MCP.Market

Chp MCP server

by icohangar-ops·io.github.icohangar-ops/chp-mcp·v0.1.2
No reviews yet

Spend approval gate for AI agents: budget caps, HITL thresholds, signed audit hash.

C65/100grade C
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
C65/100

full report

Adoption
New

0 stars38 downloads/wk

Reviews

Write one

Nobody has reviewed Chp yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Chp tools (4, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • approve_spend

    Human-in-the-loop approval for a proposal that returned HITL_REQUIRED.

  • chp_content_hash

    SHA-256 over float-aware canonical JSON (CHP §3.1) — matches Python

  • chp_version

    Report MCP server and CHP Profile B protocol versions.

  • evaluate_spend_gatewrite action

    Run CHP Profile B capital/spend gate on a proposed action. Returns LOCKED,

Public scan report

scanner v0.1.10 · 2026-11-01 · same rubric, same numbers if you re-run it

no findings
  • Code scan6 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancerepository not readable: repo not found3/15
  • Maintainer identityno repository or website to verify2/10
Overall 65/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Chp compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
65/100
higher than 20% of 48,255 servers
Tools
4
the typical server has 7
Tools that change things
25%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
38
more than 29% of 12,191 servers with a package

What its tools let an agent do: 2 read · 1 change · 1 run or deploy

Install Chp in Claude Code, Cursor or VS Code

Runs npx -y @cubiczan/chp-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add chp-mcp -- npx -y @cubiczan/chp-mcp
Add to Cursor

What the publisher says

From the Chp repository's README, as published. We do not edit it. Read it on GitHub

@cubiczan/chp-mcp

One-command MCP install for CHP Profile B spend / capital gates and tool-approval receipts (an allowlist is not authorization), plus a structured deny ledger and receipt-gated finance tools.

Wraps @cubiczan/chp so Cursor, Claude Code, or any MCP client can call evaluatespendgate without vendoring protocol code. Engine digests match the normative golden vectors (Profile B 30/30).

How the pieces fit

MCP client (Cursor / Claude / …)
        │  tools/call
        ▼
┌───────────────────────────┐
│  MCP server (transport)   │  ← you are here (@cubiczan/chp-mcp)
│  evaluate_spend_gate      │
│  approve_spend            │
│  evaluate_tool_approval   │  allowlist ≠ authorization
│  issue_approval_receipt   │
│  authorize_tool_call      │
│  request_authorization    │  finance-tool receipt / HITL / deny
│  place_equity_order       │  scoped + receipt-gated (synthetic)
│  wire_treasury_transfer   │
│  rebalance_portfolio      │
│  inspect_audit_ledger     │  CHP-signed deny / authorize / execute
│  chp_content_hash         │
└─────────────┬─────────────┘
              │ depends on
              ▼
┌───────────────────────────┐
│  Published CHP packages   │
│  npm:  @cubiczan/chp                 (Profile B)
│  PyPI: consensus-hardening-protocol  (Profile A)
└───────────────────────────┘

For AGENTS.md + skills + Profile A decisiongate / decisionadversary, use agent-conductor instead.

Install

npm install -g @cubiczan/chp-mcp
# or one-shot
npx -y @cubiczan/chp-mcp

Cursor / Claude Desktop

{
  "mcpServers": {
    "chp": {
      "command": "npx",
      "args": ["-y", "@cubiczan/chp-mcp"]
    }
  }
}

Claude Code

claude mcp add chp -- npx -y @cubiczan/chp-mcp

Tools

Example — evaluate a spend

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Grade history

  • 2026-11-01downgradeA → Cscore 65

Chp: common questions

Is Chp MCP server safe?
With care: it is graded C, so read the findings first (65/100). Read the Chp safety report
How do I install Chp?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Chp need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Chp maintained?
The last commit was 52 days ago (2026-09-13). The latest release is v0.1.2.
What can I use instead of Chp?
Servers from other publishers that do the same job: SSH — policy-gated remote access MCP server and SSH Manager MCP server.
How does Chp compare with other MCP servers?
safety score 65/100 (higher than 20% of 48,255 servers); tools 4 (the typical server has 7); tools that change things 25% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Chp

Same job from other publishers: the closest match first, then the best rated.

  • SSH — policy-gated remote access
    Policy-gated, audited SSH for Linux and Windows hosts: roles, approvals, and an audit log.
    B
  • SSH Manager
    SSH for AI agents: commands, files, backups and health, with approval, a vault and an audit trail
    A

More from icohangar-ops →