Hatun MCP - Governed Agent Gateway MCP server

title: Hatun MCP — Governed Agent Gateway emoji: 🪢 colorFrom: indigo colorTo: blue sdk: docker appport: 7860 pinned: false license: apache-2.0 shortdescription: Source-bound MCP gateway with signed governance receipts

🪢 hatun-mcp

The great context protocol — hatun (Quechua) = "big / great".

The one signed MCP endpoint that aggregates the SZL backend services — the a11oy command platform (and its live immune, companion and llm-router organs) plus killinchu (drones & vessels) — under PURIQ governance and re-exposes their tools to any MCP client.

Hatun Gateway · GitHub Org · LLM Router

Canonical runtime source. This repository owns the Python gateway, governed tool

catalog, Streamable HTTP transport, and container contract. The standalone Hatun Hugging

Face publisher was retired on September 3, 2026; hf-deploy must not be recreated.

The public product experience is Hatun Gateway, which is not

itself proof that this package's /mcp/ endpoint or a newly added tool is deployed.

See the surface contract. The monorepo copy at

platform/packages/hatun-mcp

is a non-canonical embedded copy (it carries CANONICAL.md pointing here) that exposes a

smaller tool set for local imports and must not diverge from this server's contracts. Folding

the platform copy in is a later founder step; repos are not deleted here. Λ = **Conjecture

1** (advisory) is preserved verbatim.

receipts.in ≡ receipts.out

What this is

A real, operational Model Context Protocol server built on the official mcp Python SDK (mcp.server.fastmcp.FastMCP). Every tool call is governed by the PURIQ formula:

1. Authenticate the client (SZL API key → client_id); anonymous calls are declined.
2. Yuyay-13 gate on the input (input-as-data; OWASP MCP06 injection defense).
3. Reputation factor Hatun_MCP(client) ∈ [0,1].
4. 2-person Yuyay gate for state-changing tools (e.g. killinchucue, haltdrone).
5. Call the real organ backend within a latency budget.
6. Mint a Khipu receipt on success and failure (append-only sha256 DAG).
7. Return a DSSE-signed response — the client receives the receipt hash.

Choose your route

KANCHAY status contract

Shortened. The full README is on GitHub.