# Expose supported operations through MCP

Inspect and test the native tools, then connect a compatible client under the actual custody and permission rules.

Canonical: https://docs.bankeiz.com/mcp/
Reviewed: 2026-10-25; coordinated packages 129.0.0; ruleset 127.0.0.

## Install and inspect

```sh
npm install @receiz/mcp-server@129.0.0
```

Use the MCP release coordinated with the SDK and AI Skills.

The package exposes the receiz-mcp command and programmatic runtime. Inspect the installed tool schemas instead of inventing operation names or assuming every client has every private capability. Public reads may omit a bearer where their underlying rail permits it; protected calls retain their registered-application and actual grant requirements.

## Run credential-free packaged checks

```js
// Packaged synthetic checks only: no production identity, money or external writes.
import {createReceizMcpRuntime,callReceizTool,parseReceizMcpToolResult} from '@receiz/mcp-server';
const runtime=createReceizMcpRuntime();
for(const name of ['receiz_conformance_run','receiz_release_verify']){
 const result=parseReceizMcpToolResult(await callReceizTool(runtime,name,{}));
 console.log(JSON.stringify({name,ok:result.report?.ok,checks:result.report?.summary,writesPerformed:result.writesPerformed},null,2));
}

```

Save as mcp-check.mjs and run node mcp-check.mjs after installing the pinned package.

- [Download the exact MCP example](https://docs.bankeiz.com/examples/mcp-check.mjs)

The conformance and release checks use the packaged synthetic checks and report writesPerformed. This example does not open a private identity or perform a financial/publication action. Keep local checks separate from a live host’s availability and granted permissions.

## Configure a compatible client

```json
{
  "mcpServers": {
    "receiz": {
      "command": "npx",
      "args": [
        "-y",
        "@receiz/mcp-server@129.0.0"
      ],
      "env": {
        "RECEIZ_BASE_URL": "https://receiz.com",
        "RECEIZ_APPLICATION_ID": "<exact registered application ID>"
      }
    }
  }
}
```

Configuration shape; supply actual registered host values. Protected tools may additionally require a delegated access token in trusted host environment configuration.

Preserve every byte of the application ID, including rc_, case, underscores and hyphens. Keep delegated tokens, passphrases and private identity paths in trusted local/host configuration, outside public pages, logs and model prompts. A public client coordinate is not user consent.

## Respect tool authority

**Tool categories keep different contracts**

| Operation | Required boundary |
| --- | --- |
| Public inspection | Supported source, verifier/resources and public disclosure scope. |
| Private subject or account read | Actual identity custody and named access grant. |
| Subject creation/publication | Exact preview/confirmation and source publication rules. |
| Replay/checkpoint operations | Applicable domains grant and active exact session where required. |
| Financial execution | Admitted financial source and exact-operation authority; generic tool access is insufficient. |

## Test the actual selected environment

Exercise the intended operation, its expected refusals and interrupted result against the selected runtime. Programmatic helpers include createReceizMcpRuntime, callReceizTool and parseReceizMcpToolResult. Device-held subjects use openReceizMcpDeviceRuntime with actual private custody inputs. Upstream workspace build commands in package documentation are not automatically scripts in the Bank repository. A connected MCP client does not acquire universal private context or an automatic spending mandate.

- [Agent identity and continuity](https://docs.bankeiz.com/agent-continuity/)
- [Integration assessment](https://docs.bankeiz.com/conformance/)

## Implementation sources

- [Coordinated MCP package pin](https://github.com/kojibai/reality-grade-banking/blob/6c5d582/package.json)
- [Installed package and release coordination](https://github.com/kojibai/reality-grade-banking/blob/6c5d582/scripts/receiz-release.mjs)
- [Matching native source distribution](https://github.com/kojibai/reality-grade-banking/blob/6c5d582/native/README.md)
- [Actual application permission families](https://github.com/kojibai/reality-grade-banking/blob/6c5d582/src/receiz/config.ts)

## Related documentation

- [Start with the Receiz SDK](https://docs.bankeiz.com/sdk/)
- [Give agents identity across environments](https://docs.bankeiz.com/agent-continuity/)
- [Work from the native AI Skills](https://docs.bankeiz.com/ai-skills/)
- [Consent, scopes and exact-operation approval](https://docs.bankeiz.com/permissions/)