Kora

Name: Kora
Author: Idkasam

@Idkasam

代码仓库主页

关于 Kora

kora - MCP server for Kora — give Claude governed spending with zero code

#finance #authorization #payments #ai-agents #security #cryptography #budget

基本信息

分类

其他

许可证

Apache-2.0

运行时

python

传输方式

stdio

发布者

Idkasam

提交者

Idkasam

配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "kora": {
      "command": "kora-mcp",
      "env": {
        "KORA_API_URL": "https://api.koraprotocol.com",
        "KORA_AGENT_SECRET": "kora_agent_sk_...",
        "KORA_MANDATE": "mandate_...",
        "KORA_ADMIN_KEY": "kora_admin_sk_..."
      }
    }
  }
}

工具

Authorize a spend — returns APPROVED + seal or DENIED + hint

Check daily/monthly remaining, velocity, time windows

List recent authorizations

Server health and version

Full audit trail for a mandate

概览

What is Kora?

Kora is a cryptographically secure Go/No-Go layer for autonomous software, implemented as a Model Context Protocol (MCP) server. It enables LLMs (Claude, GPT-4, Cursor) to request explicit permission before initiating financial actions, providing budget-checked, Ed25519-signed spending with no SDK integration needed.

How to use Kora?

Install kora-mcp-server via pip, then add Kora as an MCP server in your client configuration (e.g., Claude Desktop) by setting environment variables KORA_AGENT_SECRET, KORA_MANDATE_ID, and KORA_BASE_URL. Restart the client; your AI agent can then call tools like kora_spend to authorize spending.

Key features of Kora

Budget-checked, Ed25519-signed spending for AI agents
Zero-code integration – no SDK needed
Deterministic 14-step approval pipeline (no ML)
Cryptographically sealed decisions with actionable hints
Five available tools: spend, budget check, activity, health, audit

Use cases of Kora

An AI agent requesting permission to spend $50 on AWS infrastructure
Checking daily/monthly remaining budget and velocity before a transaction
Auditing recent authorizations and full mandate history
Health-checking the Kora server from an MCP client

FAQ from Kora

What makes Kora different from other authorization systems?

Kora uses a deterministic, no-ML pipeline to approve or deny spending requests, providing a cryptographically sealed Go/No-Go decision. Every decision is signed with Ed25519.

What are the runtime dependencies for Kora?

Python is required to run the MCP server via kora-mcp-server, and an MCP client (e.g., Claude Desktop) is needed to invoke the tools. The server communicates with a remote Kora server specified by KORA_BASE_URL.

Where does authorization data live?

Authorization decisions and budgets are managed on the Kora server instance you point to via KORA_BASE_URL. The MCP server only relays signed requests and responses.

What types of actions can Kora authorize?

Kora is designed for financial actions like spending money. The available tools focus on spending, budget checks, and audit trails.

How does authentication work?

Authentication is handled via an Ed25519 signing key (KORA_AGENT_SECRET) and a mandate identifier (KORA_MANDATE_ID) provided as environment variables. No additional transport layer security is documented beyond this key-based signing.