Glassbox Framework MCP Server

What the code does

We read the source, 3 d ago · rules 995398eba69f

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

const child = spawn(process.execPath, [tsNodeBin, indexTs], {

            self._proc = subprocess.Popen(

Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.

        m=__import__(f"nemoguardrails.library.{mod}.actions", fromlist=["actions"])

  if (!url.startsWith("https://hooks.slack.com/")) throw new Error("Invalid Slack response URL.");

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

claude mcp add glassbox-framework -e 'ANTHROPIC_API_KEY=<ANTHROPIC_API_KEY>' -- npx -y @glassbox-framework/mcp

{
  "mcpServers": {
    "glassbox-framework": {
      "command": "npx",
      "args": [
        "-y",
        "@glassbox-framework/mcp"
      ],
      "env": {
        "ANTHROPIC_API_KEY": "<ANTHROPIC_API_KEY>"
      }
    }
  }
}

[mcp_servers.glassbox-framework]
command = "npx"
args = ["-y", "@glassbox-framework/mcp"]
env = { ANTHROPIC_API_KEY = "<ANTHROPIC_API_KEY>" }

{
  "mcpServers": {
    "glassbox-framework": {
      "command": "npx",
      "args": [
        "-y",
        "@glassbox-framework/mcp"
      ],
      "env": {
        "ANTHROPIC_API_KEY": "<ANTHROPIC_API_KEY>"
      }
    }
  }
}

{
  "servers": {
    "glassbox-framework": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@glassbox-framework/mcp"
      ],
      "env": {
        "ANTHROPIC_API_KEY": "<ANTHROPIC_API_KEY>"
      }
    }
  }
}

Put your own value in place of <ANTHROPIC_API_KEY> (Your Anthropic API key (sk-ant-...). Required for the claim extractor, red team, constitution engines, and ECS coherence checks. One v1 tool (generate_trust_card) works without an API key — it's pure assembly + deterministic audit hashing). The author’s registry entry marks it as required.

Optional settings from the registry entry, left out of the block above: GLASSBOX_MODEL (Override the Claude model used by the verification engines. Defaults to claude-sonnet-4-6), GLASSBOX_MAX_TOKENS (Per-engine-call max-tokens cap. Defaults to 2048; raise for verifying long-form content), GLASSBOX_ECS_MODE (ECS aggregation mode: arithmetic (weighted mean, default) or geometric (stricter — any zero dimension collapses the total)).