Home | Mandaitor Docs

Capabilities

From Mandate to Receipt

A person grants the authority, Mandaitor carries out the operation, and every step is on the record.

Executions

An agent asks for one typed business operation. Mandaitor reads the record from the target system, decides on what it read, writes once, and reads the result back.

🔌

MCP Server

A standard MCP client connects as the agent. It lists the tools the agent's mandates could back, and Mandaitor carries out each tool call as an execution.

📜

Mandates

A person grants an agent one business action on named records, with an amount cap, an approval threshold and limits per day, in an industry taxonomy's vocabulary.

✋

Approvals

Above a mandate's threshold, the person it names approves the exact request: the record at the version Mandaitor read, bound by a digest.

🔒

Proof and Receipt

A Proof-of-Mandate records the authorization a write was made on, and a signed receipt records what the write did. Both go on a hash-chained audit trail.

🎯

Request-bound Decisions

When your own system performs the operation, its enforcement point gets a single-use authorization for exactly that request, which the agent never holds.

Quick Start

One Tool Call, Carried Out

Configure a standard MCP client as your agent, with the key you registered for it, and call a tool. Mandaitor decides on the record, asks a person where the mandate says so, writes, and answers with the outcome and its signed receipt.

MCPnpm install @modelcontextprotocol/sdk

// agent.ts: a standard MCP client, configured as your agent
import { Client } from "@modelcontextprotocol/sdk/client/index.js";
import { StreamableHTTPClientTransport } from
  "@modelcontextprotocol/sdk/client/streamableHttp.js";
import { PrivateKeyJwtProvider } from
  "@modelcontextprotocol/sdk/client/auth-extensions.js";

const authProvider = new PrivateKeyJwtProvider({
  clientId: agentDid, // did:web:agents.mandaitor.io:agt_…
  privateKey: agentKeyPem, // the key you registered for it
  algorithm: "ES256",
  expectedIssuer: "https://api.mandaitor.io/v1",
});
const client = new Client({
  name: "procurement-agent",
  version: "1.0.0",
});
const url = new URL("https://api.mandaitor.io/v1/mcp");
await client.connect(
  new StreamableHTTPClientTransport(url, { authProvider }),
);

const result = await client.callTool({
  name: "sap_purchase_requisition_release",
  arguments: { purchase_requisition: "10000123" },
});
// result.structuredContent.state: "SUCCEEDED", "DENIED", …
// result.structuredContent.receipt: Mandaitor's signed receipt