# policyvault-mcp Non-custodial Kaspa policy enforcement for AI agents; signers retain custody. - **Type:** MCP server - **Trust:** 60/100 (B), scored on the package rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 1.6.2 - **Author:** io.github.zapsoblige-hash - **License:** Apache-2.0 - **npm:** policyvault-mcp - **Source:** https://github.com/zapsoblige-hash/PolicyVault - **Compatible clients:** claude-code, cursor, copilot, gemini (basis: transport) ## Trust 60/100 (B), scored on the package rubric - Publisher verified: no - Install scripts: nothing suspicious found - Prompt-injection scan: not run - Obfuscation scan: not run - Evidence age: 3 days ## Security scan - **Status:** clean - **Scanned:** 2026-10-02T15:45:14.170Z - **Version scanned:** 1.6.2 - **CVEs:** none found by OSV at scan time ## Tools 20 declared. Statically extracted from the shipped source — a floor on the surface, not a census. - `policyvault-mcp` — Thin MCP adapter over the PolicyVault REST/Agent API (machine-identity authenticated; no privileged path) - `policyvault_capabilities` — Read the server's public capability/version discovery document (API version, network, supported covenant versions, v0.4 actions, scope enum, schema versions, li - `policyvault_list_vaults` — List the vaults this machine identity's creating wallet participates in (tenancy is enforced server-side; foreign vaults are invisible). Requires scope read:vau - `policyvault_vault` — Read one vault's manifest detail (policy template, agent registry, live covenant state, operational status) by 64-hex vaultId. Requires scope read:vaults. Read- - `policyvault_vault_audit` — Read the durable audit/activity events recorded for one vault (builds, approvals, submissions, governance and risk outcomes, reconciliation). Requires scope rea - `policyvault_audit_feed` — Read the global activity feed, server-scoped to vaults this identity's creating wallet participates in. Requires scope read:audit. Read-only. - `policyvault_network_status` — Read the configured Kaspa node's status (network id, sync state, UTXO index, virtual DAA score). Requires scope read:network. Read-only. - `policyvault_simulate_request` - `policyvault_create_request` - `policyvault_request_status` — Read one durable wallet request (state machine BUILT/AWAITING_APPROVALS/FINALIZED/SUBMITTED/CONFIRMED/REJECTED/FAILED, canonical review, manifest hash, txid onc - `policyvault_list_requests` — List durable v0.4 wallet requests visible to this identity (optionally narrowed to one vault, optionally only open/actionable states). Requires scope read:reque - `policyvault_reject_request` — Mark one open wallet request REJECTED (housekeeping for a stale or superseded build — e.g. after a policy change made it unsubmittable). Affects only the durabl - `policyvault_governance_proposals` — List governance proposals (authority-expansion ceremonies with owner-signature approvals) visible to this identity, optionally narrowed to one vault. Requires s - `policyvault_governance_proposal` — Read one governance proposal (classification, quorum, collected approvals, consumption state) by proposalId. Requires scope read:governance. Read-only. - `policyvault_risk_evaluation` — Read one durable risk-evaluation record (decision ALLOW/REVIEW/DENY, codes, adapter evidence, release state) by evaluationId. Requires scope read:risk. Read-onl - `policyvault_org_roots` — List v0.7 ON-CHAIN ORGANIZATIONAL ROOTS visible to this identity (consensus-enforced M-of-N owner authority — distinct from a HOSTED organization, which grants - `policyvault_org_root` — Read one v0.7 organizational root's full record (owner slots, thresholds M/K/R, freeze flag, generation/nonce, pending request, live outpoint) plus authorityMod - `policyvault_org_root_requests` — List every durable request against one organizational root (root genesis, rooted-vault genesis, or a root-authorized owner action), or read one by requestId — p - `policyvault_create_org_root_request` - `policyvault_create_v7_request` ## Install **Verdict: review** — Installable, but 1 thing to check first: No publisher has proved control of this listing; it is indexed, not vouched for. **Cautions** (coverage gaps and advisories — never blocking) - No publisher has proved control of this listing; it is indexed, not vouched for. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"policyvault\": {\n \"command\": \"npx\",\n \"args\": [\n \"-y\",\n \"policyvault-mcp\"\n ],\n \"env\": {\n \"POLICYVAULT_MCP_TOKEN\": \"\"\n }\n }\n }\n}" ``` **Credentials it will ask for** (names only — Forge never holds a value): - `POLICYVAULT_MCP_TOKEN` — Policyvault Mcp Token (required) Placeholders only. Forge never holds, brokers, or transmits a credential value — replace each in your own config file. Do not send a value back to Forge; no Forge endpoint accepts one. - This entry needs 1 credential (1 required). The generated config carries placeholders, so it will fail in the editor rather than at runtime if they are left unset. ## Blast radius Moderate blast radius — holds an api key; runs on your machine. - Floor 21, ceiling 21 (tier: moderate) - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/policyvault-mcp - Install plan: https://forgeregistry.com/api/v1/packages/policyvault-mcp/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/policyvault-mcp - HTML page: https://forgeregistry.com/registry/policyvault-mcp - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.