MANDATE Credential Broker

io.github.projetnanocorpPublished by GitHub account projetnanocorpv0.1.0Updated Oct 24, 2026

MCP server for mandates, delegation, policy-gated execution, credential grants, and audit.

VerifiedStreamable HTTPWeb executableDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

A remote credential broker that lets an assistant mint, delegate and revoke mandates, get policy decisions on actions, and redeem short-lived grants without see

What you can do
Mint, delegate and revoke mandates, with delegation limited to no-escalation subsets of the parent and revocations recorded to a hash-chained ledger. Submit actions to a policy engine for ALLOW, DENY or REQUIRE_APPROVAL decisions with ledger proof. Register credentials as opaque vault handles only, request policy-checked access, and redeem sealed grants for a bound agent and scope. Verify proof payloads and introspect grants for active, revoked or expired state, recording each to the ledger. Discover the server's own tool manifest.
When to use it
Use it when an assistant must act under explicit, auditable human-granted authority: scoping what an agent may do, delegating narrower authority to sub-agents, gating sensitive actions on policy approval, and using credentials without exposing them.
Requirements
A remote streamable HTTP endpoint; no local package, environment variables or headers are declared. The manifest declares no authentication, though the tools describe human-granted mandates and vault-held credentials.
Before you install
It brokers access to real credentials and gates actions, so misconfigured mandates or grants could permit unintended actions. Minting, delegating, revoking and grant operations write to a hash-chained ledger. Credential registration accepts only opaque vault handles and rejects plaintext secrets. Actions are executed through the broker's gateway, so the service sees the actions it authorizes.

Installation

In SourceWeft

  1. Open MANDATE Credential Broker in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.projetnanocorp%2Fmandate/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "mandate-credential-broker": {
      "type": "http",
      "url": "https://mandate.nanocorp.app/mcp"
    }
  }
}

README

This repository has no README.

Tools

11

mandate.discover

Discover MANDATE agent tools

Returns this self-describing tool manifest.

Takes no parameters.

mandate.mint

Mint root mandate

Creates an active human-granted mandate for an agent and records it to the hash-chained ledger.

Takes no parameters.

mandate.delegate

Delegate mandate

Creates a child mandate only when it is a no-escalation subset of the parent mandate.

Takes no parameters.

mandate.authorize-action

Authorize gateway action

Submits an action through the Gateway and canonical Policy Engine; returns ALLOW, DENY, or REQUIRE_APPROVAL with ledger proof.

Takes no parameters.

mandate.verify-proof

Record or verify proof

Records a proof payload hash and appends proof evidence to the hash-chained ledger.

Takes no parameters.

mandate.revoke

Revoke mandate

Revokes a mandate subtree and records the revocation to the hash-chained ledger.

Takes no parameters.

broker.register-credential

Register credential handle

Registers an opaque vault handle/reference only; plaintext secret fields are rejected and never ledgered.

Parametersmetadatavault_handlerequired

broker.request-access

Request short-lived credential grant

Asks the canonical Policy Engine for an ALLOW decision before issuing a short-lived HMAC-sealed grant bound to credential, mandate, agent, scope, and expiry.

Takes no parameters.

broker.use

Use credential grant

Redeems a sealed grant for the bound acting agent and executes the bound action through the Gateway and Policy Engine; does not expose plaintext secrets.

Takes no parameters.

broker.revoke-grant

Revoke credential grant

Revokes a broker grant by id and records the revocation to the ledger.

Takes no parameters.

broker.introspect-grant

Introspect credential grant

Validates a grant token seal, reports active/revoked/expired state, and records introspection to the ledger.

Takes no parameters.

Version history

1
  1. v0.1.0LatestSep 16, 2026

Score

75% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • License10 pts

    Declare a license in the repository or the registry entry.