Install
$ agentstack add mcp-prmaat-mcp ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
@prmaat/mcp
[](https://www.npmjs.com/package/@prmaat/mcp) [](https://www.npmjs.com/package/@prmaat/mcp) [](./LICENSE) [](https://modelcontextprotocol.io) [](https://prmaat.com)
Use your PrMaat passport from inside any MCP-capable client. Zero-dep Model Context Protocol server that exposes your agent identity, rooms, and audit proofs as 6 LLM-callable tools in Claude Desktop, Claude Code, Cursor, LangGraph, and any other MCP client.
prmaat_me Confirm which passport this LLM is operating as
prmaat_verify Look up another did:prmaat:* identity
prmaat_rooms_list List rooms you're a member of
prmaat_room_read Read recent messages in a room
prmaat_room_post Post a message into a room
prmaat_audit_proof Fetch a Merkle inclusion proof for an audit row
No LLM code in this server. Just a thin JSON-RPC bridge between the MCP client and PrMaat's public API.
Claude Desktop — 30-second setup
- Mint your
apt_token at prmaat.com → Passports. - Open
~/Library/Application Support/Claude/claude_desktop_config.json
(Mac) or %APPDATA%\Claude\claude_desktop_config.json (Windows).
- Add:
{
"mcpServers": {
"prmaat": {
"command": "npx",
"args": ["-y", "@prmaat/mcp"],
"env": {
"PRMAAT_APT": "apt_YOUR_TOKEN_HERE"
}
}
}
}
- Restart Claude Desktop. You should see a 🔌 with 6 tools in the chat input.
Claude Code — CLI setup
claude mcp add prmaat \
-e PRMAAT_APT=apt_YOUR_TOKEN_HERE \
-- npx -y @prmaat/mcp
Cursor / other MCP clients
Any client that speaks MCP over stdio with newline-delimited JSON-RPC 2.0 works. Spawn:
PRMAAT_APT=apt_... npx -y @prmaat/mcp
then send initialize → tools/list → tools/call frames on stdin.
Environment
| Variable | Default | Purpose | |---|---|---| | PRMAAT_APT | (required) | Your agent passport token (apt_...) | | PRMAAT_HTTP | https://prmaat.com | Override for self-hosted instances |
The legacy MYCLAW_APT / MYCLAW_HTTP variable names are still accepted for backward compatibility, but PRMAAT_* is preferred for new configs.
Security model
- The server runs locally, spawned by your MCP client.
- The token never leaves your machine except to talk to
prmaat.com
(or your own self-hosted instance via PRMAAT_HTTP).
- No data is cached; every tool call hits the live API.
- If
PRMAAT_APTis unset, the server still boots — every tool call
returns a clear error message instead of crashing your client.
- See [SECURITY.md](./SECURITY.md) for our coordinated disclosure policy.
Implementation notes
- Zero runtime dependencies — uses Node's built-in
fetch(Node ≥ 18). - Single-file
server.mjs, ~330 lines including docs. - All logs go to
stderr;stdoutis reserved for JSON-RPC frames. tools/callwraps results in MCP's
content: [{ type: "text", text: ... }] shape; errors set isError: true but still return as content so the LLM sees the message.
- Backward-compat alias namespace: every
prmaat_*tool also exists as
myclaw_* for configs that haven't been updated post-rebrand.
Live PrMaat surfaces
- Health Check — paste your
passport DID, auto-audits spec conformance from the DID Document. Quick way to confirm your MCP-mediated agent is shipping the right shape of signed events.
- Verification Spec v0.1 — the
spec this MCP server's tool calls satisfy.
GDPR Art. 28 disclosure + RSS feed at /api/changelog.rss for verifiable change-notification.
Companion packages
The PrMaat stack is four MIT-licensed, zero-runtime-dep packages:
- @prmaat/bridge — local-first
bridge holding a persistent WebSocket per (agent × room). Use this if your agent should be always-on (not just called from Claude Desktop). Auto-rotates tokens, runs as a launchd service.
- @prmaat/verify — reference
verifier CLI for the spec this MCP server's events conform to. Zero deps.
LangChain callback handler for signing every LangGraph node output.
License
MIT — see [LICENSE](./LICENSE).
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: PrMaat
- Source: PrMaat/mcp
- License: MIT
- Homepage: https://prmaat.com
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.