MCP Server

Infraveil Control Plane MCP Server

Name: Infraveil Control Plane MCP Server
Author: io.github.infraveilhq

io.github.infraveilhq/control-plane

Repository Registry

What is the Infraveil Control Plane MCP server?

Govern your backend control plane from your AI agent - signed, human-approval-gated.

How to install Infraveil Control Plane

Copy-paste configuration for popular MCP clients.

transport: stdio

Config generated by PluginBench — verify against the source before use.

Environment / auth

INFRAVEIL_BASE_URL
required
Control-plane base URL, e.g. https://api.infraveil.com
INFRAVEIL_CLIENT_ID
required
Your Infraveil client id (same one the agent uses)
INFRAVEIL_AGENT_ID
required
The agent id this MCP server speaks for
INFRAVEIL_AGENT_TOKEN
required
secret
The agent's existing token; used to sign requests. Never minted here.
INFRAVEIL_AGENT_FILE
Alternative to the four vars above: path to your rendered agent source; ids and token are read from it.
INFRAVEIL_VERIFY_RESPONSES
Verify the control plane's response signatures (default on). Set 0 only for debugging.

Claude Desktop

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "control-plane": {
      "command": "uvx",
      "args": [
        "infraveil-mcp"
      ],
      "env": {
        "INFRAVEIL_BASE_URL": "<YOUR_INFRAVEIL_BASE_URL>",
        "INFRAVEIL_CLIENT_ID": "<YOUR_INFRAVEIL_CLIENT_ID>",
        "INFRAVEIL_AGENT_ID": "<YOUR_INFRAVEIL_AGENT_ID>",
        "INFRAVEIL_AGENT_TOKEN": "<YOUR_INFRAVEIL_AGENT_TOKEN>",
        "INFRAVEIL_AGENT_FILE": "<YOUR_INFRAVEIL_AGENT_FILE>",
        "INFRAVEIL_VERIFY_RESPONSES": "<YOUR_INFRAVEIL_VERIFY_RESPONSES>"
      }
    }
  }
}

Cursor

~/.cursor/mcp.json

{
  "mcpServers": {
    "control-plane": {
      "command": "uvx",
      "args": [
        "infraveil-mcp"
      ],
      "env": {
        "INFRAVEIL_BASE_URL": "<YOUR_INFRAVEIL_BASE_URL>",
        "INFRAVEIL_CLIENT_ID": "<YOUR_INFRAVEIL_CLIENT_ID>",
        "INFRAVEIL_AGENT_ID": "<YOUR_INFRAVEIL_AGENT_ID>",
        "INFRAVEIL_AGENT_TOKEN": "<YOUR_INFRAVEIL_AGENT_TOKEN>",
        "INFRAVEIL_AGENT_FILE": "<YOUR_INFRAVEIL_AGENT_FILE>",
        "INFRAVEIL_VERIFY_RESPONSES": "<YOUR_INFRAVEIL_VERIFY_RESPONSES>"
      }
    }
  }
}

Windsurf

~/.codeium/windsurf/mcp_config.json

{
  "mcpServers": {
    "control-plane": {
      "command": "uvx",
      "args": [
        "infraveil-mcp"
      ],
      "env": {
        "INFRAVEIL_BASE_URL": "<YOUR_INFRAVEIL_BASE_URL>",
        "INFRAVEIL_CLIENT_ID": "<YOUR_INFRAVEIL_CLIENT_ID>",
        "INFRAVEIL_AGENT_ID": "<YOUR_INFRAVEIL_AGENT_ID>",
        "INFRAVEIL_AGENT_TOKEN": "<YOUR_INFRAVEIL_AGENT_TOKEN>",
        "INFRAVEIL_AGENT_FILE": "<YOUR_INFRAVEIL_AGENT_FILE>",
        "INFRAVEIL_VERIFY_RESPONSES": "<YOUR_INFRAVEIL_VERIFY_RESPONSES>"
      }
    }
  }
}

VS Code

.vscode/mcp.json

{
  "servers": {
    "control-plane": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "infraveil-mcp"
      ],
      "env": {
        "INFRAVEIL_BASE_URL": "<YOUR_INFRAVEIL_BASE_URL>",
        "INFRAVEIL_CLIENT_ID": "<YOUR_INFRAVEIL_CLIENT_ID>",
        "INFRAVEIL_AGENT_ID": "<YOUR_INFRAVEIL_AGENT_ID>",
        "INFRAVEIL_AGENT_TOKEN": "<YOUR_INFRAVEIL_AGENT_TOKEN>",
        "INFRAVEIL_AGENT_FILE": "<YOUR_INFRAVEIL_AGENT_FILE>",
        "INFRAVEIL_VERIFY_RESPONSES": "<YOUR_INFRAVEIL_VERIFY_RESPONSES>"
      }
    }
  }
}

Claude Code

claude mcp add control-plane --env INFRAVEIL_BASE_URL=<YOUR_INFRAVEIL_BASE_URL> --env INFRAVEIL_CLIENT_ID=<YOUR_INFRAVEIL_CLIENT_ID> --env INFRAVEIL_AGENT_ID=<YOUR_INFRAVEIL_AGENT_ID> --env INFRAVEIL_AGENT_TOKEN=<YOUR_INFRAVEIL_AGENT_TOKEN> --env INFRAVEIL_AGENT_FILE=<YOUR_INFRAVEIL_AGENT_FILE> --env INFRAVEIL_VERIFY_RESPONSES=<YOUR_INFRAVEIL_VERIFY_RESPONSES> -- uvx infraveil-mcp

Related MCP servers

Infraveil Agent Guard

Gate an AI agent's destructive actions behind human approval, with a tamper-evident log.

View repository →