Paradym MCP server

Connect Paradym to Claude, ChatGPT, Cursor, Claude Code, Codex, Gemini, GitHub Copilot and any other MCP client, for your whole team. Metorial adds security, governance, and tracing, and gives everyone one Magic MCP URL to connect.

What you can do with the Paradym MCP server

Ask your agent in plain language. Each of these maps to a real tool on the server.

  • Use the manage trusted entity tool in Paradym
  • Use the revoke credentials tool in Paradym
  • Use the create verification request tool in Paradym
  • Use the get verification session tool in Paradym
  • Use the issue credential tool in Paradym
  • Use the manage didcomm connection tool in Paradym

Supported Tools

manage_trusted_entity

Manage Trusted Entity

Create or update a trusted entity to restrict which issuers are accepted during credential verification. Trusted entities can include DIDs and X.509 certificates, and are linked to presentation templates.

revoke_credentials

Revoke Credentials

Batch-revoke one or more previously issued credentials. Supports both SD-JWT and AnonCreds credentials. Optionally notify the holder's wallet about the revocation via DIDComm Revocation Notification.

create_verification_request

Create Verification Request

Create a credential verification request to ask a holder to present their credentials. Supports both **OpenID4VC** (for SD-JWT VC and mDOC) and **DIDComm** (for AnonCreds) protocols. Returns a URI/QR code the holder can scan to present their credentials.

get_verification_session

Get Verification Session

Retrieve details and results of a credential verification session. Use this to check if a holder has presented their credentials and to access the verified credential data.

issue_credential

Issue Credential

Issue a verifiable credential to a holder. Supports three methods: - **openid4vc**: Creates an OpenID4VC issuance offer with a scannable URI/QR code for SD-JWT VC and mDOC credentials. - **didcomm**: Creates a DIDComm issuance offer for AnonCreds credentials via invitation or existing connection. - **direct**: Directly signs and returns an SD-JWT VC credential without an exchange protocol.

manage_didcomm_connection

Manage DIDComm Connection

Create DIDComm invitations, receive invitations, or update existing connections. DIDComm connections enable secure messaging and credential exchange between parties. Invitations can be single-use or reusable.

list_credential_templates

List Credential Templates

Retrieve credential templates configured in a Paradym project. Returns templates for all supported formats (SD-JWT VC, mDOC, AnonCreds) including their attributes, branding, issuer settings, and revocability configuration.

list_issued_credentials

List Issued Credentials

Retrieve metadata about issued credentials in a Paradym project. Use this to track the status of credentials, filter by format or revocation status, and find credential IDs for revocation.

manage_presentation_template

Manage Presentation Template

Create or update a presentation template that defines what credentials and attributes to request from a holder during verification. Supports SD-JWT VC, mDOC, and AnonCreds credential formats. Each template can request up to 20 credentials with attribute constraints (value, range, type).

list_didcomm_connections

List DIDComm Connections

Retrieve DIDComm connections established in a Paradym project. Connections are used for credential issuance, verification, and secure messaging between parties.

create_credential_template

Create Credential Template

Create a new credential template in Paradym. Supports three formats: **sd-jwt-vc** (SD-JWT VC over OpenID4VC), **mdoc** (ISO 18013-5 mDOC/mDL over OpenID4VC), and **anoncreds** (AnonCreds over DIDComm). Configure typed attributes, visual branding, validity periods, and revocability.

list_trusted_entities

List Trusted Entities

Retrieve trusted entities configured in a Paradym project. Trusted entities define which issuers (identified by DIDs or X.509 certificates) are accepted during credential verification.

list_presentation_templates

List Presentation Templates

Retrieve presentation templates configured in a Paradym project. Presentation templates define what credentials and attributes to request from a holder during verification.

list_projects

List Projects

Retrieve all Paradym projects accessible to the authenticated user. Each project provides multi-tenancy with its own templates, sessions, and settings.

get_issuance_session

Get Issuance Session

Retrieve details of a credential issuance session. Use this to check the current status of an OpenID4VC or DIDComm issuance offer, including whether the credential has been accepted by the holder.

list_dids

List DIDs

Retrieve Decentralized Identifiers (DIDs) available in a Paradym project. DIDs are used as issuer and verifier identifiers when creating credential and presentation templates. Supports did:web and did:cheqd methods.

get_credential_template

Get Credential Template

Retrieve a complete credential template, including its attributes, issuer, validity, and branding. Call list_projects to discover project IDs and list_credential_templates to discover template IDs and formats.

get_presentation_template

Get Presentation Template

Retrieve a complete presentation template, including credential requests, trusted issuers, attribute constraints, and verifier settings. Call list_projects to discover project IDs and list_presentation_templates to discover template IDs.

Connect Paradym to your AI client

Every client uses the same Magic MCP URL, and so does any other MCP client. Add it once and sign in with SSO.

  1. Enable Paradym in Metorial. In your Metorial portal, enable the Paradym MCP server and sign in with the account that owns the data. Access stays governed by your team policies.
  2. Add a custom connector. Open Customize, then Connectors. Select Add, then Custom, then Web.
  3. Paste your Metorial MCP URL. Name it Metorial, paste your Magic MCP URL (<your-magic-mcp-url>) and continue.
  4. Sign in. Select Add and sign in to load Paradym tools.

Run Paradym through the Metorial gateway

One governed layer for every app your agents reach, not a separate connector per tool.

  • Give Paradym and every other app to your whole team through one MCP gateway, behind your SSO.
  • Scope which teams and agents can use Paradym tools with role-based access control, and trace every call.
  • Prefer to run it yourself? Metorial is open source and self-hostable.

More integrations teams use with Paradym

Supabase

Manage PostgreSQL databases, authenticate users, store files, and run edge functions on Supabase. Perform CRUD operations on database tables via auto-generated REST and GraphQL APIs with row-level security. Create and manage user accounts with password, magic link, OTP, social login, and SSO authentication. Upload, download, list, and delete files organized in storage buckets. Deploy and invoke server-side TypeScript edge functions. Listen to realtime database changes, broadcast messages, and track user presence. Configure database webhooks for INSERT, UPDATE, and DELETE events. Programmatically manage Supabase organizations and projects, including creating/deleting projects, managing API keys, configuring auth settings, custom domains, network restrictions, and Edge Function secrets.

Datadog

Monitor infrastructure, applications, and services across cloud environments. Submit, discover, and query metrics; create and manage monitors and alerts; build and clean up dashboards; search and analyze logs; manage incidents; track SLOs; run synthetic tests; inspect users and hosts; and schedule or cancel monitor downtimes.

Firebase

Manage backend services for mobile and web applications. Create, read, update, and delete documents in Cloud Firestore and Realtime Database. Manage user accounts including creating, updating, deleting, and listing users with authentication support. Send push notifications and data messages to devices, topics, and device groups via Cloud Messaging (FCM). Upload, download, and delete files in Cloud Storage. Read and publish Remote Config templates to change app behavior remotely. Deploy and manage serverless Cloud Functions triggered by database events, authentication events, storage events, and HTTP requests. Stream real-time database changes via Server-Sent Events. Query databases with filters, ordering, and pagination. Perform batch writes and transactions in Firestore. Generate and verify custom tokens and ID tokens for user authentication.

Kibana

Manage Kibana resources and the Elastic Stack visualization layer programmatically. Create, import, export, and organize saved objects such as dashboards, visualizations, and data views across spaces. Configure alerting rules with threshold, query, and metric conditions, and connect them to actions via connectors (email, Slack, PagerDuty, webhook, Jira, ServiceNow, and more). Manage data views (index patterns) that define which Elasticsearch indices Kibana queries. Create and organize spaces to separate dashboards and objects into meaningful categories. Track incidents with cases, define and monitor Service Level Objectives (SLOs), manage Fleet agent policies and enrollments, configure security detection rules for SIEM, and control role-based access with Kibana feature privileges.

Kubernetes

Manage and orchestrate containerized applications on Kubernetes clusters. Create, update, scale, and delete workloads including Pods, Deployments, StatefulSets, DaemonSets, Jobs, and CronJobs. Configure service discovery and load balancing through Services, Ingress, and Endpoints. Manage configuration and storage with ConfigMaps, Secrets, PersistentVolumes, and StorageClasses. Control access with Namespaces, RBAC roles and bindings, ServiceAccounts, and NetworkPolicies. Administer cluster infrastructure including Nodes, ResourceQuotas, LimitRanges, and PriorityClasses. Autoscale workloads with HorizontalPodAutoscaler and VerticalPodAutoscaler. Define and manage Custom Resource Definitions (CRDs) to extend cluster functionality. Watch resources in real time for create, modify, and delete events. Configure admission webhooks to validate or mutate resources before persistence.

Cloudflare

Manage internet infrastructure including DNS records, domains, and zone settings. Deploy and configure serverless Workers scripts, R2 object storage buckets, and Pages deployments. Configure security rules including WAF, firewall rules, rate limiting, DDoS protection, and IP access controls. Manage SSL/TLS certificates, load balancers, origin pools, and health monitors. Upload and deliver video content via Cloudflare Stream. Access traffic, DNS, and security analytics via GraphQL. Configure Zero Trust Access applications, Gateway policies, and Tunnel connections. Set up alerting and webhook notifications for security events, health checks, certificate status, and usage thresholds. Register and manage domains, account members, roles, and API tokens.

Technical notes for Paradym

Issue, verify, and revoke verifiable credentials using SD-JWT VC, mDOC, and AnonCreds formats over OpenID4VC and DIDComm protocols. Create and manage credential templates with typed attributes, branding, and revocability settings. Define presentation templates to request and verify credentials from holders. Manage trusted entities (X.509 certificates and DIDs) to restrict accepted issuers during verification. Configure attribute providers to dynamically populate credentials from external systems. Establish and manage DIDComm connections for secure messaging and credential exchange. Manage projects and team members for multi-tenant environments.

Frequently asked questions

Common questions about connecting Paradym to AI agents with Metorial.

  1. How many tools does the Paradym MCP server have?
    The Paradym MCP server exposes 18 tools, including Manage Trusted Entity, Revoke Credentials, Create Verification Request. Each one is governed and traced through Metorial.
  2. Paradym exposes tools your agents call on demand; it does not publish event triggers yet. Everything still runs through one governed MCP URL.
  3. Any MCP client, including VS Code, Windsurf, Zed, OpenCode and Grok. Each one reaches the Paradym MCP server through the same Metorial URL.
  4. Use role-based access control to decide which teams, users, and agents can use Paradym and which of its tools they can call.
  5. Yes. Metorial is open source, so you can run the Paradym MCP server yourself or use the hosted gateway.

Connect Paradym to production AI agents

See how Metorial gives your team governed access to Paradym, with tracing and security controls built in.