---
bezeichner: "sh.xorfox.drawbridge/server"
art: "mcp_server"
slug: "sh-xorfox-drawbridge-server"
paketkoordinate: "name:sh.xorfox.drawbridge/server"
status: "aktiv"
homepage: "https://drawbridge.xorfox.sh"
erhebungsstand: "2026-10-11T01:17:01.851Z"
namensraum: "sh.xorfox.drawbridge"
registerseite: "https://tracevero.com/mcp/sh-xorfox-drawbridge-server"
abgerufen_am: "2026-10-11"
zugangsdaten_erforderlich: true
ausfuehrungsort: "entfernt"
dateisystem_pfadargument: false
quelloffen_einsehbar: true
roh_beschreibung: "Identity, secrets, and passwordless SSH provisioning for AI agents — Keycloak, vault, MCP tools."
version: "1.0.0"
roh_umgebungsvariablen: ""
roh_geheime_pflichtvariablen: ""
roh_transportarten: "sse"
roh_pfadargumente: ""
roh_repository_url: "https://github.com/xorfox/drawbridge"
roh_paketquellen: ""
roh_geheime_pflichtkopfzeilen: "Authorization"
roh_pfad_umgebungsvariablen: ""
roh_remote_adressen: "https://api.drawbridge.xorfox.sh/mcp/sse"
roh_remote_hosts: "api.drawbridge.xorfox.sh"
roh_statusmeldung: ""
roh_veroeffentlicht_am: "2026-05-24"
roh_aktualisiert_am: "2026-05-24"
roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json"
roh_bereitstellungsform: "remote"
roh_repository_quelle: "github"
roh_repository_unterordner: ""
roh_paketbezeichner: ""
roh_paketversionen: ""
roh_laufzeithinweise: ""
roh_umgebungsformate: ""
roh_umgebungsbeschreibungen: ""
roh_symbolformate: ""
roh_verbindungswege: "{\"packages\":[],\"remotes\":[{\"url\":\"https://api.drawbridge.xorfox.sh/mcp/sse\",\"transport\":\"sse\",\"headers\":[{\"name\":\"Authorization\",\"description\":\"Bearer <access_token>. To mint a token without a human in the loop: (1) POST {\\\"agentName\\\":\\\"<name>\\\",\\\"agentEmail\\\":\\\"<principal-email>\\\"} to https://api.drawbridge.xorfox.sh/drawbridge/mcp/register — returns clientId, clientSecret, tokenEndpoint. (2) POST grant_type=client_credentials with those credentials to the token endpoint. The resulting access_token is scoped mcp:tools and audience-bound to /mcp; default TTL is 5 minutes, so refresh on the boundary.\",\"required\":true,\"secret\":true}]}]}"
---

# Drawbridge

## Measured values

| Property | Value | Source | Collected on | Level of trust | Raw declaration |
| --- | --- | --- | --- | --- | --- |
| Required secrets declared | true | MCP-Register | 2026-08-16T01:17:01.420Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: Authorization |
| Execution location | entfernt | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_transportarten: sse |
| Path argument present | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: |
| Repository URL listed | true | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_repository_url: https://github.com/xorfox/drawbridge |
| Description (raw) | Identity, secrets, and passwordless SSH provisioning for AI agents — Keycloak, vault, MCP tools. | MCP-Register | 2026-08-26T16:45:01.514Z | selbstauskunft |  |
| Declared version | 1.0.0 | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Environment variables (raw) |  | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Required secret variables (raw) |  | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Transports (raw) | sse | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Path arguments (raw) |  | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Repository (raw) | https://github.com/xorfox/drawbridge | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Package registries (raw) |  | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Required secret headers (raw) | Authorization | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Path environment variables (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Remote URLs (raw) | https://api.drawbridge.xorfox.sh/mcp/sse | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Remote hosts (raw) | api.drawbridge.xorfox.sh | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Registry status message (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| First listed in the registry (raw) | 2026-05-24 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Last changed in the registry (raw) | 2026-05-24 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Delivery form (raw) | remote | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Repository platform (raw) | github | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Repository subfolder (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Package identifiers (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Package versions (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Runtime hints (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Environment variable formats (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Environment variable descriptions (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Icon formats (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Connection paths (source structure) | {"packages":[],"remotes":[{"url":"https://api.drawbridge.xorfox.sh/mcp/sse","transport":"sse","headers":[{"name":"Authorization","description":"Bearer <access_token>. To mint a token without a human in the loop: (1) POST {\\"agentName\\":\\"<name>\\",\\"agentEmail\\":\\"<principal-email>\\"} to https://api.drawbridge.xorfox.sh/drawbridge/mcp/register — returns clientId, clientSecret, tokenEndpoint. (2) POST grant_type=client_credentials with those credentials to the token endpoint. The resulting access_token is scoped mcp:tools and audience-bound to /mcp; default TTL is 5 minutes, so refresh on the boundary.","required":true,"secret":true}]}]} | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |

## Links

- Namespace: [[namensraum/sh-xorfox-drawbridge|sh.xorfox.drawbridge]]

---

- Registry page: <https://tracevero.com/mcp/sh-xorfox-drawbridge-server>
- Retrieved on: 2026-10-11
