Agent OS · Component · signed-principal-bff
Signed-principal MCP backend proxy
What it does
Verify backend user identity, mint signed principal headers and proxy MCP requests through server-held agent credentials.
Core pattern
Verified user context signing + authorized request proxying
- Input
- Authenticated user request
- Output
- Signed principal context and proxied MCP response
Key parameters
| Name | Type | Default | Values |
|---|---|---|---|
| method | string | — | — |
| params | object | {} | — |
| scopes | array | [] | — |
| principal_ttl_seconds | integer | 60 | 1–3600 |
| audience | string | — | — |
Maturity and limits
Source paths were inspected statically; tests and live integrations were not executed. This rating describes implemented code, not production validation.
No root license found; sample fallback and heuristic benefits must be explicit. User sessions, delegated authority and payment data need protection.
1 sentence citing source paths or vendor names omitted for publication.
Used in pipelines
Industry tags
- Travel & hotelsSource-supported industry
For work involving destinations, room rates and bookings, use verified user context signing followed by authorized request proxying.
- HealthcareTransferable use
For hospital appointment and administrative service desks, use verified user context signing followed by authorized request proxying.
Skills pack
Contract scaffold and deterministic mock
Download · 10KBSHA-256 e09f03d0cce9a32b60a99791399053ea771c9fb9314cb46a13323ffdf044db23
Related components
-
Local coding-agent execution governance
Pre-action policy decisions + human permission and audit
Working 1 pipeline -
Collaborative delivery, approvals and evidence gates
Draft and artifact versioning + human handoff approval
Working 4 pipelines -
Tenant identity, enterprise SSO, provisioning and access control
Organization membership sync + scoped role access
Working 1 pipeline -
Customer sessions, registration and verification
Account verification + session and access management
Working 1 pipeline