Rebar

Event-sourced ticket tracker + Jira reconciler, exposed as a Python library, CLI, and MCP server.

Connector by navapbc · GitHub account verified by the MCP Registry

IndexedApache-2.0Local (stdio)★ 4

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/navapbc-rebar

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

About

Event-sourced ticket tracker + Jira reconciler, exposed as a Python library, CLI, and MCP server.

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list, install config and code. Checked Oct 25, 2026.

Tools: 16 read · 3 write · 0 delete · 6 not yet classified
Secrets: 18 (API keys, tokens or passwords)
Install scripts: None found
Runs as: Python package

Tools by what they do 25

Read from the source code; the running server may list different tools.

Read 16 · Look things up without changing anything.

audit_trail
explain_criterion
gate_status
get_workflow_result
get_workflow_status
glob
grep
plan_review_status
read_file
rebar
review_plan
scan_spec

Show 4 more tools

verify_completion
verify_completion_status
verify_finding
verify_findings

Write 3 · Create, change, send or run things.

run_workflow
sign_review
submit_review

Not yet classified 6 · We could not tell from the name and description.

emit_findings
render_workflow
review_code
review_plan_start
route
verify_completion_start

Secrets and settings it asks for

Secrets: values you paste in that let it act as you.

REBAR_MCP_AUTH_CUSTOM_IMPORT
REBAR_MCP_AUTH_ENABLED
REBAR_MCP_AUTH_INTROSPECTION_ALLOW_MISSING_AUD
REBAR_MCP_AUTH_INTROSPECTION_CLIENT_SECRET_ENV
REBAR_MCP_AUTH_JWT_ALGORITHMS
REBAR_MCP_AUTH_JWT_EXPECTED_TYP
REBAR_MCP_AUTH_JWT_ISSUER
REBAR_MCP_AUTH_JWT_JWKS_REFETCH_COOLDOWN
REBAR_MCP_AUTH_JWT_JWKS_TIMEOUT
REBAR_MCP_AUTH_JWT_JWKS_URI
REBAR_MCP_AUTH_JWT_LEEWAY
REBAR_MCP_AUTH_PROXY_IDENTITY_HEADER

Show 6 more

REBAR_MCP_AUTH_PROXY_SCOPES
REBAR_MCP_AUTH_PROXY_SECRET_ENV
REBAR_MCP_AUTH_PROXY_SECRET_HEADER
REBAR_MCP_AUTH_REQUIRED_SCOPES
REBAR_MCP_AUTH_STATIC_TOKENS_FILE
REBAR_MCP_AUTH_STRATEGIES

Other settings (environment variables or headers).

REBAR_MCP_ALLOW_JIRA_SYNC
REBAR_MCP_ALLOW_LLM
REBAR_MCP_ALLOW_UNAUTHENTICATED_HTTP
REBAR_MCP_AUTH_INTROSPECTION_ALLOW_PRIVATE_HOST
REBAR_MCP_AUTH_INTROSPECTION_CLIENT_ID
REBAR_MCP_AUTH_INTROSPECTION_ENDPOINT
REBAR_MCP_AUTH_ISSUER_URL
REBAR_MCP_AUTH_JWT_ALLOW_PRIVATE_JWKS_HOST
REBAR_MCP_AUTH_RESOURCE_SERVER_URL
REBAR_MCP_HTTP_ALLOWED_HOSTS
REBAR_MCP_HTTP_ALLOWED_ORIGINS
REBAR_MCP_HTTP_HOST

Show 6 more settings

REBAR_MCP_HTTP_PATH
REBAR_MCP_HTTP_PORT
REBAR_MCP_HTTP_TLS_AT_EDGE
REBAR_MCP_READONLY
REBAR_MCP_TRANSPORT
REBAR_ROOT

Files it touches

/Users/joeoakhart/.claude/jobs/98d05d90/tmp/children_review.json
/Users/joeoakhart/.claude/jobs/98d05d90/tmp/foundation_review_3pass.json
/var/gerrit/.ssh
~/.claude/jobs/3ef65161/tmp
~/.claude/projects
/dev/fd
/dev/null
/dev/stderr
/dev/stdout
/Library/Apple
/opt/homebrew/bin/ast-grep
/opt/homebrew/bin/ctags
/opt/homebrew/bin/semgrep
/private/tmp
/proc/meminfo
/proc/self/ns/pid
/proc/sys/kernel/random/boot_id
/tmp/rebar_runaway_transcript.jsonl
/tmp/recon-probe.XXXXXX
/Users/joeoakhart/legacy-modernization-navigator/.tickets-tracker
/Users/joeoakhart/rebar
/Users/joeoakhart/rebar/.tickets-tracker
/Users/joeoakhart/rebar/docs/experiments/plan-review-gate
/Users/joeoakhart/rebar/docs/experiments/plan-review-gate/criteria/criteria_v6.json
/Users/joeoakhart/rebar/docs/experiments/plan-review-gate/criteria/criteria_v7.json
/Users/joeoakhart/rebar/docs/experiments/plan-review-gate/criteria/criteria_v8.json
/Users/joeoakhart/rebar/src/rebar
/Users/joeoakhart/snap-oakhart-manual/snap-oakhart-manual
/usr/lib/systemd
/usr/libexec
/usr/sbin
/var/gerrit/site
/var/gerrit/site/mcp-code
/var/gerrit/site/mcp-tickets
/var/gerrit/site/reviewbot-tickets
/var/gerrit/site/reviewbot/usage.jsonl
/var/gerrit/site/reviewbot/voted.db
/var/lib/rebar/gate-scratch
/var/tmp
Your home directory (~)

Tools (25)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

audit_trail
Read a ticket's complete plan, completion, and code-review audit trail. Plan and related code-review sidecar histories are newest-first; completion includes its attestation and sidecar. Individual sidecar failures degrade to ``[]`` or ``None``. This read remains available under ``REBAR_MCP_READONLY=1``.
emit_findings
Emit pass-1 evidence records (no severity/confidence).
explain_criterion
Read a plan criterion or an author guide without an LLM. Guide names are ``plan`` (passing plans), ``review`` (code review), and ``commit-trailer`` (the required ``rebar-ticket:`` format), using the same lookup as ``rebar explain``. Failures return ``{error, kind, message}``, where kind is ``unknown-id``, ``malformed-registry``, or ``missing-file``.
gate_status
Poll an async plan-review or completion run without executing it. Replaying the local gate index returns ``{job_id, status, ticket_id, gate_type, verdict?, error?, durable?, findings?}``. Status is ``running``, then ``passed`` or ``failed``; stale runs fail diagnostically, ``attaching`` awaits a duplicate's index record, and ``unknown`` marks an unrecognized ID. ``durable`` reports signed-certificate currency. Read plan findings only after ``findings.readable`` is true.
get_workflow_result
Read a workflow run's outputs via replay -> {run_id, status, terminal_step, terminal_output, outputs, error}. The terminal step's output is the run result. Typed read tool (workflow_run schema), always available. Bulky outputs are elided to stay under the MCP token budget (``truncated: true``); read the full result via the library/CLI.
get_workflow_status
Read a workflow run's current status via replay (no execution) -> {run_id, ticket_id, workflow_name, status, terminal_step, error, steps}. Typed read tool (mirrors src/rebar/schemas/workflow_run.schema.json), always available. ``ticket_id`` is resolved from the local run index when omitted.
glob
List files matching a glob pattern under the repo root.
grep
Search file contents with a regex (ripgrep). Returns matching lines with file:line.
plan_review_status
Report plan-certificate currency using the exact claim-gate check. This read uses no LLM or network. It returns ``{ok, verdict, reason, verified_at_sha, signed_at}``; current is ``certified``, otherwise ``stale-code``, ``stale-head``, ``stale-material``, ``stale-reopened``, ``stale-pin-drift``, ``stale-pin-missing``, ``stale-store``, ``unsigned``, ``wrong-kind``, ``not-closed``, ``malformed-pin``, ``malformed-phase``, ``incompatible-phase``, ``unverifiable-material``, or ``error``. ``reason`` names the drift; the SHA and timestamp are null without a readable certificate.
read_file
Read a file (optionally a line range). Returns the contents.
rebar
Read-only query of the rebar ticket store: the LIVE dependency graph, hierarchy, and linked artifacts (NOT a fed snapshot). Use 'show <id>' for a ticket incl. its deps/links/comments, 'deps <id>' for blockers/children, 'ready'/'next-batch <epic>' for unblocked work, 'search <query>' for related tickets and session logs.
render_workflow
Render a workflow (a .rebar/workflows/<name> name or a file path) to a read-only Mermaid flowchart (TEXT; the host renders it to SVG, never committed). Large graphs degrade to a text outline. Read tool, always available.
review_code
Run the gate-backed LLM code review of a git range (base..head) -> an aggregated review_result dict (findings carry agreement + reviewers). ``source=attested`` (default) reads file context from a snapshot pinned at ``ref`` (default: the reviewed ``head``), a single ref/snapshot (no base+head snapshot pair); ``source=local`` reads the checkout. The diff is computed from ``REBAR_ROOT``'s object DB. Results carry ``source``/``verified_at_sha``/``signable``. DISABLED unless REBAR_MCP_ALLOW_LLM=1 (live, billable LLM call(s); reaches network + filesystem + git). Needs the 'agents' extra + an API k…
review_plan
Review a whole plan through the P1-P11 find/verify/decide/coach passes. Returns ``{verdict: PASS|BLOCK|INDETERMINATE, blocking, advisory, coaching, indeterminate, coverage, signature?, source, verified_at_sha}``. A writable PASS signs the claim attestation and emits REVIEW_RESULT; readonly is pure. Unchanged valid attestations short-circuit unless ``force=True``. Tickets that cannot be claimed fast-fail unsigned and without an LLM, except in-progress or forced work. Attested source binds the reviewed SHA; local reads the checkout. A PASS is unusable until ``attestation.signed``: follow its s…
review_plan_start
Start plan review and immediately return ``{job_id, ticket_id, gate_type, status: "running"}``. Prefer this timeout-proof path, then poll ``plan_review_status`` for the durable attestation or ``gate_status`` for run state and sidecar readability. Duplicate ticket/basis starts share a job; ``force=True`` creates a fresh one. The local index and daemon do not survive process exit. Requires ``REBAR_MCP_ALLOW_LLM=1``.

Show 10 more tools

route
Pick which review overlays are RELEVANT to this plan.
run_workflow
Start a workflow run; returns {run_id, ticket_id, status:'running'} IMMEDIATELY (async — the run executes on a background **daemon thread**, so it survives client request timeouts). Poll get_workflow_status / get_workflow_result to read its outcome. DURABILITY IS LIMITED: the daemon thread does NOT survive the MCP process exiting, and there is NO reaper or automatic resume — if the process dies mid-run the run is left ``running`` forever and nothing re-drives it. Step effects ARE persisted to ``ticket_id``'s event log with idempotency markers, so a run can be **resumed only by explicitly re-in…
scan_spec
Batch-scan the store's open epics against a specification -> a review_result dict (gaps/conflicts/overlaps), epics evaluated in batches. ``ref``/``source`` select the verified code (``attested`` snapshot at ``ref`` default ``origin/main``, else ``local`` checkout); results carry ``source``/``verified_at_sha``. DISABLED unless REBAR_MCP_ALLOW_LLM=1 (live, billable LLM call(s)). Needs the 'agents' extra + an API key. Returns a plain dict and advertises NO outputSchema by design (documented NO_SCHEMA_EXEMPT).
sign_review
Persist a current PASS sidecar without an LLM and return ``{ok, signed, ticket_id, verdict, reason, signature?}``. Missing, stale, degraded, and non-PASS sidecars are refused with a reason. LLM enablement is unnecessary, but readonly mode disables this signature write.
submit_review
Submit the per-criterion review after gathering evidence.
verify_completion
Verify applicable criteria and return a cited ``{verdict: PASS|FAIL, findings, target, reviewers, runner, model, trace_id, source, verified_at_sha, signable}`` result. ``graph=None`` uses the type default (epics include descendants); booleans force subtree or own criteria. Attested source defaults to ``origin/main`` and can sign; local source cannot. Writable servers best-effort record every sidecar and sign a reusable attested PASS, reporting that outcome in ``record``; readonly servers do neither. Concurrent identical calls share one run; prefer ``verify_completion_start`` for a durable cli…
verify_completion_start
Start completion verification and immediately return ``{job_id, ticket_id, gate_type, status: "running"}``. Prefer this path, then poll ``verify_completion_status`` for the durable verdict or ``gate_status`` for run state. ``graph=None`` uses the type default; booleans force subtree or own-criteria verification and share the sync dedup key. Duplicate starts attach to one job. Local daemon/index durability ends with the process. Requires ``REBAR_MCP_ALLOW_LLM=1``.
verify_completion_status
Report durable completion-certificate currency without an LLM or network. This local close-gate check lets callers poll completion runs without another charge. It returns ``{ok, verdict, reason, verified_at_sha, signed_at}``; ``verdict`` is ``certified`` or ``unsigned``; its SHA and timestamp are null when no certificate exists.
verify_finding
Verify a pass-1 finding: attributes + binary sub-answers.
verify_findings
Verify ALL pass-1 findings in one pass — exactly one entry per finding_index.

Signals

Stars: 4
Forks: 1
Open issues: 0
Weekly downloads: 137
Last commit: Oct 24, 2026 (4 days ago)
Last release: Aug 30, 2026 (1 month ago)
Last package publish: Aug 30, 2026 (1 month ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name: io.github.navapbc/rebar
Version: 0.13.1
Auth: No auth
Packages: pypi nava-rebar
License: Apache-2.0
Repository: github.com/navapbc/rebar
First seen: Oct 24, 2026
Last checked: Oct 24, 2026
Source: Official MCP Registry github-graphql

Cite this page

Rebar MCP server. Agent Mart. https://agentmart.dev/connectors/navapbc-rebar (last updated 2026-10-24)