Skip to main content

CapForge MCP Adapter

ACM-controlled AI agent tool execution via the Model Context Protocol.


Overview

capforge-mcp is the official Model Context Protocol integration for CapForge. It lets you protect every MCP tool invocation against an Agent Capability Manifest (ACM) — a signed policy document that defines what actions an agent is allowed to perform.

Every tool call passes through ACM.check() before execution. Unauthorized attempts are rejected with a structured MCPPermissionError.

Installation

pip install capforge-mcp

Requires Python 3.12+.

Quick Start

from capforge import ACM
from capforge_mcp import ACMProtectedMCP

# Load your signed capability manifest
acm = ACM.load("manifest.json")

# Create an ACM-protected MCP server
mcp = ACMProtectedMCP("MyServer", acm=acm)

# Register a protected tool
@mcp.tool(resource="email", action="send")
def send_email(to: str, body: str) -> str:
    return f"Sent to {to}: {body}"

# Run the server
mcp.run(transport="stdio")

API

Symbol Description
ACMProtectedMCP FastMCP wrapper with built-in ACM authorization
acm_protected Decorator for adding ACM checks to any MCP tool
MCPPermissionError Structured error raised on denied tool invocations

Dependency

capforge-mcp requires the capforge core package (pip install capforge) and the MCP Python SDK (mcp>=1.28,<2). Both are installed automatically as dependencies.

License

Apache 2.0

Metadata

Release files for capforge-mcp 0.6.1

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for capforge-mcp 0.6.1
File Size Uploaded Provenance Actions
capforge_mcp-0.6.1.tar.gz 5.2 kB Without provenance Details for capforge_mcp-0.6.1.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for capforge-mcp 0.6.1
File Interpreter ABI Platform Actions
capforge_mcp-0.6.1-py3-none-any.whl Python 3 none any Details for capforge_mcp-0.6.1-py3-none-any.whl

Total release size: 11.1 kB

Release files / capforge_mcp-0.6.1.tar.gz

Download URL capforge_mcp-0.6.1.tar.gz
Size 5.2 kB
Tags Source
SHA-256 checksum
How to use checksums
ff3690f32c974321cb7f7daa07259e5b3bda93217d3730739b74a5955695cb79
BLAKE2b-256 checksum
How to use checksums
7b7de399f138a00ab884648de9f99bb37380ce1a42b94f6567ffb31c32269a4f
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.2.0 CPython/3.13.13

Release files / capforge_mcp-0.6.1-py3-none-any.whl

Download URL capforge_mcp-0.6.1-py3-none-any.whl
Size 5.9 kB
Tags Python 3
SHA-256 checksum
How to use checksums
3fec624f9177e095e0d7c913efc0ca016ba9a1a33f6cc3374152c9c81d243d1b
BLAKE2b-256 checksum
How to use checksums
26164a580ffaad380a0198bf6e72546c5021a36a8ea52f950c9258ecb63a1361
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.2.0 CPython/3.13.13

Security for capforge-mcp 0.6.1

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

0.6.1 This release

2 release files No provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page