Build
Expose supported operations through MCP
Inspect and test the native tools, then connect a compatible client under the actual custody and permission rules.
Install and inspect
npm install @receiz/mcp-server@129.0.0The package exposes the receiz-mcp command and programmatic runtime. Inspect the installed tool schemas instead of inventing operation names or assuming every client has every private capability. Public reads may omit a bearer where their underlying rail permits it; protected calls retain their registered-application and actual grant requirements.
Run credential-free packaged checks
// Packaged synthetic checks only: no production identity, money or external writes.
import {createReceizMcpRuntime,callReceizTool,parseReceizMcpToolResult} from '@receiz/mcp-server';
const runtime=createReceizMcpRuntime();
for(const name of ['receiz_conformance_run','receiz_release_verify']){
const result=parseReceizMcpToolResult(await callReceizTool(runtime,name,{}));
console.log(JSON.stringify({name,ok:result.report?.ok,checks:result.report?.summary,writesPerformed:result.writesPerformed},null,2));
}
The conformance and release checks use the packaged synthetic checks and report writesPerformed. This example does not open a private identity or perform a financial/publication action. Keep local checks separate from a live host’s availability and granted permissions.
Configure a compatible client
{
"mcpServers": {
"receiz": {
"command": "npx",
"args": [
"-y",
"@receiz/mcp-server@129.0.0"
],
"env": {
"RECEIZ_BASE_URL": "https://receiz.com",
"RECEIZ_APPLICATION_ID": "<exact registered application ID>"
}
}
}
}Preserve every byte of the application ID, including rc_, case, underscores and hyphens. Keep delegated tokens, passphrases and private identity paths in trusted local/host configuration, outside public pages, logs and model prompts. A public client coordinate is not user consent.
Respect tool authority
| Operation | Required boundary |
|---|---|
| Public inspection | Supported source, verifier/resources and public disclosure scope. |
| Private subject or account read | Actual identity custody and named access grant. |
| Subject creation/publication | Exact preview/confirmation and source publication rules. |
| Replay/checkpoint operations | Applicable domains grant and active exact session where required. |
| Financial execution | Admitted financial source and exact-operation authority; generic tool access is insufficient. |
Test the actual selected environment
Exercise the intended operation, its expected refusals and interrupted result against the selected runtime. Programmatic helpers include createReceizMcpRuntime, callReceizTool and parseReceizMcpToolResult. Device-held subjects use openReceizMcpDeviceRuntime with actual private custody inputs. Upstream workspace build commands in package documentation are not automatically scripts in the Bank repository. A connected MCP client does not acquire universal private context or an automatic spending mandate.
Implementation sources
Inspect the exact path.
Source links retain revision 6c5d582. Read the documented operation and assessment scope alongside its code.