Drawbridge

{
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "name": "sh.xorfox.drawbridge/server",
  "description": "Identity, secrets, and passwordless SSH provisioning for AI agents — Keycloak, vault, MCP tools.",
  "title": "Drawbridge",
  "repository": {
    "url": "https://github.com/xorfox/drawbridge",
    "source": "github"
  },
  "version": "1.0.0",
  "websiteUrl": "https://drawbridge.xorfox.sh",
  "remotes": [
    {
      "type": "sse",
      "url": "https://api.drawbridge.xorfox.sh/mcp/sse",
      "headers": [
        {
          "description": "Bearer <access_token>. To mint a token without a human in the loop: (1) POST {\"agentName\":\"<name>\",\"agentEmail\":\"<principal-email>\"} to https://api.drawbridge.xorfox.sh/drawbridge/mcp/register — returns clientId, clientSecret, tokenEndpoint. (2) POST grant_type=client_credentials with those credentials to the token endpoint. The resulting access_token is scoped mcp:tools and audience-bound to /mcp; default TTL is 5 minutes, so refresh on the boundary.",
          "isRequired": true,
          "isSecret": true,
          "name": "Authorization"
        }
      ]
    }
  ]
}