Phylax MCP Server

A Model Context Protocol server for Phylax. Lets AI assistants verify packages, repositories and other MCP servers before using them.

Phylax MCP exposes the Phylax verification API through the Model Context Protocol, so any MCP aware assistant such as Claude, VS Code Copilot, Cursor or Windsurf can check a package, audit a dependency list, or refuse a risky tool as part of a conversation. It runs locally over stdio, or as a shared HTTP server for a team.

Features

• Verify a package before the assistant suggests installing it

• Verify another MCP server before you connect to it

• Batch verify a whole dependency list in one call

• Evaluate an artifact against your organization policy

• Fetch signed attestations as evidence

• Report the current plan and remaining quota

Related MCP server: Agent Identity MCP Server

Install

Requires a Phylax API token. Create one at app.phyi.dev.

Claude Desktop

{
  "mcpServers": {
    "phylax": {
      "command": "npx",
      "args": ["-y", "@phylax/mcp"],
      "env": {
        "PHYLAX_API_TOKEN": "${PHYLAX_API_TOKEN}"
      }
    }
  }
}

Cursor

Same shape, in ~/.cursor/mcp.json for every workspace, or .cursor/mcp.json to scope it to one project.

VS Code

{
  "servers": {
    "phylax": {
      "type": "stdio",
      "command": "npx",
      "args": ["-y", "@phylax/mcp"],
      "env": {
        "PHYLAX_API_TOKEN": "${env:PHYLAX_API_TOKEN}"
      }
    }
  }
}

Reference the token rather than pasting it. A literal token in these files gets committed, screen shared and synced between machines.

Usage

Once connected, ask the assistant to verify something:

Use Phylax to verify pkg:npm/express@4.18.2 before we add it.

Tools exposed

A BLOCK verdict is returned as a tool error, not as prose. An assistant that reads "this package is risky" as text will often carry on and use it anyway, so the refusal is made structural.

Self hosting over HTTP

For a team sharing one server rather than spawning one per user:

PHYLAX_API_TOKEN=... \
PHYLAX_MCP_AUTH_TOKEN=... \
npx @phylax/mcp --http --port 8765

The server refuses to start on HTTP without PHYLAX_MCP_AUTH_TOKEN. An unauthenticated MCP endpoint grants tool execution to anyone who can reach the port.

Set PHYLAX_MCP_AUDIENCE to reject tokens minted for a different service, even when they are otherwise valid.

Configuration

Troubleshooting

The assistant never calls a tool. The client did not start the server. Run the command yourself to see the error the client swallowed:

PHYLAX_API_TOKEN=... npx @phylax/mcp

Every tool reports unauthenticated. The token is missing, malformed or revoked. Ask the assistant to run phylax_status.

Every tool reports plan_required. The capability is not part of the current subscription.

The client shows a broken protocol stream. Something wrote to stdout. On stdio, stdout carries the protocol; all logging goes to stderr.

Development

npm install
npm run typecheck
npm test
npm run build

License

MIT