Default safe
Hosts can ask for package facts, exact metadata, trust reports and install plans. They cannot add or install through MCP.
MCP
Run the CLI as MCP for search, view, trust reports, install and update plans, claim proof, verify, audit, SBOM and explain.
Hosts can ask for package facts, exact metadata, trust reports and install plans. They cannot add or install through MCP.
publish_plan previews package metadata without remote writes and without local signing.
claim_verify checks Gitlawb owner proof. package_patch returns files only and never opens remote PRs.
Every registry answer keeps the same digest, signature, transparency and witness evidence as the CLI.
Custom transparency or advisory roots require an opt in flag inside the tool call.
Tools
read only
read only
read only
read only
read only
gated dry run
read only
read only
read only
read only
read only
read only
read only
printf '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-11-25","capabilities":{},"clientInfo":{"name":"smoke","version":"1.0.0"}}}\n{"jsonrpc":"2.0","id":2,"method":"tools/list"}\n' | nipmod mcp serve{"jsonrpc":"2.0","id":3,"method":"tools/call","params":{"name":"nipmod.search","arguments":{"query":"gitlawb"}}}{"jsonrpc":"2.0","id":4,"method":"tools/call","params":{"name":"nipmod.install_plan","arguments":{"specifier":"gitlawb-repo-reader"}}}{"jsonrpc":"2.0","id":5,"method":"tools/call","params":{"name":"nipmod.claim_verify","arguments":{"repo":"gitlawb://did:key:z6Mk.../repo"}}}{"jsonrpc":"2.0","id":6,"method":"tools/call","params":{"name":"nipmod.audit","arguments":{"online":true}}}Hosts
codex mcp add nipmod -- nipmod mcp serve[mcp_servers.nipmod]
command = "nipmod"
args = ["mcp", "serve"]claude mcp add --transport stdio --scope project nipmod -- nipmod mcp serve{
"mcpServers": {
"nipmod": {
"type": "stdio",
"command": "nipmod",
"args": ["mcp", "serve"],
"env": {}
}
}
}Create opencode.json{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"nipmod": {
"type": "local",
"command": ["nipmod", "mcp", "serve"],
"enabled": true
}
}
}