET /.well-known/oauth-protected-resource
• POST /mcp/register
• GET /mcp/authorize
• POST /mcp/token

API surface

kavachExpress(kavach, options?) returns an Express Router. Pass it to app.use() with your chosen prefix.

| Option | Type | Description | |--------|------|-------------| | mcp | McpAuthModule | Enables MCP OAuth 2.1 endpoints |

For full docs on agent identity, permissions, delegation, and audit, see the main kavachos package.

Links

• Documentation
• GitHub

License

MIT