Hatun-MCP — agentic MCP server
Hatun (Quechua: great / sovereign) is the Model Context Protocol gateway for SZL capabilities. This page separates a reachable runtime declaration from execution and receipt evidence. A listed tool is not proof that it has run. Receipt and signer fields remain UNKNOWN or UNAVAILABLE until the read-only evidence endpoint observes an actual governed-run receipt.
Runtime path: /mcp/ (same origin) · Transport: JSON-RPC over HTTP (POST /mcp/). Availability, protocol revision, signer evidence, and receipt-chain evidence are populated only from successful reads below.
Tools declared (—) STATIC FALLBACK
The initial rows are an explicitly labelled static fallback. A successful GET /mcp/ replaces them with the runtime-declared catalog. Neither state is execution proof.
| Tool | Description | Evidence class |
|---|
Recent invocations
This bounded, ephemeral feed contains only summaries of governed agent runs for which this process actually created a receipt. It does not claim that every MCP discovery or tool call is signed, and reading it never mints a receipt.
| Time (UTC) | Observed tool | Outcome | Receipt evidence |
|---|---|---|---|
| loading… | |||
Connect a client
Claude Desktop — deployment example using the mcp-remote bridge. Verify the target URL and authentication requirements in your environment before use:
{
"mcpServers": {
"szl-a11oy": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://szlholdings-a11oy.hf.space/mcp/"]
}
}
}
Same-origin checks: GET /mcp/ for runtime discovery, GET /api/hatun/evidence for the no-mint evidence contract, and GET /api/hatun/invocations for observed receipt summaries. A public-key path alone is not proof that any receipt was signed.
GET /mcp/ supplies runtime declarations; GET /api/hatun/evidence supplies observed receipt state. Neither GET signs, appends, or upgrades evidence.Source: szl_agentic_loop.py · read-only probes of /mcp/ and /api/hatun/evidence