io.github.bolyra/mcp
MCP auth middleware: gate tool calls so only authorized agents can act.
Open source Open in the app JSON README (API)
About
MCP auth middleware: gate tool calls so only authorized agents can act.
Details
- Kind
- MCP servers
- Topic
- No topic detected
- Publisher
- bolyra
- Origin
- official
- Category
- ferramentas
- Transport
- local
- Version
- 0.6.4
- Open pull requests
- 4
- Last push
- 2026-09-08T02:51:47Z
- Repository state
- ativo
- Language
- TypeScript
- License
- Apache-2.0
- Added
- 2026-08-29 03:02:32
- Updated
- 2026-08-29 03:02:32
- Origin id
io.github.bolyra/mcp
README
# Bolyra Verified agent actions: authorization policy, signed receipts, and tamper-evident audit for AI agent tool calls. - **Domain:** [bolyra.ai](https://bolyra.ai) - **Company:** ZKProva Inc. - **License:** Apache-2.0 (with DCO sign-off — every commit requires `Signed-off-by:`) ## What this is When an AI agent calls a tool, Bolyra proves who — and what — authorized the action. Put the gateway in front of any MCP server (or embed the verifier in your agent platform) and every tool call gets four checks: credential verification, per-tool policy, replay protection, and a signed audit receipt. Bolyra ships in two tiers on the same verifier contract: - **Bolyra Core** — classical crypto, no circuits, no trusted setup: per-tool policy, nonce replay protection, ES256K-signed action receipts, credential binding against registered credentials, and JWT-based delegation claims ([`@bolyra/delegation`](delegation/)). This is the gateway's `--dev` mode; with a `credentials` section (or `--credentials`) configured, claimed identities and permission masks are enforced against the registry — unknown, forged, or expired credentials are denied fail-closed with signed receipts. Without registered credentials, permission claims remain self-asserted (the gateway warns at startup and flags the receipts). - **Bolyra ZK** — the privacy upgrade: humans prove uniqueness via a Semaphore v4-style enrollment circuit; AI agents prove EdDSA-signed credentials with cumulative-bit permissions; a delegation circuit narrows scope one-way (permissions can only drop, never widen), with the delegation path hidden from the verifier. A handshake binds the human and agent Groth16 proofs to a shared session nonce, verified atomically on-chain. Core gets you policy-gated, replay-protected, receipted actions. ZK gets you cryptographically bound verified actions **without disclosure** — the verifier learns that the predicate holds, not your credentials, policies, or delegation graph. You don't need ZK to gate your first MCP server with one command. **Building an agent platform?** Bolyra plugs in as an external verifier and gives you an enterprise security capability — verified agent actions — without rebuilding auth. See [bolyra.ai](https://bolyra.ai/#platforms). ## Repository layout ``` circuits/ Circom 2 circuits + snarkjs/rapidsnark proving contracts/ Hardhat — Solidity verifiers + on-chain registry sdk/ @bolyra/sdk (TypeScript, public API) sdk-python/ bolyra (Python — pure types + subprocess bridge) integrations/ langchain, crewai, mcp, openclaw, payment-protocols spec/ DID method, IETF-style draft, conformance runner examples/ mcp-demo, provider-mock docs/ quickstart, OWASP agentic mapping ``` ## Quickstart See [`sdk/QUICKSTART.md`](sdk/QUICKSTART.md) for the TypeScript SDK quickstart. ## Build & test ```sh npm install npm run compile:circuits npm run compile:contracts npm test # circuits fast + contracts FULL_PROOF=1 npm run test:circuits:slow # full Groth16/PLONK proving (~2 min) ``` ## Protocol Conformance 112 executable test vectors verify the implementation matches the protocol specification. CI runs them on every PR. See [`spec/CONFORMANCE.md`](spec/CONFORMANCE.md) for the current generated report. ```bash npm run conformance # run all 112 vectors npm run conformance:report # generate spec/CONFORMANCE.md ``` **Implementing your own EVC host?** 28 of those vectors test *host* behavior and run against any host in any language, with no install: ```bash npx @bolyra/evc-conformance --host "/path/to/your-host --flags" ``` See [`spec/IMPLEMENTER.md`](spec/IMPLEMENTER.md) for the full pass path — the Host-Under-Test contract, failure classes, troubleshooting, and a CI snippet. ## Contributing This project requires a Developer Certificate of Origin (DCO) sign-off on every commit. Use `git commit -s`. See [`CONTRIBUTING.md`](CONTRIBUTING.md) for details. ## License Apache-2.0. See [`LICENSE`](LICENSE).