# intentplane MCP server

> Acts as a deterministic gateway between LLM agents and MCP tools to verify critical arguments against trusted sources and security policies.

- Repository: https://github.com/HamdiM99/intentplane
- Page: https://hostedmcp.org/servers/hamdim99/intentplane
- Transport: stdio
- Stars: 0
- License: Apache-2.0
- Latest version: 0.8.0

## Install

### Claude Code

```sh
claude mcp add intentplane -- uvx intentplane-mcp
```

### Cursor (`~/.cursor/mcp.json`)

```json
{
  "mcpServers": {
    "intentplane": {
      "command": "uvx",
      "args": [
        "intentplane-mcp"
      ]
    }
  }
}
```

### VS Code (`.vscode/mcp.json`)

```json
{
  "servers": {
    "intentplane": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "intentplane-mcp"
      ]
    }
  }
}
```

### Claude Desktop (`claude_desktop_config.json`)

```json
{
  "mcpServers": {
    "intentplane": {
      "command": "uvx",
      "args": [
        "intentplane-mcp"
      ]
    }
  }
}
```

### Codex (`~/.codex/config.toml`)

```toml
[mcp_servers.intentplane]
command = "uvx"
args = ["intentplane-mcp"]
```

### Gemini CLI (`~/.gemini/settings.json`)

```json
{
  "mcpServers": {
    "intentplane": {
      "command": "uvx",
      "args": [
        "intentplane-mcp"
      ]
    }
  }
}
```

## Environment variables

| Name | Required | Secret | Description |
|---|---|---|---|
| `INTENTPLANE_SIDECAR_SECRET` | no | no |  |

## FAQ

### How does intentplane protect against prompt injection?

It does not try to detect injections; instead, it assumes the agent is compromised and ensures that only values mandated by the user and verified against trusted sources are executed.

### Can I use intentplane with existing MCP clients like Claude Desktop?

Yes, the intentplane-mcp proxy sits between the MCP client and the MCP servers, allowing you to use it with Claude Desktop, Claude Code, Cursor, and more without changing them.

### What happens if a critical value is not recognized?

The gateway checks critical values against action contracts and trusted registries; if a value is not legitimate, the action is denied.