An upstream-maintained MCP server for the Emilia Protocol authority control plane: it requests, tracks, and verifies signed receipts for exact agent actions at protected executor boundaries. It suits security teams that need finite agent mandates and portable evidence. It is not an identity system, policy engine, settlement rail, or certifier, and its preventive property depends on complete mediation of the protected path. The default tool surface is small, with broader tool sets behind explicit environment switches.
The Emilia Protocol MCP server provides exact-action approval for consequential agent actions. It runs over stdio and is launched with npx from the npm package @emilia-protocol/mcp-server. Per the manifest, it lets clients request, track, and verify signed receipts, and it acts as the MCP-facing front door to the Emilia Gate authority control plane, which enforces finite customer-owned mandates at protected executor boundaries. It advertises a default three-tool action front door, with optional environment switches for handshake, commit, and delegation tools and for the legacy 36-tool registry and reputation catalog. The server is maintained by the upstream Emilia Protocol project (official). It is authorization and evidence infrastructure, not an identity system, wallet, reputation score, settlement rail, or universal policy engine, and it does not require that a human approve every action: authority can come from a bounded mandate, a bounded capability, a quorum, or a relying-party composition of native evidence. Preventive control holds only where the deployment completely mediates the protected path; it constrains no path that bypasses the enforcement point.
{
"mcpServers": {
"emilia-protocol": {
"command": "npx",
"args": [
"-y",
"@emilia-protocol/mcp-server"
],
"env": {
"EP_API_KEY": ""
}
}
}
}