@treza/mcp

@treza/mcp

Model Context Protocol (MCP) server for Treza Enclaves. Lets AI agents manage hardware-isolated TEEs, verify cryptographic attestations, and interact with the Treza platform — all through natural tool calls.

Quick Start

With Claude Desktop / Cursor / Any MCP Client

Add to your MCP configuration:

{
  "mcpServers": {
    "treza": {
      "command": "npx",
      "args": ["@treza/mcp"],
      "env": {
        "TREZA_BASE_URL": "https://app.trezalabs.com"
      }
    }
  }
}

As a Standalone Server

npm install -g @treza/mcp
treza-mcp

Environment Variables

Variable	Default	Description
TREZA_BASE_URL	https://app.trezalabs.com	Treza Platform API URL
TREZA_TIMEOUT	30000	Request timeout in milliseconds
TREZA_API_KEY	—	API key (treza_live_...) for authenticated tools like treza_redact_text and treza_pii_audit_query
TREZA_ACCOUNT	—	Optional tenant account the API key belongs to

Available Tools

Enclave Management

Tool	Description
treza_list_enclaves	List all enclaves owned by a wallet address
treza_get_enclave	Get detailed info about a specific enclave
treza_create_enclave	Create a new AWS Nitro Enclave with hardware-isolated TEE
treza_update_enclave	Update enclave name, description, or config
treza_delete_enclave	Permanently delete a terminated enclave
treza_enclave_action	Pause, resume, or terminate an enclave
treza_get_enclave_logs	Retrieve logs filtered by source type

Attestation & Verification

Tool	Description
treza_get_attestation	Get attestation document with PCR measurements and certificate chain
treza_verify_attestation	Full cryptographic verification with compliance checks (SOC2, HIPAA, FIPS)
treza_get_verification_status	Quick trust level check

Platform

Tool	Description
treza_list_providers	List available enclave providers and regions
treza_get_provider	Get provider details and config schema
treza_list_tasks	List scheduled tasks
treza_create_task	Create a cron-scheduled task in an enclave
treza_list_api_keys	List scoped API keys
treza_create_api_key	Create a new API key with specific permissions

PII & Redaction

Tool	Description
treza_redact_text	Redact PII from a text string via the redaction enclave; returns redacted text, detected entities, and mode (requires TREZA_API_KEY with redact:run)
treza_redact_chat_completions	OpenAI-compatible chat completion with PII redacted before forwarding upstream; returns the provider response, request id, mode, and optional rehydration map (requires TREZA_API_KEY with redact:proxy)
treza_pii_scan	Heuristically classify which fields in a JSON payload contain PII
treza_pii_workflow_check	Audit a workflow definition for where PII flows in, is stripped, or leaks
treza_pii_audit_query	Query the PII audit log for past workflow runs (requires TREZA_API_KEY)

MCP Resources

The server also exposes browsable resources that give agents ambient context:

Resource URI	Description
treza://enclaves/{walletAddress}	All enclaves for a wallet
treza://enclaves/{enclaveId}/details	Full enclave details
treza://enclaves/{enclaveId}/attestation	Attestation document
treza://enclaves/{enclaveId}/verification	Verification status

Example Agent Interactions

An AI agent using the Treza MCP server can:

"Create me a Nitro Enclave in us-west-2 for my trading bot"
→ treza_create_enclave

"Is my enclave verified? What's the trust level?"
→ treza_verify_attestation

"Show me the last 20 error logs from my enclave"
→ treza_get_enclave_logs

"Pause my enclave to save costs while I'm not using it"
→ treza_enclave_action (pause)

Architecture

AI Agent (Claude, Cursor, etc.)
    │
    ▼
┌──────────────┐
│  @treza/mcp  │  ← MCP Server (this package)
│  16 tools    │
│  4 resources │
└──────┬───────┘
       │ HTTP
       ▼
┌──────────────────┐
│  Treza Platform  │  ← https://app.trezalabs.com
│  REST API        │
└──────┬───────────┘
       │
       ▼
┌──────────────────┐
│  AWS Nitro       │  ← Hardware-isolated TEEs
│  Enclaves        │
└──────────────────┘

Development

git clone https://github.com/treza-labs/treza-sdk.git
cd treza-sdk/packages/mcp
npm install
npm run build
npm start

Related

• @treza/sdk — Core SDK
• Treza Platform — Web dashboard
• OpenAPI Spec — Full API schema
• Agent Manifest — Machine-readable capabilities

License

MIT