kosa8 docs

Commands / kosa8 mcp-policy

kosa8 mcp-policy

Govern which MCP servers and tools each team may use

An org signs a policy of scopes — "engineering", "data-science" — each listing the MCP servers it may reach and, within a server, which tools.

A server nobody approved is denied: the approved set is a list, not a denylist of things someone thought to forbid. Tool names take wildcards ("read_*"); server names never do, because one pattern would re-approve everything. Deny beats allow.

The policy is signed with the same key as kosa8 policy and verified against the same pinned signer, so editing it locally breaks it — and a broken policy denies everything rather than falling back to open.

Subcommands

kosa8 mcp-policy checkAsk whether a scope may call a tool, and record the decision kosa8 mcp-policy eventsExport MCP policy decisions for a SIEM (--format jsonl|cef) kosa8 mcp-policy initPrint a template MCP policy to edit and sign kosa8 mcp-policy installVerify a signed MCP policy against the trusted key and activate it kosa8 mcp-policy scopesList the scopes the org policy defines kosa8 mcp-policy showShow the active MCP policy kosa8 mcp-policy signSign an MCP policy with your org's ed25519 private key