@vengtoo/mcp-server

Early access — 0.x releases may have breaking changes. Pin your version if stability matters.

Manage your Vengtoo authorization model and check access through any MCP-compatible AI tool.

Exposes your Vengtoo tenant as MCP tools — create resource types, subjects, roles, and policies; assign them; and check authorization decisions — all from a conversation.

Install

First, create an API key in the Vengtoo dashboard under Settings → API Access. Then add the server to your MCP client config (Claude Code, Cursor, Windsurf, Cline, or any MCP-compatible tool):

{
  "mcpServers": {
    "vengtoo": {
      "command": "npx",
      "args": ["@vengtoo/mcp-server"],
      "env": {
        "VENGTOO_API_KEY": "vgt_..."
      }
    }
  }
}

Or with OAuth2 client credentials:

{
  "mcpServers": {
    "vengtoo": {
      "command": "npx",
      "args": ["@vengtoo/mcp-server"],
      "env": {
        "VENGTOO_CLIENT_ID": "client_...",
        "VENGTOO_CLIENT_SECRET": "vgt_cs_..."
      }
    }
  }
}

Claude Code shortcut:

claude mcp add vengtoo -e VENGTOO_API_KEY=vgt_... -- npx @vengtoo/mcp-server

Local build (development)

npm install
npm run build
node dist/index.js

Point at a local agent instead of cloud:

"env": {
  "VENGTOO_API_KEY": "vgt_...",
  "VENGTOO_BASE_URL": "http://localhost:8181"
}

Tools

Tool	What it does
list_resource_types / create_resource_type / get_resource_type / delete_resource_type	Resource type management
list_resources / create_resource / get_resource / delete_resource	Resource management
list_subjects / create_subject / get_subject / delete_subject	Subject management
assign_role_to_subject / unassign_role_from_subject	Role membership
list_roles / create_role / get_role / delete_role	Role management
list_policies / create_policy / get_policy / delete_policy	Policy management
assign_policy / unassign_policy	Policy assignment (with optional starts_at/expires_at for JIT access)
evaluate_access	Evaluate whether a subject can perform an action on a resource
list_pending_tools / approve_tool / block_tool	MCP governance — review, then approve or block the tools an AI agent can call through a gateway

Environment variables

Variable	Required	Description
VENGTOO_API_KEY	One of these two	API key starting with vgt_. Create one in the dashboard under Settings → API Access
VENGTOO_CLIENT_ID + VENGTOO_CLIENT_SECRET	One of these two	OAuth2 client credentials
VENGTOO_BASE_URL	No	Override API base URL. Default: https://api.vengtoo.com

Docs

vengtoo.com/docs

License

MIT