olane-copass-local

Copass Local — local encryption MCP plugin for Copass / Twin Brain. Runs on the user's machine via stdio transport — keys never leave the local environment.

Part of the Olane MCP suite (com.olane/*):

• com.olane/copass-local (this package) — Local encryption and session token generation
• com.olane/copass-remote — Knowledge graph ontology and context retrieval

Tools

Installation

From PyPI:

pip install olane-copass-local

From source:

pip install -e .

Configuration

Claude Desktop / Claude Code

Add to your MCP settings:

{
  "mcpServers": {
    "copass-local": {
      "command": "olane-copass-local",
      "transport": "stdio"
    }
  }
}

VS Code (Copilot MCP)

Add to .vscode/mcp.json:

{
  "servers": {
    "copass-local": {
      "command": "olane-copass-local",
      "transport": "stdio"
    }
  }
}

Usage

The Copass Ontology MCP (remote) orchestrates calls to this local plugin:

1. generate_session_token — Called at session start with master_key and access_token. Returns an opaque session token.
2. encrypt_payload / encrypt_file — Called before each API request to encrypt data with AES-256-GCM.
3. The session token and encrypted payloads are forwarded to the Twin-Brain API.

Development

# Install in editable mode
pip install -e .

# Run tests
pytest tests/ -v

# Run the server directly (waits for JSON-RPC on stdin)
python -m olane_copass_local