{
  "$schema": "https://raw.githubusercontent.com/modelcontextprotocol/modelcontextprotocol/main/schema/mcp-server-card.schema.json",
  "name": "drel",
  "serverInfo": {
    "name": "drel",
    "version": "1.0.0"
  },
  "protocolVersion": "2025-03-26",
  "description": "Read-only MCP server exposing published Drel AI Security Review cases — clearance decision, required controls, key threats, evidence gaps, and re-assessment triggers — as resources.",
  "transport": {
    "type": "streamable-http",
    "url": "https://app.drel.ai/api/mcp"
  },
  "capabilities": {
    "resources": {
      "subscribe": false,
      "listChanged": false
    },
    "tools": false,
    "prompts": false,
    "sampling": false
  },
  "methods": [
    "initialize",
    "ping",
    "resources/list",
    "resources/read"
  ],
  "authentication": {
    "type": "bearer",
    "required": false,
    "description": "Not required for `initialize` or `ping` (capability discovery and liveness check). Required for `resources/list` and `resources/read`: a Drel API key (`drel_pk_...`, unscoped) sent as `Authorization: Bearer <key>` — generate one at https://app.drel.ai/settings/mcp — or a Clerk-issued OAuth 2.0 access token with the `cases:read` scope, see `oauth` below.",
    "tokenUrl": "https://app.drel.ai/settings/mcp",
    "oauth": {
      "protectedResourceMetadata": "https://drel.ai/.well-known/oauth-protected-resource",
      "authorizationServerMetadata": "https://drel.ai/.well-known/oauth-authorization-server",
      "scopes": [
        "cases:read"
      ]
    }
  },
  "resourceUriScheme": "drel://case/{id}",
  "homepage": "https://drel.ai/developers",
  "documentation": "https://drel.ai/openapi.json",
  "manifest": "https://drel.ai/.well-known/mcp.json"
}