io.github.Al-Adnane/kasbah-mcp
NPM · @YOBEKASBAH/MCP-SERVER · SCANNED AUG 3
Governance layer for agentic AI — signed, verifiable receipts for every agent action.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →
Supply Chain Security100
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- No production dependencies, so there is no dependency health to assess. View diagnostics → Pass
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 27 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability42
- AI-judged instruction clarity (poor).Fail
- Context-footprint check failed: tool/resource definitions use about 1767 tokens (~110/item across 16 items; 16 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management27
- Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage90
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 69% of tool parameters carry a description.Partial
Capabilities20
- Spec-recency check failed: implements MCP spec 2024-11-05; the latest is 2026-07-28. See how to fix → Fail
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
npm · @yobekasbah/mcp-server
claude mcp add al-adnane-kasbah-mcp -- npx -y @yobekasbah/mcp-server
codex mcp add al-adnane-kasbah-mcp -- npx -y @yobekasbah/mcp-server
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"al-adnane-kasbah-mcp": {
"type": "local",
"command": [
"npx",
"-y",
"@yobekasbah/mcp-server"
],
"enabled": true
}
}
} openclaw mcp add al-adnane-kasbah-mcp --command npx --arg -y --arg @yobekasbah/mcp-server
mcp_servers:
al-adnane-kasbah-mcp:
command: "npx"
args: ["-y", "@yobekasbah/mcp-server"] {
"mcpServers": {
"al-adnane-kasbah-mcp": {
"command": "npx",
"args": [
"-y",
"@yobekasbah/mcp-server"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 2 Aug 26 +19
- Malware scan: unverified → pass ▲ security
- Stability: unverified → 0.23 ▲ functional
- 1 Aug 26 −11
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 31 Jul 26 −18
- Malware scan: pass → unverified ▼ security
- 27 Jul 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 26 Jul 26 71
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 3 Aug 2026 · Analysed npm/@yobekasbah/[email protected]
Provenance none
Ecosystem: npm · Outcome: none
Dependencies 0 packages
0 packages in the resolved dependency tree.
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
kasbah_advisory ~141
Run a single advisory analyzer directly. Modules: detectgpt (AI-text), intent (multi-step trajectory), chsh, conformal (anytime-valid), dobft (perturbed-observer collusion), flag-fusion (correlation-aware evidence), evasion-bound (orthogonal-manifold cost), bounded (advisory operator). All are bounded-advisory and never DENY.
| Name | Type | Req | Description |
|---|---|---|---|
| module | string | yes | — |
| payload | object | — | module-specific body (e.g. {text} for detectgpt, {steps} for intent, {score} for conformal/bounded, {flags} for flag-fusion) |
No output schema declared.
No examples provided.
kasbah_attest ~180
Call this BEFORE any side-effecting action (file write, shell exec, HTTP request, payment, tool call, agent spawn). Returns a verdict (ALLOW / WARN / DENY) and a cryptographic receipt anyone can verify offline, forever. If the verdict is DENY, do not proceed.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | short verb for what you are about to do (e.g. "file_write", "shell_exec", "http_post", "agent_spawn") |
| context | string | — | optional: why you are doing this (for the auditor) |
| input | string | yes | the actual content you are about to act on — command, file body, URL, prompt. Hashed before signing. |
| surface | string | — | optional: where you run (e.g. "claude-code", "cursor", "agent-runtime") |
No output schema declared.
No examples provided.
kasbah_check_compliance ~276
Evaluate an agent action against pre-certified HIPAA, GDPR, SOC 2 Type II, PCI-DSS, and BIOMETRIC_GUARD rule packs BEFORE it runs. BIOMETRIC_GUARD blocks facial micro-expression / silent-speech / subvocal / BCI / QAI surveillance attempts. Returns ALLOW / WARN / DENY / REQUIRE_APPROVAL with the cited rule ID (e.g. "H-002: SSN requires redaction", "B-001: facial micro-expression capture prohibited"). Use for any action touching regulated data (PHI, PII, payment data) or biometric/intent-inference surfaces.
| Name | Type | Req | Description |
|---|---|---|---|
| content | string | — | optional payload to scan for regulated data (SSN, card numbers, PHI) or surveillance vectors (silent-speech, subvocal, faceprint) |
| packs | string | — | comma-separated packs (default "HIPAA,GDPR,SOC2,BIOMETRIC_GUARD"). Options: HIPAA, GDPR, SOC2, PCI_DSS, BIOMETRIC_GUARD |
| target | string | — | target resource (e.g. patient_records, payment_data, user_profile, facial_expression) |
| verb | string | yes | action verb: READ / WRITE / DELETE / EXPORT / EXEC / CAPTURE_VIDEO / ACCESS_CAMERA … |
No output schema declared.
No examples provided.
kasbah_compliance_report ~64
Generate SOC 2 Type II / ISO 27001:2022 / NIST CSF 2.0 compliance evidence packets from the audit chain. Returns JSON or print-ready HTML. Use for auditor requests or compliance automation.
| Name | Type | Req | Description |
|---|---|---|---|
| framework | string | yes | — |
No output schema declared.
No examples provided.
kasbah_cost_guard ~142
Runaway-loop and spend governor. Checks whether an agent is stuck in a tool loop or burning budget, and recommends ALLOW / THROTTLE / BLOCK before the next call runs. Returns the decision plus live usage (cost/hr, tokens/min, brittleness band). Call before expensive or repeated tool calls.
| Name | Type | Req | Description |
|---|---|---|---|
| agent | string | yes | agent id (e.g. "orchestrator") |
| calls | number | — | how many identical recent calls have already happened (loop signal) |
| tokens | number | — | tokens per call (default 1200) |
| tool | string | yes | tool about to be called (e.g. "web_search") |
No output schema declared.
No examples provided.
kasbah_export_audit ~101
Export a tamper-evident, auditor-ready bundle of recent signed decisions. Each entry carries the verdict, Ed25519 signature, public-key fingerprint, and spec version. Hand it to SOC 2 / EU AI Act auditors — they verify offline.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | number | — | how many recent decisions to export (default 100, max 1000) |
| verdict | string | — | optional filter: ALLOW | WARN | DENY |
No output schema declared.
No examples provided.
kasbah_fti_query ~82
Query the Federated Threat Intelligence registry. Checks whether a prompt hash matches any known attack in the shared Merkle tree registry. Privacy-preserving: only SHA-256 hashes are submitted, never raw prompts.
| Name | Type | Req | Description |
|---|---|---|---|
| hash | string | — | SHA-256 hash of prompt to query |
| text | string | — | raw prompt (hashed locally, never transmitted) |
No output schema declared.
No examples provided.
kasbah_govern_turn ~161
Govern a full LLM turn through the Kasbah Governance Proxy: pass the message history and any proposed tool calls; get a bounded advisory verdict (CLEAR / WARN / REQUIRE_APPROVAL) plus an authoritative DENY for forbidden verbs / non-whitelisted domains / rate limits. Runs the validated detector, fail-closed governance engine, conformal-calibrated advisory ensemble, multi-step attack-trajectory detection, and a forward-secure audit. Use to wrap any agent turn before it executes tools.
| Name | Type | Req | Description |
|---|---|---|---|
| clearance | number | — | caller clearance 0-4 (OBSERVER..DIRECTOR), default 2 |
| messages | array | yes | conversation messages [{role, content}] |
| tools | array | — | proposed tool calls [{verb, target, domain}] |
No output schema declared.
No examples provided.
kasbah_mcp_servers ~34
List all MCP servers governed by Kasbah (ensemble, openclaw, ansari, quranfrontier).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
kasbah_mcp_teams ~88
Manage governance teams. Create, add members, assign MCPs, apply HIPAA/GDPR/SOC2/PCI-DSS policies.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | — |
| mcpServer | string | — | — |
| passportId | string | — | — |
| policyId | string | — | — |
| teamId | string | — | — |
| teamName | string | — | — |
No output schema declared.
No examples provided.
kasbah_os ~91
Access the kasbah-os engine (Python bridge). Defensive actions are live: health, govern (9-module RKHS ensemble turn), audit-verify. The offensive Mythos modules are introspection-only and cannot be executed.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | — |
| clearance | number | — | — |
| messages | array | — | for action=govern: [{role, content}] |
| tools | array | — | — |
No output schema declared.
No examples provided.
kasbah_redteam ~57
Run the live red-team benchmark against the current governance pipeline. Returns detection metrics (F1, precision, recall), degradation alerts, and trend data. Use to verify the system is working right now.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | — |
No output schema declared.
No examples provided.
kasbah_scan ~56
Quick content scan through the Kasbah detector. Returns CLEAR / WARN / REQUIRE_APPROVAL with threat classes and risk score. Use for single-prompt or short content safety checks.
| Name | Type | Req | Description |
|---|---|---|---|
| text | string | yes | content or prompt to scan |
No output schema declared.
No examples provided.
kasbah_status ~57
Show what Kasbah has done for you: decisions signed, actions blocked, $ saved from cheaper-model routing, top token sinks, receipts minted, and a link to your live dashboard. Real value-for-money at a glance. No arguments.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
kasbah_trace_intent ~107
Detect distributed, multi-step attacks invisible to single-step scanners: data-exfiltration pipelines, privilege-escalation chains, cost bombs. Pass the recent action steps (one "VERB target" per line). Returns CLEAN / WARN / THREAT / CRITICAL with the matched attack trajectory and confidence.
| Name | Type | Req | Description |
|---|---|---|---|
| steps | string | yes | recent steps, one per line as "VERB target" (e.g. "READ patient_db\nENCODE base64\nSEND external.com") |
No output schema declared.
No examples provided.
kasbah_verify ~130
Verify a Kasbah receipt cryptographically. Supports v2 (Ed25519) and v3 (Ed25519 + Merkle proofs). Returns whether the signature is genuine, the verdict, when it was signed, and by which engine key. Works offline.
| Name | Type | Req | Description |
|---|---|---|---|
| merkleProof | array | — | optional Merkle proof siblings (v3) |
| merkleRoot | string | — | optional Merkle root for batch verification (v3) |
| payload | string | yes | base64url-encoded canonical JSON payload |
| receipt | string | yes | kasbah_receipt:v3:ed25519:… |
No output schema declared.
No examples provided.