server.json

{
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json",
  "name": "io.github.neul-labs/closegate-engine",
  "description": "The policy chokepoint for finance AI agents — a policy gate, audit log, HITL approval envelopes, and reference workflows (reconciliation + AP 3-way match) for finance teams who want to put AI agents in front of close, reconciliation, and AP cycles without losing the controls auditors depend on.",
  "version": "0.1.0",
  "status": "alpha",
  "repository": {
    "url": "https://github.com/neul-labs/closegate",
    "source": "github"
  },
  "homepage": "https://closegate.neullabs.com",
  "documentation": "https://closegate.neullabs.com",
  "license": {
    "id": "Apache-2.0",
    "url": "https://github.com/neul-labs/closegate/blob/main/LICENSE"
  },
  "categories": [
    "finance",
    "accounting",
    "compliance",
    "audit",
    "reconciliation",
    "automation"
  ],
  "keywords": [
    "finance",
    "close",
    "reconciliation",
    "ap-three-way-match",
    "policy-gate",
    "sox",
    "soc2",
    "hitl",
    "segregation-of-duties",
    "audit-log",
    "decimal",
    "py-moneyed"
  ],
  "icon": "https://closegate.neullabs.com/assets/closegate-mark.svg",
  "author": {
    "name": "closegate contributors",
    "url": "https://github.com/neul-labs/closegate"
  },
  "packages": [
    {
      "registryName": "pypi",
      "name": "closegate-engine",
      "version": "0.1.0",
      "runtimeHint": "python>=3.12",
      "runtimeArguments": [],
      "transport": {
        "type": "stdio"
      },
      "command": "closegate-engine",
      "args": ["mcp", "serve", "--transport", "stdio"],
      "environmentVariables": [
        {
          "name": "ANTHROPIC_API_KEY",
          "description": "Required only when using the bundled closegate agent. The MCP server itself is LLM-agnostic.",
          "required": false,
          "secret": true
        },
        {
          "name": "CLOSEGATE_DB_PATH",
          "description": "Path to the SQLite recon database. Default: ./data/recon.db",
          "required": false,
          "secret": false,
          "default": "./data/recon.db"
        },
        {
          "name": "CLOSEGATE_ACTOR_ID",
          "description": "Stable per-process actor identity used for SoD + audit-log attribution. Format: 'human:<id>' | 'llm:<id>' | 'engine:<id>'.",
          "required": true,
          "secret": false
        },
        {
          "name": "CLOSEGATE_AGENT_MODEL",
          "description": "Pinned Claude model ID when using the bundled agent. Pin to a specific version (e.g. 'claude-sonnet-4-6') for reproducibility.",
          "required": false,
          "secret": false
        },
        {
          "name": "CLOSEGATE_MCP_TRANSPORT",
          "description": "MCP transport: 'stdio' (default), 'http', or 'sse'.",
          "required": false,
          "secret": false,
          "default": "stdio"
        }
      ]
    },
    {
      "registryName": "docker",
      "name": "ghcr.io/neul-labs/closegate-engine",
      "version": "0.1.0",
      "transport": {
        "type": "stdio"
      },
      "command": "docker",
      "args": [
        "run", "--rm", "-i",
        "-v", "${HOME}/.closegate:/data",
        "-e", "CLOSEGATE_ACTOR_ID",
        "-e", "CLOSEGATE_DB_PATH=/data/recon.db",
        "ghcr.io/neul-labs/closegate-engine:0.1.0",
        "closegate-engine", "mcp", "serve", "--transport", "stdio"
      ],
      "environmentVariables": [
        {
          "name": "CLOSEGATE_ACTOR_ID",
          "description": "Stable per-process actor identity used for SoD + audit-log attribution.",
          "required": true,
          "secret": false
        }
      ]
    }
  ],
  "tools": [
    {
      "name": "run_recon_pass",
      "description": "Run the deterministic matching pipeline (exact → multi-to-one → fuzzy) across all unmatched entries.",
      "tier": "T0"
    },
    {
      "name": "propose_match",
      "description": "Propose a match between a GL entry and one or more SL entries.",
      "tier": "T0"
    },
    {
      "name": "confirm_match",
      "description": "Confirm a proposed match. SoD + materiality enforced by the policy gate.",
      "tier": "T2"
    },
    {
      "name": "reject_match",
      "description": "Reject a proposed match. Frees the entries back to UNMATCHED.",
      "tier": "T1"
    },
    {
      "name": "flag_exception",
      "description": "Mark an unmatched GL entry as an EXCEPTION with a recorded rationale.",
      "tier": "T1"
    },
    {
      "name": "investigate_exception",
      "description": "Read-only: return the entry and a curated set of near-misses.",
      "tier": "T0"
    },
    {
      "name": "generate_close_summary",
      "description": "Read-only synthesis of state suitable for audit review.",
      "tier": "T0"
    },
    {
      "name": "query_audit",
      "description": "Query the append-only audit log with filters (since, until, match_id, actor, event_type).",
      "tier": "T0"
    },
    {
      "name": "escalate_match",
      "description": "Escalate a proposed match to a (named or any) manager. Metadata only — the resolution still goes through the gate.",
      "tier": "T1"
    },
    {
      "name": "list_pending_escalations",
      "description": "List PENDING escalations, optionally filtered by named approver.",
      "tier": "T0"
    },
    {
      "name": "resolve_escalation",
      "description": "Resolve a PENDING escalation as RESOLVED_CONFIRM / RESOLVED_REJECT / WITHDRAWN. SoD: only the named approver (or originator on withdraw) may act.",
      "tier": "T1"
    },
    {
      "name": "ap_ingest_invoice",
      "description": "Persist a vendor invoice (M3.1 alpha).",
      "tier": "T0"
    },
    {
      "name": "ap_propose_invoice_coding",
      "description": "LLM proposes GL-account codings for an invoice's lines.",
      "tier": "T0"
    },
    {
      "name": "ap_match_three_way",
      "description": "Run the deterministic 3-way matcher against an invoice + PO + GR.",
      "tier": "T0"
    },
    {
      "name": "ap_confirm_invoice_coding",
      "description": "Confirm proposed codings — moves invoice from RECEIVED → CODED.",
      "tier": "T1"
    },
    {
      "name": "ap_approve_invoice_for_payment",
      "description": "Approve invoice for payment. SoD: actor ≠ PO requestor.",
      "tier": "T2"
    },
    {
      "name": "ap_propose_payment_run",
      "description": "Group APPROVED_FOR_PAYMENT invoices into a DRAFT payment run.",
      "tier": "T2"
    },
    {
      "name": "ap_approve_payment_run",
      "description": "Approve a payment run. SoD: approver ≠ requestor.",
      "tier": "T2"
    },
    {
      "name": "ap_submit_payment_run",
      "description": "Submit payment run to bank/ACH. Dual SoD: payer ≠ approver ≠ requestor. Irreversible.",
      "tier": "T3"
    }
  ],
  "resources": [
    {
      "uri": "recon://status",
      "description": "KPI snapshot for the dashboard."
    },
    {
      "uri": "recon://policy",
      "description": "The parsed policy.yaml in JSON form."
    },
    {
      "uri": "recon://exceptions",
      "description": "Open exception list."
    },
    {
      "uri": "recon://audit",
      "description": "Recent audit-log events."
    }
  ]
}