@bouletteproof/bpos-mcp

Connect Claude Desktop to Bouletteproof OS — a supervised multi-agent software delivery platform.

Setup

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "bpos": {
      "command": "npx",
      "args": ["@bouletteproof/bpos-mcp"]
    }
  }
}

Restart Claude Desktop. A browser window opens for login — sign in with your BPOS credentials. Done.

What you get

53 tools including sprint management, blueprint operations, code search, container management, SQL queries, and deployment workflows — all scoped to your RBAC role.

Requirements

• Node.js >= 20
• A BPOS account (credentials provided by your team admin)

Options

Custom server URL

If you're on the Tailscale mesh and want to use the internal URL:

{
  "mcpServers": {
    "bpos": {
      "command": "npx",
      "args": ["@bouletteproof/bpos-mcp", "--url", "http://bpos-devserver:3000/sse", "--allow-http"]
    }
  }
}

Authentication

OAuth 2.1 with PKCE. No tokens in config files — the browser-based login flow handles everything. Credentials are validated server-side against bcrypt hashes. Sessions refresh automatically (30-day refresh token).

Security

• Login attempts rate-limited (5 per email per 15 minutes)
• Dynamic Client Registration restricted to known callback URLs
• All MCP tools enforce RBAC based on your user role
• HTTPS via Tailscale Funnel (TLS termination at the edge)

License

MIT