Skip to content
Agentmart
Submit a tool

Rightos MCP

RightOS MCP: privacy-first QR queue/EV/pickup.

Connector by suomimasuda · GitHub account verified by the MCP Registry

IndexedMITLocal (stdio)
Write a review

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/suomimasuda-rightos-mcp

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

RightOS MCP: privacy-first QR queue/EV/pickup. 20 tools, no end-user PII.

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list, install config and code. Checked Oct 26, 2026.

Tools
10 read · 7 write · 1 delete · 2 not yet classified
Secrets
1 (API keys, tokens or passwords)
Install scripts
None found
Runs as
Node.js package

Tools by what they do 20

Read from the source code; the running server may list different tools.

Read 10 · Look things up without changing anything.

  • get_location_policy
  • get_location_queue
  • get_policy_history
  • get_token
  • list_locations
  • list_plans
  • list_policies
  • list_tokens
  • list_webhooks
  • verify_token

Write 7 · Create, change, send or run things.

  • cancel_token
  • create_location
  • create_webhook
  • holder_cancel_token
  • set_location_policy
  • transfer_token
  • use_token

Delete 1 · Delete, drop, revoke or wipe things.

  • delete_webhook

Not yet classified 2 · We could not tell from the name and description.

  • export_data
  • issue_token

Secrets and settings it asks for

Secrets: values you paste in that let it act as you.

  • RIGHTOS_API_KEY

Other settings (environment variables or headers).

  • RIGHTOS_BASE_URL

Network hosts it talks to 2

  • github.com · found in code
  • rightos.i-s3.com · found in code

Tools (20)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

  • cancel_token

    Cancel a Right Token (own organization only). Requires the RIGHTOS_API_KEY environment variable (operator API key).

  • create_location

    Create a location (shop, clinic, ev_charging, event, logistics, pickup, other). Returns 402 if the plan's location limit is exceeded. Requires the RIGHTOS_API_KEY environment variable (operator API key).

  • create_webhook

    Register an outbound webhook (up to 3 per organization, https only). Events: token.verified / token.used / token.cancelled / token.transferred / queue.approaching (defaults to all; queue.approaching fires only when the location policy sets approachingThreshold). The response includes the signing secret (whsec_...) EXACTLY ONCE — deliveries are signed via the x-rightos-signature header (t=<unix seconds>,v1=<hex HMAC-SHA256>). Requires the RIGHTOS_API_KEY environment variable (operator API key).

  • delete_webhook

    Delete an outbound webhook (own organization only). Requires the RIGHTOS_API_KEY environment variable (operator API key).

  • export_data

    Export all organization data (locations, tokens, verification logs, policy change history) as JSON. Contains no secret values. Requires the RIGHTOS_API_KEY environment variable (operator API key).

  • get_location_policy

    Get a location's effective policy (transferability, max transfers, default validity, holder self-cancellation). Resolution: industry preset -> country overlay -> location override. Public for transparency.

  • get_location_queue

    Public queue snapshot for a location (counts only, no PII). Optional tokenId adds aheadCount and queuePosition. Does not auto-call or assign staff (ADR-0024).

  • get_policy_history

    Policy change audit log for a location (before/after overrides, newest first). Append-only. Requires the RIGHTOS_API_KEY environment variable (operator API key).

  • get_token

    Get a Right Token (digital QR ticket) by its tokenId. Never returns the secret verification code.

  • holder_cancel_token

    Self-cancel a Right Token as its current holder (proven by the verification code). May be rejected by the location's policy (policy_cancel_disabled). Irreversible. Rate limited like verify.

  • issue_token

    Issue a Right Token (digital QR ticket). The verification code and wallet URL are returned EXACTLY ONCE — hand the walletUrl to the end user. Returns 402 if the plan's monthly limit is exceeded. Returns 409 queue_full when maxActiveTokens is reached. Requires the RIGHTOS_API_KEY environment variable (operator API key).

  • list_locations

    List your organization's locations. Requires the RIGHTOS_API_KEY environment variable (operator API key).

  • list_plans

    List RightOS pricing plans (globally uniform pricing, free tier available).

  • list_policies

    List the full policy knowledge base: industry presets per location type and country overlays (JP, US, GB, KR, TW, FR, DE, IT, ES, AU — informed by local ticket-resale laws). Useful when choosing a location type or proposing policy overrides. Defaults, not legal advice. Public.

  • list_tokens

    List your organization's Right Tokens. Filter by locationId, status, and since (ISO 8601). Requires the RIGHTOS_API_KEY environment variable (operator API key).

Show 5 more tools
  • list_webhooks

    List the organization's outbound webhooks (never includes signing secrets). Requires the RIGHTOS_API_KEY environment variable (operator API key).

  • set_location_policy

    Override a location's policy (partial update: transferable, maxTransfers, defaultValidityMinutes, verificationRequirement, holderCancellable, maxActiveTokens, enforceTimeWindow, requireVerifyBeforeUse, approachingThreshold). Set reset=true to restore the industry preset. Requires the RIGHTOS_API_KEY environment variable (operator API key).

  • transfer_token

    Transfer a Right Token to a new holder (re-keying: a new verification code is issued and the old one is invalidated immediately). Only the current holder can transfer. May be rejected by the location's policy (policy_transfer_disabled / transfer_limit_reached).

  • use_token

    Mark a Right Token as used after service (own organization only). Returns 409 verify_required when requireVerifyBeforeUse policy is enabled and the token is not yet verified. Requires the RIGHTOS_API_KEY environment variable (operator API key).

  • verify_token

    Verify a Right Token with its verification code. Result is success / failed / expired / cancelled / already_used / not_yet_valid (when enforceTimeWindow blocks verify before startTime). Rate limited (10/min per token).

Signals

Stars
0
Forks
0
Open issues
0
Weekly downloads
219
Last commit (this folder)
Oct 22, 2026 (6 days ago)
Last release
Oct 22, 2026 (6 days ago)
Last package publish
Oct 22, 2026 (6 days ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name
io.github.suomimasuda/rightos-mcp
Version
0.5.1
Auth
API key
Packages
npm @i-s3/rightos-mcp
License
MIT
Repository
github.com/suomimasuda/rightos-sdk
Website
rightos.i-s3.com/software/rightos/docs/mcp
First seen
Oct 24, 2026
Last checked
Oct 24, 2026
Source
Official MCP Registrygithub-graphql
Cite this page

Rightos MCP. Agent Mart. https://agentmart.dev/connectors/suomimasuda-rightos-mcp (last updated 2026-10-24)