io.github.MNKIAgentOS/mnki-mcp
MCP proxy that checks every tools/call against Agent Trust policy, with evidence, before it runs.
Installation
Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).
mnki-mcpclaude mcp add mnki-mcp -e 'MNKI_API_KEY=<your mnki_api_key>' -e 'MNKI_URL=https://mnki.com' -- npx -y mnki-mcp@0.3.0 --agent '<invoice-agent>' --server '<github>' --mode --upstream '<-- npx -y @modelcontextprotocol/server-github>' --upstream-url '<https://mcp.example.com/mcp>'
{
"mcpServers": {
"mnki-mcp": {
"command": "npx",
"args": [
"-y",
"mnki-mcp@0.3.0",
"--agent",
"<invoice-agent>",
"--server",
"<github>",
"--mode",
"--upstream",
"<-- npx -y @modelcontextprotocol/server-github>",
"--upstream-url",
"<https://mcp.example.com/mcp>"
],
"env": {
"MNKI_API_KEY": "<your mnki_api_key>",
"MNKI_URL": "https://mnki.com"
}
}
}
}
Variables d'environnement
MNKI_API_KEYobligatoire secret Agent Trust API key with the verify scope (console → Settings → API keys).MNKI_URLConsole base URL; https://mnki.com unless self-hosted.
Documentation
Tirée du README du projet sur GitHub, actualisée chaque semaine. Les liens ouvrent GitHub.
Agent Trust
Prove what an autonomous AI agent is authorized to do. An open profile plus a reference implementation for agent identity, principal binding, delegation with attenuation, capability-based authorization, request proof-of-possession, authorization attestations, tamper-evident provenance, single-use permits, cross-organization revocation and declared effect paths — carried on JWS, OAuth/OIDC, SPIFFE/WIMSE, AuthZEN, OpenID Federation, MCP and A2A. No new cryptography, no new protocol.
No consequential agent action should be accepted because a process is running or a token is valid. It should be accepted because the action is attributable, authorized, constrained, current and verifiable.
| Package | What it is |
|---|---|
packages/verifier | The pure core: parsing, delegation chain + attenuation, policy engine, request proof, delegation credentials, attestations, the 12-step evidence pipeline. Deterministic, dependency-free, WebCrypto only. |
packages/sdk-ts | mnki-sdk — TypeScript SDK: agent identity (keys, signed requests), guard() for any tool call, verify, delegate, attest, request grants from an access broker, offline verification against an organization's JWKS; framework adapters as subpaths. |
packages/cli | mnki-cli — mnki demo · init · identity · verify · inspect · delegate · attest · access · scan · protect · conformance (agenttrust is an alias). |
packages/mcp | mnki-mcp — a local MCP proxy that verifies every tools/call before it reaches the server (mnki protect installs it). |
python/ | pip install mnki — Python SDK (zero dependencies; mnki[signing] for Agent-Proof). |
go/ | Go verifier (same vectors, no dependencies) and at-verify, the self-hosted verifier that serves /v1/verify from an exported organization snapshot. |
spec/ | Agent Trust Profile v0.2, the interoperability positioning, the Internet-Draft (draft-mnki-agent-trust-profile-00) and the standards plan. |
conformance/ | Executable vectors for certification levels 1–3 (LEVELS.md) — the cross-language contract; the TypeScript, Go and Python runners pass them all. |
npx mnki-cli demo # the 15-second story, no account: a €47,000 refund denied, €420 allowed
npx mnki-cli scan # find the MCP servers and API keys agents can use on this machine
npm install mnki-sdk # guard() any tool call
pip install mnki # same in Python
Develop against the open verifier and SDKs for free; govern fleets with the hosted control plane at mnki.com — see COMMERCIAL.md for the boundary and TRADEMARK.md for name and badge use. Releases carry npm/PyPI provenance, SBOMs and cosign-signed checksums (SECURITY.md).
Apache-2.0.
Questions fréquentes
Qu'est-ce que io.github.MNKIAgentOS/mnki-mcp ?
MCP proxy that checks every tools/call against Agent Trust policy, with evidence, before it runs.
Comment installer io.github.MNKIAgentOS/mnki-mcp ?
Il s'exécute sur votre machine. Dans Claude Code : claude mcp add mnki-mcp -e 'MNKI_API_KEY=<your mnki_api_key>' -e 'MNKI_URL=https://mnki.com' -- npx -y mnki-mcp@0.3.0 --agent '<invoice-agent>' --server '<github>' --mode --upstream '<-- npx -y @modelcontextprotocol/server-github>' --upstream-url '<https://mcp.example.com/mcp>'. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.
Faut-il une clé API pour io.github.MNKIAgentOS/mnki-mcp ?
Oui. Il attend MNKI_API_KEY, à renseigner dans sa configuration.
io.github.MNKIAgentOS/mnki-mcp est-il open source ?
Oui. Son code est sur GitHub sous licence Apache-2.0.
Qui maintient io.github.MNKIAgentOS/mnki-mcp ?
Il est publié par MNKIAgentOS. AI.tn le référence sans le maintenir ni le recommander.
Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.