Personal project
Agent Visa
An MCP permission server and holder console for scoped context access, approval, receipts and cascading revocation. Delegated visas cannot exceed their parent. SQLite stands in for the gated external memory API.
- Python
- MCP
- SQLite
The problem
An agent asking for personal context needs a narrow permission, a time limit and a way for the holder to revoke access—including delegated access.
Implementation decisions
- Keep authorization decisions in pure policy functions, separate from the server, console and database.
- Restrict a delegated visa to a subset of its parent's fields and lifetime, with no further delegation.
- Return proof rather than raw values for attested fields, and write receipts alongside the effects they record.
Evidence and limits
The public README and authorization policy were reviewed on 21 October 2026. The console screenshot comes from the repository, not a newly verified live deployment. The passport store is SQLite standing in for a gated external memory API; full external integration and verified agent identity are not claimed. The project's tests were not rerun here.