Chp MCP

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/icohangar-ops-chp-mcp

About

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools

2 read · 5 write · 0 delete · 5 not yet classified

Secrets

None asked for

Install scripts

Not scanned yet

Runs as

Node.js package

Tools (12)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

• approve_spend

  Human-in-the-loop approval for a proposal that returned HITL_REQUIRED. Cannot approve BLOCKED / hard-rule failures (spec §6.3 / §6.5). When tool + bound_args are supplied, mints a signed authorization receipt.

• authorize_tool_call

  Authorize a tool call against a previously issued receipt. Changed arguments (including host-bound tenant/index), expired or replayed receipts, MAC failure, host-bound override, and binding mismatch all deny. Presenting only an allowlist match denies with allowlist_is_not_authorization.

• chp_content_hash

  SHA-256 over float-aware canonical JSON (CHP §3.1) — matches Python consensus-hardening-protocol digests for the same object.

• chp_version

  Report MCP server and CHP Profile B protocol versions.

• evaluate_spend_gate

  Run CHP Profile B capital/spend gate on a proposed action. Returns LOCKED, HITL_REQUIRED, or BLOCKED with claims and a content hash. Hard policy violations cannot be overridden by a human. BLOCKED is also written as a structured policy_deny to the CHP-signed audit ledger.

• evaluate_tool_approval

  Evaluate a proposed MCP tool call. A managed allowlist is not a grant — allowlisted tools still return RECEIPT_REQUIRED. Host-injected fields (host_bound / _meta.cubiczan.host_bound) are merged into args_hash; the model cannot override them. Wildcards, missing resource, or unparseable arguments deny on ambiguity.

• inspect_audit_ledger

  Read the CHP-signed deny / authorize / execute ledger and verify the chain. Also lists the synthetic scoped reference tools.

• issue_approval_receipt

  Record a human allow/deny and return a signed approval receipt. The MAC covers actor, tool, resource, args hash (host ∪ model), policy version, risk, expiry, decision, and nonce (HMAC-SHA256 over CHP canonical JSON). Signing key from CHP_RECEIPT_KEY / AUDIT_LEDGER_KEY, or the documented insecure default.

• place_equity_order

  Synthetic equity order at a simulated venue. Requires scope trading:equities:place and a signed authorization receipt. HITL at/above the default $250 notional.

• rebalance_portfolio

  Synthetic portfolio rebalance. Scope portfolio:rebalance. HITL at/above $1,000 notional.

• request_authorization

  Request a signed authorization receipt for a scoped reference tool (place_equity_order, wire_treasury_transfer, rebalance_portfolio). Auto-lock mints a receipt; HITL_REQUIRED waits for approver; hard fails return a structured deny that is already on the audit ledger.

• wire_treasury_transfer

  Synthetic treasury wire. Scope treasury:wire. Default hitl_threshold is 0 — a human approval receipt is always required before the simulated rail queues.

Signals

Stars

0

Forks

0

Open issues

0

Weekly downloads

20

Last commit

Sep 13, 2026 (1 month ago)

Last release

Aug 22, 2026 (2 months ago)

Last package publish

Aug 22, 2026 (2 months ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name

io.github.icohangar-ops/chp-mcp

Version

0.1.2

Auth

No auth

Packages

npm @cubiczan/chp-mcp

License

MIT

Repository

github.com/icohangar-ops/cubiczan-chp-mcp

First seen

Oct 24, 2026

Last checked

Oct 24, 2026

Source

Official MCP Registrygithub-graphql