Hatun-MCP — agentic MCP server

Hatun (Quechua: great / sovereign) is the Model Context Protocol gateway that exposes SZL's governed flagship capabilities to any MCP client (Claude Desktop, Cursor, custom agents). Every tool invocation passes the Yuyay-13 governance gate and emits a signed Khipu receipt. Anonymous calls are governed-but-declined (OWASP MCP07) — provide an SZL API key to execute. This tab probes the live server directly from your browser.

Live status: probing… Signer: — Khipu chain: — Protocol: — Probe latency: —

Endpoint: https://szlholdings-a11oy.hf.space/mcp/ (canonical, live, same-origin) · Transport: JSON-RPC over Streamable HTTP (POST /mcp/) · MCP revision 2024-11-05
Note: the standalone hatun-mcp Space is retired; a11oy now serves the canonical MCP directly at /mcp/.

Tools exposed (16)

Loaded live from the canonical GET /mcp/ discovery card on this Space. These are the real governed tools exposed by the live MCP (call them with POST /mcp/ JSON-RPC tools/call).

Tool	Backend flagship	Class

Recent invocations

Each MCP call appends a Khipu receipt (continuum hash + DSSE signature) to the governance chain. Recent receipts are summarized here from the server's invocation feed; if the feed endpoint is unreachable cross-origin it shows the honest interim message below.

Time (UTC)	Tool	Outcome	Continuum hash
loading…

Connect a client

Claude Desktop — add to claude_desktop_config.json (uses the mcp-remote bridge, pointing at a11oy's live canonical /mcp/):

{
  "mcpServers": {
    "szl-a11oy": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://szlholdings-a11oy.hf.space/mcp/"]
    }
  }
}

Quick test: curl -s https://szlholdings-a11oy.hf.space/mcp/ (discovery card) or curl -s -X POST https://szlholdings-a11oy.hf.space/mcp/ -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}' · public key: /cosign.pub · try the loop: /ask-and-act

This tab probes a11oy's own canonical, same-origin /mcp/ endpoint — no cross-origin CORS, no dead Space. The tool list and protocol version below are read live from GET /mcp/.

Source: szl_agentic_loop.py (canonical MCP + governed loop) · live probe of /mcp/