SOVR.AI
MCP INTEGRATION GUIDE

Connect your AI Agent to SOVR

SOVR exposes 5 tools via the Model Context Protocol. Any MCP-compatible agent (Claude, GPT, custom) can call SOVR for policy checks, approvals, and audit — in 3 lines of config.

Quick Start

1

Get your API Key

Create an API key from the self-service dashboard. Keys start with sovr_.

2

Initialize & discover tools

Send an MCP initialize request, then tools/list to see all 5 tools.

bash
# Step 1: Initialize MCP session
curl -X POST https://YOUR_DOMAIN/api/mcp \
  -H "Content-Type: application/json" \
  -H "Accept: application/json, text/event-stream" \
  -H "X-SOVR-API-KEY: sovr_your_api_key" \
  -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-03-26","capabilities":{},"clientInfo":{"name":"my-agent","version":"1.0"}}}'

# Step 2: List available tools
curl -X POST https://YOUR_DOMAIN/api/mcp \
  -H "Content-Type: application/json" \
  -H "Accept: application/json, text/event-stream" \
  -H "X-SOVR-API-KEY: sovr_your_api_key" \
  -d '{"jsonrpc":"2.0","id":2,"method":"tools/list","params":{}}'
3

Call any tool

Use tools/call with the tool name and arguments. See the tool reference below for all 5 tools.

Claude Desktop Configuration

Add this to your claude_desktop_config.json to give Claude access to SOVR tools. Uses mcp-remote for HTTP transport.

json
{
  "mcpServers": {
    "sovr": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://YOUR_DOMAIN/api/mcp"],
      "env": {
        "HEADERS": "X-SOVR-API-KEY:sovr_your_api_key"
      }
    }
  }
}

Tool Reference

sovr_gate_check

Check if a role is allowed to perform an action on a resource. Returns allow/deny with audit trail.

Parameters

NameTypeRequiredDescription
rolestringrequiredThe role to check (e.g., admin, operator, auditor, user)
resourcestringrequiredThe resource path (e.g., payment/stripe, database/users)
actionread | write | delete | execute | exportrequiredThe action to perform

Response Example

json
{
  "allowed": true,
  "reason": "RBAC policy: admin can write payment/stripe",
  "irreversible": true,
  "requiresApproval": true
}

curl Example

bash
curl -X POST https://YOUR_DOMAIN/api/mcp \
  -H "Content-Type: application/json" \
  -H "Accept: application/json, text/event-stream" \
  -H "X-SOVR-API-KEY: sovr_your_api_key" \
  -d '{
    "jsonrpc": "2.0",
    "id": 1,
    "method": "tools/call",
    "params": {
      "name": "sovr_gate_check",
      "arguments": {
        "role": "operator",
        "resource": "payment/stripe",
        "action": "execute"
      }
    }
  }'

Transport & Authentication

Transport

  • Protocol: Streamable HTTP
  • Endpoint: /api/mcp
  • Content-Type: application/json
  • Accept: application/json, text/event-stream
  • Mode: Stateless (no session required)

Authentication

  • Header: X-SOVR-API-KEY
  • Alternative: Authorization: Bearer sovr_...
  • Key prefix: sovr_
  • Key storage: SHA-256 hashed (zero-knowledge)
  • Management: Self-service at /cockpit/api-keys

Ready to integrate?

Get your API key and start verifying AI actions in under 5 minutes.