Client-specific JSON for pointing an MCP-aware tool at a local Unitares governance server. Assumes the server is running on http://localhost:8767/mcp/ — see the root README for startup.
Native type: http support:
{
"mcpServers": {
"unitares": {
"type": "http",
"url": "http://localhost:8767/mcp/"
}
}
}Claude Desktop does not support type: http natively; use mcp-remote as a stdio bridge:
{
"mcpServers": {
"unitares": {
"command": "npx",
"args": ["mcp-remote", "http://localhost:8767/mcp/"]
}
}
}Agents self-identify through onboard(); no hardcoded agent-name header is required.
| Endpoint | Transport | Use case |
|---|---|---|
/mcp/ |
Streamable HTTP | MCP clients |
/v1/tools/call |
REST POST | CLI, scripts, non-MCP clients |
/dashboard |
HTTP | Web dashboard |
/health |
HTTP | Health checks |
The server binds to 127.0.0.1 by default. For LAN or remote access:
- Set
UNITARES_BIND_ALL_INTERFACES=1(orUNITARES_MCP_HOSTto an explicit interface). - Configure
UNITARES_MCP_ALLOWED_HOSTSandUNITARES_MCP_ALLOWED_ORIGINS(comma-separated) to allowlist Host and Origin headers. - Optional:
UNITARES_HTTP_CORS_EXTRA_ORIGINS,UNITARES_MCP_ALLOW_NULL_ORIGIN(default on forfile://).
See scripts/ops/ for an example LaunchAgent plist with bind-all plus allowlists.
For a fresh process, call onboard(force_new=true). If the process is continuing prior work, call onboard(force_new=true, parent_agent_id=<prior uuid>, spawn_reason="new_session").
For a same-owner rebind to an existing UUID, call identity(agent_uuid=..., continuity_token=..., resume=true) with the matching short-lived token. Do not teach clients to use bare identity(agent_uuid=..., resume=true): UUID alone is an unsigned claim and is hijack-shaped under strict identity mode.
See also: Getting Started, Operator Runbook.