STDIO SERVER

Install beside the gateway

TERMINALbash

cd /ABSOLUTE/PATH/TO/shreddar
python3 -m venv backend/.venv
backend/.venv/bin/pip install -e 'backend[dev]'

export SHREDDAR_API_URL=http://127.0.0.1:8787
export SHREDDAR_API_KEY='replace-with-local-gateway-key'

backend/.venv/bin/shreddar-mcp

ALLOWLIST

Exactly five tools

TOOL	MUTATION	RESULT
analyze	Read-only	Classification, risk, route, entities, warnings
protect	Creates local session	Protected text, receipt, usage meter; no Vault credentials
shard	Creates local session	Protected compartments, receipt, usage meter; no Vault credentials
get_receipt	Read-only	One metadata-only receipt
get_usage	Read-only	Aggregate token meters and pricing state

HOST CONFIGURATION

Generic MCP definition

Inject SHREDDAR_API_KEY through the host's protected environment or secret manager. Host schemas differ, so use the runtime-specific guide before saving configuration.

JSONjson

{
  "mcpServers": {
    "shreddar": {
      "type": "stdio",
      "command": "/ABSOLUTE/PATH/TO/shreddar/backend/.venv/bin/shreddar-mcp",
      "args": [],
      "env": {
        "SHREDDAR_API_URL": "http://127.0.0.1:8787"
      }
    }
  }
}

FAIL-CLOSED WORKFLOW

The tool call is only half the integration

Call analyze when route choice or sensitivity is uncertain.
Give downstream tools only protected_text or the minimum necessary protected shards.
Stop on local_only, gateway failure, or any SHREDDAR error.
Never infer removed values or ask another tool to recover them.
Report the receipt id, shortened integrity hash, policy, route, and verified pricing state.

INSTALL THE AGENT SKILL MCP SPECIFICATION