app.managed-companyos-mcp

@lssm-tech/app.managed-companyos-mcp

MCP server that exposes Managed CompanyOS operations and resources for tenant onboarding, integration discovery, workflow status, replay, evidence, health probes, and fail-closed Managed Builder evidence tools.

What It Does

• Hosts a ContractSpec MCP server over Managed CompanyOS contracts (companyos/*).
• Exposes V1 read/onboarding tools, Builder readiness/replay/evidence/release tools, and one reference resource for the operator copilot.
• Exposes tenant-safe, read-only fixture resources for Company Brain, temporal graph, experiment/outcome, and provider health projections. These resources require an authenticated tenant match plus an explicit authorization decision and never expose credential references.
• Resolves the actor from env vars (single-tenant per process) in V1; multi-tenant HTTP transport is deferred to V2.
• Fails closed until API keys are verified: a configured key yields a role-less user, never an admin, and commands are denied unless reference mode is on outside production. Queries and read-only resources stay available.

V1 Tools

Read-only projection resources

• companyos://tenants/{tenantId}/company-brain
• companyos://tenants/{tenantId}/temporal-graph
• companyos://tenants/{tenantId}/experiment-outcome
• companyos://tenants/{tenantId}/provider-health

These are deterministic reference projections only. They perform no writes or network access, fail closed for anonymous/cross-tenant/denied requests, and use only declared package exports.

Environment Variables

• MANAGED_COMPANYOS_MCP_API_KEY — platform API key (required in production). It is not verified yet, so it identifies a caller but grants no role.
• MANAGED_COMPANYOS_MCP_TENANT_ID — optional tenant pin for tenant-scoped keys.
• MANAGED_COMPANYOS_MCP_REFERENCE_MODE — set to 1 to let the deterministic reference bindings run commands (tenant.onboard, builder.readiness.evaluate). Ignored when NODE_ENV=production; any other value keeps commands denied.
• MANAGED_COMPANYOS_MCP_NAME — override server name (default managed-companyos-mcp).
• MANAGED_COMPANYOS_MCP_VERSION — override server version (default 0.1.0).

Running Locally

From packages/apps/managed-companyos-mcp:

• bun run dev
• bun run start
• bun run build
• bun run typecheck
• bun run test

Architecture

• src/server.ts boots the MCP server and stdio transport.
• src/blueprint.ts defines the app blueprint.
• src/tools.ts installs operation specs through installOp.
• src/resources.ts exposes the reference workspace resource.
• src/prompts.ts registers the operator copilot prompt.
• src/tenant-context.ts resolves the actor and the fail-closed policy gate (decide, createManagedToolDecider).
• src/smoke.test.ts asserts the registry registers the expected number of tools and that the gate denies commands from an unverified key.

Status

Handlers are deterministic reference bindings for V1. Until lib.auth-os verifies API keys, commands run only in reference mode (MANAGED_COMPANYOS_MCP_REFERENCE_MODE=1, never in production). Builder-specific handlers are live fail-closed evidence tools: they reject raw-looking credentials, report missing provider/webhook refs as blockers, and emit Builder-scoped readiness/replay/receipt/release packets without replacing agent/workflow.