NAiOS MCP
naios-mcpv0.1.0Connect your NAiOS apps (and any MCP server) to chat and your agents: register URL + token and their tools become available, with confirmation for sensitive actions.
Description
NATIVE MCP (Model Context Protocol) client of NAiOS: register any MCP server via Streamable HTTP (apps generated by NAiOS vibe coding already expose this, e.g. Atalaya) with its URL and token, turn it on or off by server and by tool, and its tools become available in chat through the tool-providers contract of the plugin-loader (zero core changes) and in NAiOS Agents via the meta-tool 'mcp'. Own client with native fetch (no dependencies): initialize, tools/list, and tools/call, with support for mcp-session-id. Tools are classified into read/sensitive in cascade (annotations.readOnlyHint of the protocol → bilingual verb heuristic → manual override by tool) and sensitive ones ALWAYS require human confirmation (HITL), even from agents (high-risk ones maintain this even in auto-approved agents). Tokens are stored encrypted with secret-vault (AES-256-GCM), never in clear or to the browser. URLs are validated against SSRF (private networks blocked by default) and the context is limited with tool limits by server and globally, with catalog caching.
Features (6)
Register URL + token of your NAiOS apps or third-party ones (Streamable HTTP, stateless or with session).
Server tools automatically appear in chat and in NAiOS Agents.
What you write or delete requires your approval (HITL); read-only items flow without friction.
Tokens with AES-256-GCM; private/loopback URLs blocked by default.
Turn on/off individual servers and tools; mark a tool as read-only.
Catalog caching and tool limits by server and globally to avoid inflating the context.