MCPLow riskUnclaimed
VERAX
The body an agent asks before it acts: decide, approve, and keep a signed record on your machine.
verax-aiverax-ai/verax
server.json
{
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"name": "io.github.verax-ai/verax",
"description": "The body an agent asks before it acts: decide, approve, and keep a signed record on your machine.",
"title": "VERAX",
"repository": {
"url": "https://github.com/verax-ai/verax",
"source": "github"
},
"version": "0.4.7",
"websiteUrl": "https://verax-ai.com",
"packages": [
{
"registryType": "npm",
"identifier": "@verax-ai/body",
"version": "0.4.7",
"transport": {
"type": "streamable-http",
"url": "http://{VERAX_BIND}/mcp"
},
"environmentVariables": [
{
"description": "Issuer the agent's token must carry. The body refuses to start without one; `verax doctor` names what is missing.",
"isRequired": true,
"name": "VERAX_ISSUER"
},
{
"description": "Where the body fetches the keys that verify that token.",
"isRequired": true,
"name": "VERAX_JWKS_URL"
},
{
"description": "Audience the token must name, so a token minted for something else is refused.",
"isRequired": true,
"name": "VERAX_AUDIENCE"
},
{
"description": "Directory the ledger, keys and approvals live in. It stays on this machine.",
"isRequired": true,
"format": "filepath",
"name": "VERAX_STATE_DIR"
},
{
"description": "Policy the gate applies. @verax-ai/proxy ships policy/default.json, which denies what it does not name.",
"isRequired": true,
"format": "filepath",
"name": "VERAX_POLICY_FILE"
},
{
"description": "host:port the body listens on. Anything but loopback needs VERAX_TLS_TERMINATED=1.",
"default": "127.0.0.1:8787",
"name": "VERAX_BIND"
},
{
"description": "Roster document the body serves; the format is @verax-ai/inventory.",
"format": "filepath",
"name": "VERAX_INVENTORY_FILE"
}
]
}
]
}Permissions
DeclaredDetected
Runs code—
nodeInstalls—
npm:@verax-ai/body@0.4.7Runs install scripts—None
NetworkNoneNone
Needs credentialsNoneNone
Outside the workspace—None
Agent tools—None
Checks
Low risk · Nothing worth a warning was found.
Not reviewed by a person · Checked by rules; the model review is not switched on yet.
Versions
- #30.4.7latestOct 9, 2026
- #20.4.6Oct 7, 2026
- #10.4.5Oct 7, 2026
VERAXOpen in Codeg