CapForge MCP Adapter
ACM-controlled AI agent tool execution via the Model Context Protocol.
Overview
capforge-mcp is the official Model Context Protocol integration for CapForge. It lets you protect every MCP tool invocation against an Agent Capability Manifest (ACM) — a signed policy document that defines what actions an agent is allowed to perform.
Every tool call passes through ACM.check() before execution. Unauthorized attempts are rejected with a structured MCPPermissionError.
Installation
pip install capforge-mcp
Requires Python 3.12+.
Quick Start
from capforge import ACM
from capforge_mcp import ACMProtectedMCP
# Load your signed capability manifest
acm = ACM.load("manifest.json")
# Create an ACM-protected MCP server
mcp = ACMProtectedMCP("MyServer", acm=acm)
# Register a protected tool
@mcp.tool(resource="email", action="send")
def send_email(to: str, body: str) -> str:
return f"Sent to {to}: {body}"
# Run the server
mcp.run(transport="stdio")
API
| Symbol | Description |
|---|---|
ACMProtectedMCP |
FastMCP wrapper with built-in ACM authorization |
acm_protected |
Decorator for adding ACM checks to any MCP tool |
MCPPermissionError |
Structured error raised on denied tool invocations |
Dependency
capforge-mcp requires the capforge core package (pip install capforge) and the MCP Python SDK (mcp>=1.28,<2). Both are installed automatically as dependencies.
License
Apache 2.0
Metadata
Release files for capforge-mcp 0.6.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| capforge_mcp-0.6.1.tar.gz | 5.2 kB | Without provenance | Details for capforge_mcp-0.6.1.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| capforge_mcp-0.6.1-py3-none-any.whl | Python 3 | none | any | Details for capforge_mcp-0.6.1-py3-none-any.whl |
Total release size: 11.1 kB
Release files / capforge_mcp-0.6.1.tar.gz
| Download URL | capforge_mcp-0.6.1.tar.gz |
|---|---|
| Size | 5.2 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
ff3690f32c974321cb7f7daa07259e5b3bda93217d3730739b74a5955695cb79
|
|
BLAKE2b-256 checksum How to use checksums |
7b7de399f138a00ab884648de9f99bb37380ce1a42b94f6567ffb31c32269a4f
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.13.13
|
Release files / capforge_mcp-0.6.1-py3-none-any.whl
| Download URL | capforge_mcp-0.6.1-py3-none-any.whl |
|---|---|
| Size | 5.9 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
3fec624f9177e095e0d7c913efc0ca016ba9a1a33f6cc3374152c9c81d243d1b
|
|
BLAKE2b-256 checksum How to use checksums |
26164a580ffaad380a0198bf6e72546c5021a36a8ea52f950c9258ecb63a1361
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.13.13
|
Security for capforge-mcp 0.6.1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.