---
title: "MCP integrations"
description: "Governed MCP client/server without leaking unconstrained authority."
source: https://carina.nebutra.com/tools/mcp/
---

# MCP integrations

> Governed MCP client/server without leaking unconstrained authority.

Carina includes a **governed MCP manager** (`go/mcp`) and server surface (`go/mcpserver`). External tools still pass capability policy.

## Client mode

Register MCP servers in config; their tools appear inside the session subject to the active profile. Agent actions:

```json title="mcp.json"
`{"tool":"mcp", ...}`
`{"tool":"mcp_find", ...}`
```

## Inventory (operator)

`mcp.inventory` returns public MCP server names, tool names, prompt counts, and connection health.

- `/mcp verbose` can show public tool descriptions
- Process commands, arguments, environment variables, input schemas, and private managed servers are **never** returned

## Server mode

Expose a curated tool set to external MCP hosts. Prefer least privilege — do not re-export the full local kernel.

  An MCP server is an attack surface. Bind carefully, authenticate where available, and keep profiles narrow.

## Plugin model (WASM)

WASM plugins (`carina-plugin-runtime`) start with zero permissions and declare capabilities in manifests. Related: `plugin.inspect`, `plugin.run` (optional `signature_base64`).

## Source of truth

- Manager: `go/mcp` · server surface: `go/mcpserver`
- Operator inventory: `mcp.inventory` (public names/health only)
- Plugins: `carina-plugin-runtime` · `docs/plugin-model.md`
- Related: [Tools overview](/tools/overview/) · [Policy](/concepts/policy/) · [JSON-RPC](/api/json-rpc/)

## Next

- [Method catalog](/api/methods/) — filter MCP / plugin methods
- [Local deploy](/deployment/local/) — config layout for MCP servers

---
Source: https://carina.nebutra.com/tools/mcp/
Markdown: https://carina.nebutra.com/tools/mcp/index.md