1. Conduid
  2. Developer Tools
  3. Kora MCP Server
MCP server · Developer Tools

Kora MCP Server

kora - MCP server for Kora — give Claude governed spending with zero code

Unclaimed Apache-2.0 last commit 8 months ago devtoolsauthorizationai-agentsmodel-context-protocolmcpclaude
62Good

Scored 5 months ago · breakdown

About Kora MCP Server

Kora MCP Server is an MCP server published by Idkasam in the Developer Tools category: kora - MCP server for Kora — give Claude governed spending with zero code.

Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/Idkasam/kora-mcp-server

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (5)

kora_auditFull audit trail for a mandate

Parameters not published.

kora_check_budgetCheck daily/monthly remaining, velocity, time windows

Parameters not published.

kora_healthServer health and version

Parameters not published.

kora_recent_activityList recent authorizations

Parameters not published.

kora_spendAuthorize a spend — returns APPROVED + seal or DENIED + hint

Parameters not published.

Ask AI

✦

Ask AI about Kora MCP Server

Powered by Claude · Grounded in docs

I know everything about Kora MCP Server. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ✓README presentThe repository ships documentation.
  • ✓License declaredUsable under a stated license.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

3 checks have not been run yet.

README

Kora MCP Server

The Deterministic Authorization Gate for AI Agents

Kora provides a cryptographically secure Go/No-Go layer for autonomous software. This Model Context Protocol (MCP) server enables LLMs (Claude, GPT-4, Cursor) to request explicit permission before initiating financial actions.

kora-mcp-server

MCP server for Kora — give any MCP client governed spending in seconds.

Zero code. Add Kora as an MCP server. Your AI agent gets budget-checked, Ed25519-signed spending with no SDK integration needed.

Install

pip install kora-mcp-server

Configure Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "kora": {
      "command": "kora-mcp",
      "env": {
        "KORA_AGENT_SECRET": "kora_agent_sk_...",
        "KORA_MANDATE_ID": "mandate_abc123",
        "KORA_BASE_URL": "https://your-kora-server.com"
      }
    }
  }
}

Restart Claude Desktop. Done.

Available tools

Tool Description
kora_spend Authorize a spend — returns APPROVED + seal or DENIED + hint
kora_check_budget Check daily/monthly remaining, velocity, time windows
kora_recent_activity List recent authorizations
kora_health Server health and version
kora_audit Full audit trail for a mandate

How it works

Claude says "I need to spend $50 on AWS" → MCP server signs the request with Ed25519 → sends to Kora → 14-step deterministic pipeline → APPROVED or DENIED with actionable hint.

Every decision is cryptographically sealed. No ML. No guessing.

Also available as

Package Description
kora-sdk Python + TypeScript SDK — 5 lines to authorized spend
n8n-nodes-kora n8n community node — visual workflow with two-output branching

Links

License

Apache 2.0

README copy captured when this server was indexed; it may lag the repository. The original is authoritative.

Questions

About Kora MCP Server

How do I install Kora MCP Server?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Kora MCP Server safe to use with an AI agent?

Its trust score is 62 out of 100 (good). It passes 2 of the 3 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Kora MCP Server still maintained?

The last commit was 8 months ago. That's long enough that you should check whether the maintainer is responding to issues before depending on it.