Skip to content

MANDATE Credential Broker

by projetnanocorp · remote · no sign-in to list tools · v0.1.0 · published by GitHub user projetnanocorp

MCP server for mandates, delegation, policy-gated execution, credential grants, and audit.

Deletes · 2Changes · 7
CompareRegistry entry

11 tools: 2 can delete or cancel things, 7 change things and 2 only read.

Scanned Oct 21, 2026

6 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http mandate https://mandate.nanocorp.app/mcp

Findings

Matches of fixed checks, with the text they matched.

6 info

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

11 tools

Deletes or cancels 2Claude Code: deny
  • broker.revoke-grantRevokes a broker grant by id and records the revocation to the ledger.1 finding

    Why it is in this group

    • The name "broker.revoke-grant" says "revoke": a word for removing or ending something.

    Findings

    Description, as the server wrote it
    Revokes a broker grant by id and records the revocation to the ledger.
  • mandate.revokeRevokes a mandate subtree and records the revocation to the hash-chained ledger.No findings

    Why it is in this group

    • The name "mandate.revoke" says "revoke": a word for removing or ending something.
    Description, as the server wrote it
    Revokes a mandate subtree and records the revocation to the hash-chained ledger.
Changes things 7Claude Code: ask
  • broker.register-credentialRegisters an opaque vault handle/reference only; plaintext secret fields are rejected and never ledgered.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    Description, as the server wrote it
    Registers an opaque vault handle/reference only; plaintext secret fields are rejected and never ledgered.
  • broker.request-accessAsks the canonical Policy Engine for an ALLOW decision before issuing a short-lived HMAC-sealed grant bound to credential, mandate, agent, scope, and expiry.2 findings

    Why it is in this group

    • The name "broker.request-access" says "request": a word for a change.

    Findings

    • Info

      The title mentions "credential".

      Matched text

      title: "Request short-lived credential grant"

      What this check looks for
    • Info

      The description mentions "credential".

      Matched text

      description: "...short-lived HMAC-sealed grant bound to credential, mandate, agent, scope, and expiry."

      What this check looks for
    Description, as the server wrote it
    Asks the canonical Policy Engine for an ALLOW decision before issuing a short-lived HMAC-sealed grant bound to credential, mandate, agent, scope, and expiry.
  • broker.useRedeems a sealed grant for the bound acting agent and executes the bound action through the Gateway and Policy Engine; does not expose plaintext secrets.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    Description, as the server wrote it
    Redeems a sealed grant for the bound acting agent and executes the bound action through the Gateway and Policy Engine; does not expose plaintext secrets.
  • mandate.authorize-actionSubmits an action through the Gateway and canonical Policy Engine; returns ALLOW, DENY, or REQUIRE_APPROVAL with ledger proof.No findings

    Why it is in this group

    • The description's first verb is "submit": a word for a change.
    Description, as the server wrote it
    Submits an action through the Gateway and canonical Policy Engine; returns ALLOW, DENY, or REQUIRE_APPROVAL with ledger proof.
  • mandate.delegateCreates a child mandate only when it is a no-escalation subset of the parent mandate.No findings

    Why it is in this group

    • The description's first verb is "create": a word for a change.
    Description, as the server wrote it
    Creates a child mandate only when it is a no-escalation subset of the parent mandate.
  • mandate.mintCreates an active human-granted mandate for an agent and records it to the hash-chained ledger.No findings

    Why it is in this group

    • The description's first verb is "create": a word for a change.
    Description, as the server wrote it
    Creates an active human-granted mandate for an agent and records it to the hash-chained ledger.
  • mandate.verify-proofRecords a proof payload hash and appends proof evidence to the hash-chained ledger.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Records a proof payload hash and appends proof evidence to the hash-chained ledger.
Only reads 2Claude Code: allow
  • broker.introspect-grantValidates a grant token seal, reports active/revoked/expired state, and records introspection to the ledger.1 finding

    Why it is in this group

    • The description's first verb is "validate": a word for reading.

    Findings

    Description, as the server wrote it
    Validates a grant token seal, reports active/revoked/expired state, and records introspection to the ledger.
  • mandate.discoverReturns this self-describing tool manifest.No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    Returns this self-describing tool manifest.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http mandate https://mandate.nanocorp.app/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__mandate__mandate_discover",
      "mcp__mandate__broker_introspect-grant"
    ],
    "ask": [
      "mcp__mandate__mandate_mint",
      "mcp__mandate__mandate_delegate",
      "mcp__mandate__mandate_authorize-action",
      "mcp__mandate__mandate_verify-proof",
      "mcp__mandate__broker_register-credential",
      "mcp__mandate__broker_request-access",
      "mcp__mandate__broker_use"
    ],
    "deny": [
      "mcp__mandate__mandate_revoke",
      "mcp__mandate__broker_revoke-grant"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as mandate. Review it before you use it.