io.github.navapbc/rebar

io.github.navapbc/rebarv0.10.1Productivity & Project Mgmt

Event-sourced ticket system with a Jira reconciler, exposed as an MCP server.

In-path gate · all MCP tools

Using io.github.navapbc/rebar in Claude, Cursor, Gemini CLI, Cline, or Zed?

MCP tool contracts can change remotely with no version bump. The mcpindex gate pins each contract and HOLDs the call when it drifts-before your agent acts. Zero credentials. This is not the package install for this server itself (use Install this server for that).

Install the mcpindex gate (one command)

Rewrites your MCP host config so each server launches behind the gate. Inspect first: curl -fsSL https://mcpindex.ai/install.sh | less

uv tool install mcpindex-gate && mcpindex-config-wire

Auditable install path →Watch it hold a drift →

Trust verdict · v1 advisory · method

NOT YET SCREENEDno verdict on file

Verdict not yet evaluated for this tool. The semantic screen takes adversarial cases first; coverage rolls out as the corpus expands (15/150 labels to graduation). The deterministic conformance probe is built but has not yet run on the public corpus, so a recorded verdict here is REVIEW or UNVERIFIED, never a clearing ALLOW. Until a verdict is recorded, an agent should treat this tool as not-yet-cleared and fall back to its own checks. Method: the eval, four-state verdict, honest limits.

Own this server? Screen its description →

That verdict was true at screening time (snapshot 2026-07-24).

Contracts can change after screening, with no version bump. The gate pins io.github.navapbc/rebar’s tool contracts on first sight and holds any silent change before your agent acts - the check that keeps being true on Tuesday.

See your first HOLD in 2 minutes →

Environment variables

REBAR_ROOT

Path to the repo root that holds the .tickets-tracker store (defaults to the git toplevel of the working dir).

REBAR_MCP_READONLY

Set to 1 to expose only the read tools (no write/mutation tools).

REBAR_MCP_ALLOW_LLM

Set to 1 to enable the billable LLM tools (review_ticket / review_code / scan_spec / verify_completion / review_plan); off by default.

REBAR_MCP_ALLOW_JIRA_SYNC

Set to 1 to allow the live (mutating) Jira reconcile mode; otherwise reconcile is dry-run only.

REBAR_MCP_TRANSPORT

Transport for the MCP server: 'stdio' (default) or 'http' (the optional Streamable-HTTP transport).

REBAR_MCP_HTTP_HOST

Bind host for the Streamable-HTTP transport (default 127.0.0.1).

REBAR_MCP_HTTP_PORT

Bind port for the Streamable-HTTP transport (1-65535; default 8000).

REBAR_MCP_HTTP_PATH

URL path the Streamable-HTTP transport serves on (default /mcp).

REBAR_MCP_HTTP_ALLOWED_HOSTS

Comma-separated allowlist of exact host:port values accepted by the Streamable-HTTP DNS-rebinding protection; empty defaults to loopback.

REBAR_MCP_HTTP_ALLOWED_ORIGINS

Comma-separated allowlist of exact Origin values accepted by the Streamable-HTTP DNS-rebinding protection; empty defaults to loopback.

REBAR_MCP_HTTP_TLS_AT_EDGE

Set to 1 to acknowledge TLS is terminated at the edge; required to bind the Streamable-HTTP transport to a non-loopback host.

REBAR_MCP_ALLOW_UNAUTHENTICATED_HTTP

Set to 1 to acknowledge running the Streamable-HTTP transport without a token verifier; required to boot the HTTP transport while auth is off.

REBAR_MCP_AUTH_ENABLED

Set to 1 to enable MCP authentication (the composite token verifier + Resource-Server wiring); off by default.

REBAR_MCP_AUTH_STRATEGIES

Comma-separated, ordered list of token-verifier strategies to compose (closed set: static, jwt, introspection, proxy, custom).

REBAR_MCP_AUTH_ISSUER_URL

OAuth authorization-server issuer URL advertised in the Protected-Resource Metadata (RFC 9728) when auth is enabled.

REBAR_MCP_AUTH_RESOURCE_SERVER_URL

The single resource identifier (RFC 8707 audience) for this server; the composite verifier re-checks every accepted token against it.

REBAR_MCP_AUTH_REQUIRED_SCOPES

Comma-separated scopes a caller must hold; the SDK returns 403 insufficient_scope when a principal lacks one.

REBAR_MCP_AUTH_STATIC_TOKENS_FILE

Path to the JSON secrets file for the static-bearer verifier (stores only SHA-256 digests of the accepted tokens).

REBAR_MCP_AUTH_JWT_JWKS_URI

HTTPS JWKS endpoint the `jwt` verifier fetches signing keys from (an OIDC provider's .well-known/jwks.json).

REBAR_MCP_AUTH_JWT_ISSUER

Expected `iss` claim for the `jwt` verifier; falls back to REBAR_MCP_AUTH_ISSUER_URL when unset.

REBAR_MCP_AUTH_JWT_ALGORITHMS

Comma-separated PINNED, asymmetric-only JWS algorithms for the `jwt` verifier (default RS256,ES256); a symmetric algorithm on a JWKS source is refused.

REBAR_MCP_AUTH_JWT_LEEWAY

Clock-skew leeway in seconds applied to exp/nbf validation by the `jwt` verifier (default 60).

REBAR_MCP_AUTH_JWT_JWKS_REFETCH_COOLDOWN

Minimum seconds between JWKS refetches triggered by an unknown key id (the concurrency-safe flood guard; default 30).

REBAR_MCP_AUTH_JWT_JWKS_TIMEOUT

HTTP timeout in seconds for the `jwt` verifier's JWKS fetch (default 10).

REBAR_MCP_AUTH_JWT_EXPECTED_TYP

When set, the `jwt` verifier requires the JWT header `typ` to equal this (e.g. at+JWT per RFC 9068); unset skips the check.

REBAR_MCP_AUTH_JWT_ALLOW_PRIVATE_JWKS_HOST

Set to 1 to permit a private/link-local/loopback JWKS host (SSRF guard is on by default); off by default.

REBAR_MCP_AUTH_INTROSPECTION_ENDPOINT

The `introspection` verifier's RFC 7662 endpoint URL (must be https://); the opaque token is POSTed here on every request (no caching).

REBAR_MCP_AUTH_INTROSPECTION_CLIENT_ID

The client id the `introspection` verifier presents to the Authorization Server via HTTP Basic (client_secret_basic).

REBAR_MCP_AUTH_INTROSPECTION_CLIENT_SECRET_ENV

The NAME of the env var holding the introspection client secret (never the secret itself); must be present + non-empty at startup or the server refuses to start (fail-closed).

REBAR_MCP_AUTH_INTROSPECTION_ALLOW_PRIVATE_HOST

Set to 1 to permit a private/link-local/loopback introspection endpoint host (SSRF guard is on by default); off by default.

REBAR_MCP_AUTH_INTROSPECTION_ALLOW_MISSING_AUD

Set to 1 to accept an active introspection response that OMITS `aud` (many AS do); off by default (fail-closed reject).

REBAR_MCP_AUTH_PROXY_SECRET_ENV

The NAME of the env var holding the trusted-proxy shared secret (never the secret itself); must be present + non-empty at startup or the `proxy` verifier refuses to start (fail-closed).

REBAR_MCP_AUTH_PROXY_SECRET_HEADER

The header the fronting proxy sends its shared secret on; the identity is trusted only when this matches (constant-time; default x-proxy-auth).

REBAR_MCP_AUTH_PROXY_IDENTITY_HEADER

The header carrying the proxy-authenticated principal identity, trusted only when the secret header validates (default x-forwarded-user).

REBAR_MCP_AUTH_PROXY_SCOPES

Comma-separated fixed scope set granted to proxy-authenticated principals; empty by default (the principal holds no scopes).

REBAR_MCP_AUTH_CUSTOM_IMPORT

The `custom` strategy's `module:factory` import string, resolving to a factory that returns a TokenVerifier; a TRUSTED operator config value that loads and executes the operator-configured code at startup (fail-closed on any load error).

MCP quality score · maturity, not trust · methodology

freshness

completeness

installability

documentation

stability

Alternatives in Productivity & Project Mgmt

ai.smithery/Aman-Amith-Shastry-scientific_computation_mcp

This MCP server enables users to perform scientific computations regarding linear algebra and vect…

ai.smithery/mrugankpednekar-mcp-optimizer

Optimize crew and workforce schedules, resource allocation, and routing with linear and mixed-inte…

ai.smithery/smithery-notion

A Notion workspace is a collaborative environment where teams can organize work, manage projects,…

Install this server

Claude Desktop (uvx)

{
  "mcpServers": {
    "rebar": {
      "command": "uvx",
      "args": [
        "nava-rebar"
      ],
      "env": {
        "REBAR_ROOT": "<rebar_root>",
        "REBAR_MCP_READONLY": "<rebar_mcp_readonly>",
        "REBAR_MCP_ALLOW_LLM": "<rebar_mcp_allow_llm>",
        "REBAR_MCP_ALLOW_JIRA_SYNC": "<rebar_mcp_allow_jira_sync>",
        "REBAR_MCP_TRANSPORT": "<rebar_mcp_transport>",
        "REBAR_MCP_HTTP_HOST": "<rebar_mcp_http_host>",
        "REBAR_MCP_HTTP_PORT": "<rebar_mcp_http_port>",
        "REBAR_MCP_HTTP_PATH": "<rebar_mcp_http_path>",
        "REBAR_MCP_HTTP_ALLOWED_HOSTS": "<rebar_mcp_http_allowed_hosts>",
        "REBAR_MCP_HTTP_ALLOWED_ORIGINS": "<rebar_mcp_http_allowed_origins>",
        "REBAR_MCP_HTTP_TLS_AT_EDGE": "<rebar_mcp_http_tls_at_edge>",
        "REBAR_MCP_ALLOW_UNAUTHENTICATED_HTTP": "<rebar_mcp_allow_unauthenticated_http>",
        "REBAR_MCP_AUTH_ENABLED": "<rebar_mcp_auth_enabled>",
        "REBAR_MCP_AUTH_STRATEGIES": "<rebar_mcp_auth_strategies>",
        "REBAR_MCP_AUTH_ISSUER_URL": "<rebar_mcp_auth_issuer_url>",
        "REBAR_MCP_AUTH_RESOURCE_SERVER_URL": "<rebar_mcp_auth_resource_server_url>",
        "REBAR_MCP_AUTH_REQUIRED_SCOPES": "<rebar_mcp_auth_required_scopes>",
        "REBAR_MCP_AUTH_STATIC_TOKENS_FILE": "<rebar_mcp_auth_static_tokens_file>",
        "REBAR_MCP_AUTH_JWT_JWKS_URI": "<rebar_mcp_auth_jwt_jwks_uri>",
        "REBAR_MCP_AUTH_JWT_ISSUER": "<rebar_mcp_auth_jwt_issuer>",
        "REBAR_MCP_AUTH_JWT_ALGORITHMS": "<rebar_mcp_auth_jwt_algorithms>",
        "REBAR_MCP_AUTH_JWT_LEEWAY": "<rebar_mcp_auth_jwt_leeway>",
        "REBAR_MCP_AUTH_JWT_JWKS_REFETCH_COOLDOWN": "<rebar_mcp_auth_jwt_jwks_refetch_cooldown>",
        "REBAR_MCP_AUTH_JWT_JWKS_TIMEOUT": "<rebar_mcp_auth_jwt_jwks_timeout>",
        "REBAR_MCP_AUTH_JWT_EXPECTED_TYP": "<rebar_mcp_auth_jwt_expected_typ>",
        "REBAR_MCP_AUTH_JWT_ALLOW_PRIVATE_JWKS_HOST": "<rebar_mcp_auth_jwt_allow_private_jwks_host>",
        "REBAR_MCP_AUTH_INTROSPECTION_ENDPOINT": "<rebar_mcp_auth_introspection_endpoint>",
        "REBAR_MCP_AUTH_INTROSPECTION_CLIENT_ID": "<rebar_mcp_auth_introspection_client_id>",
        "REBAR_MCP_AUTH_INTROSPECTION_CLIENT_SECRET_ENV": "<rebar_mcp_auth_introspection_client_secret_env>",
        "REBAR_MCP_AUTH_INTROSPECTION_ALLOW_PRIVATE_HOST": "<rebar_mcp_auth_introspection_allow_private_host>",
        "REBAR_MCP_AUTH_INTROSPECTION_ALLOW_MISSING_AUD": "<rebar_mcp_auth_introspection_allow_missing_aud>",
        "REBAR_MCP_AUTH_PROXY_SECRET_ENV": "<rebar_mcp_auth_proxy_secret_env>",
        "REBAR_MCP_AUTH_PROXY_SECRET_HEADER": "<rebar_mcp_auth_proxy_secret_header>",
        "REBAR_MCP_AUTH_PROXY_IDENTITY_HEADER": "<rebar_mcp_auth_proxy_identity_header>",
        "REBAR_MCP_AUTH_PROXY_SCOPES": "<rebar_mcp_auth_proxy_scopes>",
        "REBAR_MCP_AUTH_CUSTOM_IMPORT": "<rebar_mcp_auth_custom_import>"
      }
    }
  }
}

Verdict API

curl -s mcpindex.ai/api/v1/trust/server/io-github-navapbc-rebar

Free-tier verdict as JSON: decision + dimensions + severity. Call it from your agent before it invokes a tool it just discovered.

Details

version: v0.10.1
category: Productivity & Project Mgmt
quality: 80 / 100
operator: navapbc

Listing

Listed from the official MCP registry. Unclaimed by its maintainer. Maintainer? Email us →

Provenance

Verdict history is anchored to Bitcoin via OpenTimestamps. The anchor proof is public and any skeptic can recompute it offline.

Links

Repository →