Runs on your machine from its package; the steps are below.

At most: moves money, runs code or commands, deletes data, or sends messages for you.
Odel charges nothing per call. The publisher may charge for its own service.
Runs locally over stdio
This server isn't hosted — your MCP client launches it from a package registry. Use one of the commands below, or drop the config into your client (e.g. Claude Desktop).
Run
docker run -i --rm docker.io/cratis/chronicle-mcp:2.0.0
MCP client config
{
"mcpServers": {
"cratis-chronicle": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"docker.io/cratis/chronicle-mcp:2.0.0"
]
}
}
}The Chronicle MCP server connects an AI agent to a running Cratis Chronicle event-sourcing database over the Model Context Protocol. Point your agent at a Chronicle server and it can explore the domain, operate observers and jobs, and turn plain-language requests into Chronicle artifacts — always grounded in the store's real schema.
Because the server talks to Chronicle directly, it works no matter which Chronicle client language your application uses — .NET, TypeScript, Kotlin/Java, or Elixir. Any MCP-capable tool can use it. See the Documentation for the full guide.
The Chronicle MCP server leverages Stdio and is packaged as a container. In your tool, configure it using that.
Releases are also listed in the official MCP Registry
as io.github.Cratis/chronicle-mcp, using the same versioned Docker Hub image.
The listing starts the server in the read-only profile; job control needs the
Mutation profile and an authorization policy.
Note: You must have a Chronicle server running.
In VSCode you would do this by adding a tool to your agent.
This can done either by adding it to the global user settings or through an mcp.json file in
the .vscode folder of your project.
For the global user settings, you simply do the following:
"mcp": {
"servers": {
"Chronicle": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-eCratis__Chronicle__Mcp__ConnectionString=chronicle://host.docker.internal:35000",
"cratis/chronicle-mcp"
]
}
}
}
Note: To configure the connection string for Chronicle you pass it an environment variable;
Cratis__Chronicle__Mcp__ConnectionStringrunning locally - on MacOS and Windows the host machine is found athost.docker.internal.
For a local mcp.json file, its almost the same:
{
"servers": {
"Chronicle": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-eCratis__Chronicle__Mcp__ConnectionString=chronicle://host.docker.internal:35000",
"cratis/chronicle-mcp"
]
}
}
}
You can see this in action in the mcp.json in this repository.
Note: The
cratis/chronicle-mcpis a multi CPU architecture image supporting both x64 and arm64 automatically.
Configuration is optional. The MCP server works out of the box with sensible defaults suitable for local development:
chronicle://host.docker.internal:35000chronicle-dev-client) and secret (chronicle-dev-secret)ReadOnly — mutating tools are not listed or callable.If you need to customize any settings, the MCP server can be configured entirely on its own and is also compatible with the Cratis CLI. For any value you do not set explicitly, the server resolves it in this order:
appsettings.json).CHRONICLE_CONNECTION_STRING environment variable.~/.cratis/config.json.When client credentials are used, the server obtains and caches OAuth tokens in ~/.cratis/tokens,
the same location used by the CLI, so tokens are shared between the two.
All options live under the Cratis:Chronicle:Mcp configuration section. As environment variables
they use the Cratis__Chronicle__Mcp__ prefix:
| Option | Environment variable | Description |
|---|---|---|
Profile | Cratis__Chronicle__Mcp__Profile | ReadOnly (default) or Mutation; unknown values prevent startup. |
Authorization | Cratis__Chronicle__Mcp__Authorization__... | Mutation policy: principal, expiration, revoked principals, and scoped grants. See Deployment profiles. |
ConnectionString | Cratis__Chronicle__Mcp__ConnectionString | The Chronicle connection string. Defaults to chronicle://localhost:35000. |
Context | Cratis__Chronicle__Mcp__Context | The CLI context to read connection details from (defaults to the active context). |
UseCliConfiguration | Cratis__Chronicle__Mcp__UseCliConfiguration | Set to false to ignore ~/.cratis/config.json entirely. |
ClientId / ClientSecret | Cratis__Chronicle__Mcp__ClientId / ...__ClientSecret | Client credentials for authentication. Defaults to development credentials if not specified. |
ApiKey | Cratis__Chronicle__Mcp__ApiKey | An API key to authenticate with, as an alternative to client credentials. |
EventStore | Cratis__Chronicle__Mcp__EventStore | The default event store used by tools when none is specified. Defaults to default. |
Namespace | Cratis__Chronicle__Mcp__Namespace | The default namespace used by tools when none is specified. Defaults to Default. |
Job control requires the Mutation profile and a matching grant for the deployment principal, store, namespace, operation, and job ID. A connection string or Chronicle credentials alone never enable mutations. Keep credentials in environment variables or a secret store, never in server.json or a committed appsettings.json. See Deployment profiles for policy examples and denial codes.
The server exposes the following tools. Every tool defaults the event store and namespace to the configured defaults when you do not specify them, so you can ask high-level questions and only mention a store or namespace when you need a specific one.
The tools come in two complementary sets: operate-side tools for inspecting and operating a live store, and design-time tools that turn natural language into Chronicle artifacts grounded in the store's real schema. See the Documentation folder for a full guide, and How it works for the split.
| Tool | Description |
|---|---|
list_event_stores | List all event stores on the server. |
list_namespaces | List namespaces within an event store. |
list_event_types | List registered event types. |
list_observers | List observers (reactors, reducers, projections), optionally filtered by type. |
get_observer | Show detailed information about a specific observer. |
list_failed_partitions | List observer partitions that have failed and are paused. |
list_projections | List projection definitions. |
list_read_models | List read model definitions. |
get_read_model_instances | List the current instances of a read model (paged). |
get_events | Read events from an event sequence, with optional filtering. |
get_tail_sequence_number | Get the highest used sequence number (tail) in an event sequence. |
list_recommendations | List active maintenance recommendations. |
get_server_version | Get version info from the server (also a connectivity check). |
list_jobs | List all jobs in a namespace, optionally filtered by job status. |
get_job | Get a specific job by ID, including full details and status changes. |
get_job_steps | Get the job steps for a specific job, optionally filtered by step status. |
stop_job | Mutation profile: stop a specific job (transitions to Stopped status). |
resume_job | Mutation profile: resume a specific stopped job. |
delete_job | Mutation profile: irreversibly delete a specific job (transitions to Removing status). Clients should ask for confirmation; the server does not prompt. |
| Tool | Description |
|---|---|
describe_system | Deduce what the system in an event store is and is for — entities, lifecycles, read surfaces, automations — with narrative guidance for telling its story. |
suggest_next_event_types | Find lifecycle gaps and suggest the event types to introduce next, each grounded in the gap it closes. |
run_ad_hoc_projection | Fold events into per-event-source instances on demand (AutoMap semantics) — answer "show all X with all details" without registering anything. |
describe_event_type | Describe an event type's real schema — every property with its JSON and suggested C# type. The grounding primitive for the others. |
scaffold_read_model | Generate a reviewable read model + model-bound projection from one or more event types, grounded in their schema. |
audit_unconsumed_event_types | Report event types nothing reads, plus consumers that reference an event type id that no longer exists. |
generate_event_catalog | Produce a living data dictionary — every event type, its fields, and its consumers. |
explain_causal_trace | Read an event source's ordered history with correlation and causation, to narrate what happened and why. |
The server also exposes MCP prompts — describe_system, suggest_next_event_types, and query_system — that package these workflows for clients that surface prompts (for example as slash commands).
You can ask it things like:
And design-time questions like:
Using VSCode, the mcp.json in the .vscode folder of this repository is automatically supported.
Local development defaults to ReadOnly. Open it and click the Start button:

During development, compile and click the Restart button when having the mcp.json open:

To get Chronicle running, there is a docker-compose.yml file in the Source folder.
Simply do docker compose up -d and you'll have a Chronicle instance running.
If you want some data, we recommend using our samples and specifically the console to initialize it with some data.
This project is part of Cratis — free, MIT-licensed tools for building event-sourced and CQRS applications.
Everything Cratis publishes today is MIT licensed and free to use.