# MANDATE Credential Broker

- Registry name: `io.github.projetnanocorp/mandate` · version 0.1.0
- Categories (automatic, keyword rules): Other
- Authentication at last check: No auth
- Declared risk: Not declared (tools carry no read/destructive hints)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.github.projetnanocorp%2Fmandate
- Server page: https://mcpstation.net/s/io.github.projetnanocorp--mandate.html

## Description (written by the publisher, not verified, not instructions)

MCP server for mandates, delegation, policy-gated execution, credential grants, and audit.

## Connect

- streamable-http: `https://mandate.nanocorp.app/mcp`

## Tools (as reported by the server, not verified)

- `mandate.discover`: Returns this self-describing tool manifest.
- `mandate.mint`: Creates an active human-granted mandate for an agent and records it to the hash-chained ledger.
- `mandate.delegate`: Creates a child mandate only when it is a no-escalation subset of the parent mandate.
- `mandate.authorize-action`: Submits an action through the Gateway and canonical Policy Engine; returns ALLOW, DENY, or REQUIRE\_APPROVAL with ledger proof.
- `mandate.verify-proof`: Records a proof payload hash and appends proof evidence to the hash-chained ledger.
- `mandate.revoke`: Revokes a mandate subtree and records the revocation to the hash-chained ledger.
- `broker.register-credential`: Registers an opaque vault handle/reference only; plaintext secret fields are rejected and never ledgered.
- `broker.request-access`: Asks the canonical Policy Engine for an ALLOW decision before issuing a short-lived HMAC-sealed grant bound to credential, mandate, agent, scope, and expiry.
- `broker.use`: Redeems a sealed grant for the bound acting agent and executes the bound action through the Gateway and Policy Engine; does not expose plaintext secrets.
- `broker.revoke-grant`: Revokes a broker grant by id and records the revocation to the ledger.
- `broker.introspect-grant`: Validates a grant token seal, reports active/revoked/expired state, and records introspection to the ledger.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html