Skip to main content
Glama
Sign In
kryos-mcp

kryos-mcp

by NORTHTEKDevs
OverviewSchemaSourceRelated ServersDiscussionsAdmin
JavaScript
Local

kryos-mcp

Governed code execution for AI agents, backed by the Kryos compiler's capability system. An MCP server that lets any client type-check, run, and capability-verify Kryos code — so an agent can only run code whose reach (network, filesystem, process, crypto, …) is declared and checked at compile time.

Why

Most "run this code" tools give an agent an unconstrained interpreter. kryos-mcp runs code through Kryos, where every function declares its capabilities (@capabilities(net, io)) and the compiler rejects anything that reaches further. verify_capabilities turns that into a governance verdict: ALLOW only if the code type-checks, every declared capability is inside the grant, and every function is annotated. Because Kryos enforcement is opt-in per function, unannotated functions are reported as UNCONSTRAINED rather than waved through.

Related MCP server: OmniBridge MCP Server

Tools

Tool

What it does

kryos_check(code, files?)

Type-check without producing artifacts; surfaces type + capability errors.

kryos_run(code, files?, timeout_ms?)

Compile and run with a hard timeout; captures stdout/stderr/exit code.

capability_manifest(code, files?, strict?)

Per-function capability manifest (JSON).

verify_capabilities(code, files?, granted[], allow_unannotated?)

ALLOW/DENY against a capability grant; reports unconstrained functions.

kryos_audit(code, files?)

Full audit: capability usage, extern/FFI surface, secret-pattern scan.

files is an optional map of sibling .kry module files (name → content) so use <mod> resolves.

Install

Requires the Kryos toolchain on PATH (or set KRYOS_BIN).

npm install
claude mcp add kryos --scope user -- node /abs/path/to/kryos-mcp/server.mjs

Verify

node smoke-test.mjs   # spawns the server, exercises every tool incl. a DENY and an ALLOW verdict

Capabilities reference

Valid grants (case-insensitive): net, io, ffi, compute, crypto, process, env, term, db, time, all. Notable gotchas the manifest reflects: env_get/exit require process; time_now requires time; network builtins require net.

MIT.

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivityInactive
ResponsivenessSyncing

Resources

Related MCP Connectors

Related MCP Servers

  • Code Executor MCP Server

    CSOAI-ORG
    A
    license
    Not graded
    quality
    C
    maintenance
    Provides sandboxed code execution for AI agents with support for Python, JavaScript, and shell commands. Includes comprehensive safety features like destructive pattern blocking, timeout protection, and restricted file access for secure production use.
    21 npm
    43 PyPI
    MIT

  • OmniBridge MCP Server

    SyedDaiam9101
    A
    license
    Not graded
    quality
    C
    maintenance
    Provides isolated sandbox environments for AI agents to execute code securely, generating signed receipts for every execution to ensure auditability and trust.
    5 npm
    4
    MIT

  • Secure Grid Genesis Execution

    Coraje187
    F
    license
    Not graded
    quality
    D
    maintenance
    Enables AI agents to safely execute Python, JavaScript, and Bash code in an isolated Docker sandbox with strict security constraints.
    1
    -
  • genpark-jev-system1-subconscious-decision-skill

    genpark-jev-system1official

    alphaparkinc
    A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to resolve typed routing, loop-stall arbitration, and tool safety checks locally at sub-millisecond latency, avoiding unnecessary frontier LLM calls. It enforces reversible execution checkpoints, token budgets, and decayed episodic memory for safe, privacy-first autonomous operation.
    7
    MIT