Back to Browse

Rightos Sdk MCP Server

Developer ToolsLow Risk10.0MCP RegistryLocal
Free

Server data from the Official MCP Registry

RightOS MCP: privacy-first QR queue/EV/pickup. 18 tools, no end-user PII.

About

RightOS MCP: privacy-first QR queue/EV/pickup. 18 tools, no end-user PII.

Security Report

10.0
Low Risk10.0Low Risk

Valid MCP server (2 strong, 3 medium validity signals). No known CVEs in dependencies. Package registry verified. Imported from the Official MCP Registry.

10 files analyzed · 1 issue found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

file_system

Check that this permission is expected for this type of plugin.

env_vars

Check that this permission is expected for this type of plugin.

Shell Command Execution

Runs commands on your machine. Be cautious — only use if you trust this plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

What You'll Need

Set these up before or after installing:

Operator API key (optional; demo: rk_demo_00000000000000000000)Required

Environment variable: RIGHTOS_API_KEY

Override API base URL (default: production)Optional

Environment variable: RIGHTOS_BASE_URL

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-suomimasuda-rightos-mcp": {
      "env": {
        "RIGHTOS_API_KEY": "your-rightos-api-key-here",
        "RIGHTOS_BASE_URL": "your-rightos-base-url-here"
      },
      "args": [
        "-y",
        "@i-s3/rightos-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

RightOS SDKs

ci

Official SDKs for RightOS — privacy-preserving rights verification infrastructure by I-S3 (Japan).

RightOS turns queues, reservations, EV charging, and package pickup into digital QR tickets ("Right Tokens"). It verifies that a valid right is present — never who the person is. No names, phone numbers, or birthdates are required from end users.

RightOS is not a taxi or ride-hailing service. It does not arrange vehicles, set fares, assign drivers, or broker dispatch.

SDKs

LayerQuestionPackages
RightOSWhat may be done?@i-s3/rightos · @i-s3/rightos-mcp
RightFlowWhat should happen next?@i-s3/rightflow · @i-s3/rightflow-mcp
ExecutionHow is it done?your systems

RightOS / RightFlow SDKs install via package managers (or download the thin client files).

LanguagePackageSingle fileRequirements
TypeScripttypescript/@i-s3/rightosrightos.tsNode.js ≥ 18 or a modern browser
Pythonpython/rightos-sdkrightos.pyPython ≥ 3.9, standard library only
TypeScriptrightflow/@i-s3/rightflowrightflow.tsNode.js ≥ 18 or a modern browser

RightFlow is coordination beside RightOS — not a redesign. No money, marketplace, dispatch, or robot control in the core.

MCP servers (for AI agents)

mcp/@i-s3/rightos-mcp: rights tools (issue / verify / transfer).

rightflow-mcp/@i-s3/rightflow-mcp: coordination tools (tasks / actors / proposals / transitions). Separate from RightOS MCP.

{
  "mcpServers": {
    "rightos": {
      "command": "npx",
      "args": ["-y", "@i-s3/rightos-mcp"],
      "env": { "RIGHTOS_API_KEY": "rk_live_..." }
    },
    "rightflow": {
      "command": "npx",
      "args": ["-y", "@i-s3/rightflow-mcp"],
      "env": { "RIGHTOS_API_KEY": "rk_live_..." }
    }
  }
}

Quick example (TypeScript)

import { RightOS } from "@i-s3/rightos";

const client = new RightOS({ apiKey: "rk_live_..." });
const [location] = await client.listLocations();
const issued = await client.issueToken({ locationId: location.id, title: "Queue ticket" });
// Hand issued.walletUrl (QR page) to your customer
const outcome = await RightOS.verify(issued.token.id, issued.verificationCode);
// outcome.result === "success"

Quick example (Python)

from rightos import RightOS

client = RightOS(api_key="rk_live_...")
location = client.list_locations()[0]
issued = client.issue_token(location_id=location["id"], title="Queue ticket")
outcome = RightOS().verify_token(issued["token"]["id"], issued["verificationCode"])
# outcome["result"] == "success"

Resources

Privacy & security design

  • The verification code is handed to the holder exactly once; the server stores only its SHA-256 hash.
  • Transfers use re-keying: a new code is issued and the old one is invalidated immediately.
  • QR codes contain only the tokenId and verificationCode — no personal data.
  • Paid transfers and auctions are not offered.

License

MIT © I-S3 Inc.

Reviews

No reviews yet

Be the first to review this server!