Skip to main content
STANDARDS INTEGRATION

Model Context Protocol (MCP)

Open-source MCP tool server for receipt verification, inspection, issuance, and bundling

Overview

@peac/mcp-server is an open-source MCP tool server that exposes five tools for working with PEAC-Receipts. It ships as a standalone npm package and can be integrated into any MCP-compatible host (Claude Desktop, Cursor, custom agents).

Three pure tools (verify, inspect, decode) require no signing keys and work entirely offline. Two privileged tools (issue, bundle) require an issuer signing key and are disabled by default and enabled only when an explicit capability token is provided.

All tool responses include structured outputs with metadata (server version, policy hash, protocol version) for downstream automation.

Tools

Pure (no keys required)

verify-receipt

Cryptographically verify a PEAC-Receipt signature and structure. Returns pass/fail with detailed check results.

inspect-receipt

Parse and display the decoded payload of a receipt, including claims, extensions, timestamps, and issuer info.

decode-receipt

Raw Base64url decode of a compact JWS receipt into its header, payload, and signature components.

Privileged (issuer key required)

issue-receipt

Sign and issue a new PEAC-Receipt with specified claims and extensions. Requires an Ed25519 issuer key.

create-bundle

Package receipts and supporting evidence into a portable .peac.tar.gz evidence bundle.

Getting Started

Install

npm install @peac/mcp-server

Claude Desktop Configuration

{
  "mcpServers": {
    "peac": {
      "command": "npx",
      "args": ["@peac/mcp-server"],
      "env": {
        "PEAC_POLICY_FILE": "./peac.txt"
      }
    }
  }
}

Pure tools are available immediately. Privileged tools (issue, bundle) require an issuer signing key via the PEAC_ISSUER_KEY environment variable and an explicit capability token.

Benefits

  • Offline verification: pure tools work without network access
  • Capability-based access control: privileged tools disabled by default
  • Structured outputs with metadata for downstream automation
  • Cryptographic verification of receipt signatures and structure
  • Evidence bundling for portable audit trails
  • Compatible with any MCP host (Claude Desktop, Cursor, custom agents)
  • Open source under Apache 2.0

Add receipt verification to your MCP workflow

Install @peac/mcp-server and start verifying receipts in minutes

Get Started