io.github.Postcept/mcp

السجل الرسمي الأمن

Verify agent actions against the system of record and get signed completion receipts.

التثبيت

أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: ‏.cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).

NPM package @postcept/mcp
Claude Code
claude mcp add io-github-postcept-mcp -e 'POSTCEPT_API_KEY=<your postcept_api_key>' -- npx -y @postcept/mcp@0.3.3
إعداد JSON (Claude Desktop وCursor وVS Code)
{
    "mcpServers": {
        "io-github-postcept-mcp": {
            "command": "npx",
            "args": [
                "-y",
                "@postcept/mcp@0.3.3"
            ],
            "env": {
                "POSTCEPT_API_KEY": "<your postcept_api_key>"
            }
        }
    }
}

متغيرات البيئة

  • POSTCEPT_API_KEY إلزامي سري Postcept API key

التوثيق

مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.

المحتويات
  1. @postcept/mcp
  2. Configuration
  3. Use with Claude Desktop / Claude Code
  4. Tools
  5. Advisory, by design
  6. Development

@postcept/mcp

A Model Context Protocol server that exposes Postcept, outcome verification for AI agents, as MCP tools.

After an agent performs a high-risk action (a refund, a subscription cancellation, a support-ticket resolution), it calls a verify_* tool to confirm the action actually completed in the system of record (Stripe, Zendesk, and more) and obtain a signed completion receipt. "done" becomes proof, not a claim.

The server is a thin wrapper over the live Postcept HTTP API. It holds no credentials of its own beyond your Postcept API key, and verification is read-only against your systems of record.

Configuration

VariableRequiredDefaultNotes
POSTCEPT_API_KEYyesnoneA Postcept API key (pcpt_sk_...) with verifications:write.
POSTCEPT_BASE_URLnohttps://api.postcept.comPoint at a self-hosted or staging API.

Create an API key in the Postcept dashboard under API keys.

Use with Claude Desktop / Claude Code

{
  "mcpServers": {
    "postcept": {
      "command": "npx",
      "args": ["-y", "@postcept/mcp"],
      "env": { "POSTCEPT_API_KEY": "pcpt_sk_..." }
    }
  }
}

Tools

ToolPurpose
verify_refundVerify a claimed refund (exists, amount/currency/customer match, not duplicated).
verify_cancellationVerify a subscription was actually cancelled.
verify_ticketVerify a support ticket is in the expected state.
get_verificationFetch a past verification and its signed receipt by id.
reconcile_verificationRe-verify a past verification against the live system of record.
verified_completion_rateRead the organization's Verified Completion Rate.

Every verify_* tool accepts test: true to run against the deterministic sandbox connector (excluded from your Verified Completion Rate), so an agent can exercise the full flow without a live system of record.

A non-verified result (incomplete, duplicated, mismatched, policy_failed) means the work is not done. Surface the gap and recover.

Advisory, by design

MCP puts the verification call in the agent's hands, which makes it the right integration for development, demos, and workflows where the agent's judgment is already trusted. It is advisory: an agent can skip the call, pass the wrong identifiers, or ignore the answer.

For consequential actions, enforce the decision outside the agent. The workflow or orchestrator calls the Postcept API (or the SDK's guard()) itself and branches on safe_to_claim_complete before anything customer-facing happens. The agent then receives the allowed outcome instead of deciding it. Both patterns use the same API and the same receipts, what changes is who owns the branch.

Development

pnpm --filter @postcept/mcp build       # compile to dist/
pnpm --filter @postcept/mcp typecheck
POSTCEPT_API_KEY=pcpt_sk_... node dist/index.js   # stdio server

الأسئلة الشائعة

ما هو io.github.Postcept/mcp؟

Verify agent actions against the system of record and get signed completion receipts.

كيف أثبّت io.github.Postcept/mcp؟

يعمل على جهازك. في Claude Code: claude mcp add io-github-postcept-mcp -e 'POSTCEPT_API_KEY=<your postcept_api_key>' -- npx -y @postcept/mcp@0.3.3. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.

هل يحتاج io.github.Postcept/mcp إلى مفتاح API؟

نعم. يتطلب POSTCEPT_API_KEY، وتضبطها في إعداداته.

هل io.github.Postcept/mcp مفتوح المصدر؟

نعم. شيفرته متاحة على GitHub بترخيص MIT.

من يصون io.github.Postcept/mcp؟

ينشره Postcept. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.

من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.