English Français العربية

Drawbridge

Official registry Security

Identity, secrets, and passwordless SSH provisioning for AI agents — Keycloak, vault, MCP tools.

Source code Website

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (sse)
Claude Code 
claude mcp add --transport sse drawbridge 'https://api.drawbridge.xorfox.sh/mcp/sse' --header 'Authorization: <Bearer <access_token>. To mint a token without a human in the loop: (1) POST {"agentName":"<name>","agentEmail":"<principal-email>"} to https://api.drawbridge.xorfox.sh/drawbridge/mcp/register — returns clientId, clientSecret, tokenEndpoint. (2) POST grant_type=client_credentials with those credentials to the token endpoint. The resulting access_token is scoped mcp:tools and audience-bound to /mcp; default TTL is 5 minutes, so refresh on the boundary.>'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "drawbridge": {
            "type": "sse",
            "url": "https://api.drawbridge.xorfox.sh/mcp/sse",
            "headers": {
                "Authorization": "<Bearer <access_token>. To mint a token without a human in the loop: (1) POST {\"agentName\":\"<name>\",\"agentEmail\":\"<principal-email>\"} to https://api.drawbridge.xorfox.sh/drawbridge/mcp/register — returns clientId, clientSecret, tokenEndpoint. (2) POST grant_type=client_credentials with those credentials to the token endpoint. The resulting access_token is scoped mcp:tools and audience-bound to /mcp; default TTL is 5 minutes, so refresh on the boundary.>"
            }
        }
    }
}

Frequently asked questions

What is Drawbridge?

Identity, secrets, and passwordless SSH provisioning for AI agents — Keycloak, vault, MCP tools.

How do I install Drawbridge?

It runs as a remote server. In Claude Code: claude mcp add --transport sse drawbridge 'https://api.drawbridge.xorfox.sh/mcp/sse' --header 'Authorization: <Bearer <access_token>. To mint a token without a human in the loop: (1) POST {"agentName":"<name>","agentEmail":"<principal-email>"} to https://api.drawbridge.xorfox.sh/drawbridge/mcp/register — returns clientId, clientSecret, tokenEndpoint. (2) POST grant_type=client_credentials with those credentials to the token endpoint. The resulting access_token is scoped mcp:tools and audience-bound to /mcp; default TTL is 5 minutes, so refresh on the boundary.>'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does Drawbridge need an API key?

Yes. It expects Authorization, which you set in its configuration.

Is Drawbridge open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains Drawbridge?

It is published by xorfox. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.