Back to Browse

Cubiczan Chp MCP Server

Developer ToolsModerate5.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Spend approval gate for AI agents: budget caps, HITL thresholds, signed audit hash.

About

Spend approval gate for AI agents: budget caps, HITL thresholds, signed audit hash.

Security Report

5.2
Moderate5.2Moderate Risk

This is a well-structured MCP server that wraps a spend-approval library with appropriate input validation and error handling. Authentication and authorization are delegated to the underlying @cubiczan/chp library, which is the correct design pattern. No malicious patterns, credential leaks, or dangerous operations detected. Permissions are appropriately scoped to the server's purpose of evaluating spending policies. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

5 files analyzed · 6 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

process_spawn

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-icohangar-ops-chp-mcp": {
      "args": [
        "-y",
        "@cubiczan/chp-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

@cubiczan/chp-mcp

icohangar-ops/cubiczan-chp-mcp MCP server

One-command MCP install for CHP Profile B spend / capital gates.

MCP Registry npm Conformance

Wraps @cubiczan/chp so Cursor, Claude Code, or any MCP client can call evaluate_spend_gate without vendoring protocol code. Engine digests match the normative golden vectors (Profile B 30/30).

How the pieces fit

MCP client (Cursor / Claude / …)
        │  tools/call
        ▼
┌───────────────────────────┐
│  MCP server (transport)   │  ← you are here (@cubiczan/chp-mcp)
│  evaluate_spend_gate      │
│  approve_spend            │
│  chp_content_hash         │
└─────────────┬─────────────┘
              │ depends on
              ▼
┌───────────────────────────┐
│  Published CHP packages   │
│  npm:  @cubiczan/chp                 (Profile B)
│  PyPI: consensus-hardening-protocol  (Profile A)
└───────────────────────────┘

For AGENTS.md + skills + Profile A decision_gate / decision_adversary, use agent-conductor instead.

Install

npm install -g @cubiczan/chp-mcp
# or one-shot
npx -y @cubiczan/chp-mcp

Cursor / Claude Desktop

{
  "mcpServers": {
    "chp": {
      "command": "npx",
      "args": ["-y", "@cubiczan/chp-mcp"]
    }
  }
}

Claude Code

claude mcp add chp -- npx -y @cubiczan/chp-mcp

Tools

ToolMaps toPurpose
evaluate_spend_gateevaluateGateLOCKED / HITL_REQUIRED / BLOCKED + claims + content hash
approve_spendapproveHumanHuman lock when HITL_REQUIRED (cannot override hard fails)
chp_content_hashcontentHashFloat-aware canonical SHA-256
chp_versionServer + protocol versions

Example — evaluate a spend

// tools/call evaluate_spend_gate
{
  "action": { "action": "LONG", "asset": "ETH", "notional": 300, "confidence": 0.9 },
  "policy": {
    "max_notional": 500,
    "daily_cap": 2500,
    "hitl_threshold": 250,
    "min_confidence": 0.55,
    "allowed_actions": ["LONG", "SHORT"]
  }
}

Related

Package / repoRole
@cubiczan/chpProfile B library (this server’s dependency)
consensus-hardening-protocolProfile A + normative spec
@cubiczan/agent-conductorFull MCP: contracts, skills, Profile A gates
@cubiczan/governed-mcp-gatewayHTTP MCP control plane
@cubiczan/codesentinel-mcpCodebase health MCP
cubiczan-resilience / @cubiczan/resilienceShared retry / timeout / audit primitives

Licence

MIT.

Reviews

No reviews yet

Be the first to review this server!