mcpField
P
passwerk

passwerk

Local
github.comLegal & Government0Updated 1d ago

About passwerk

passwerk is an offline battery-passport compiler for suppliers preparing EU Digital Battery Passports. It turns supplier documents into validated AAS outputs and a legally cited report of missing data, with MCP, CLI, library and browser interfaces.

Key features

  1. 01Ingest PDF, spreadsheet and text files
  2. 02Map and validate passport data
  3. 03Generate cited gap reports
  4. 04Export AAS JSON, AASX and HTML
  5. 05Create UID, GS1 Digital Link and QR carriers
  6. 06Run offline without API keys

Use cases

  1. 01Compile supplier documents into a passport
  2. 02Check a draft against IDTA 02035
  3. 03Identify missing passport data
  4. 04Gate passport audits in CI

MCP support

The MCP server exposes twelve tools, reference resources, workflow prompts and a workbench MCP App over stdio and Streamable HTTP. It operates offline without network or model calls.

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config
{
"mcpServers": {
"shahriarbijoy-passwerk": {
"command": "npx",
"args": [
"-y",
"@passwerk/server"
],
"env": {
"PASSWERK_ROOT": "<PASSWERK_ROOT>",
"PASSWERK_LOG_LEVEL": "<PASSWERK_LOG_LEVEL>"
}
}
}
}
Run commandnpx -y @passwerk/server
Environment variables to set
PASSWERK_ROOTDirectory ingest_documents may read and emit_passport may write (default: the working directory)
PASSWERK_LOG_LEVELinfo (default) or debug; JSON lines on stderr

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages
npm@passwerk/server0.1.1

Tools

12

Saved tool list · updated 3w ago

ParameterTypeRequiredDescription
langenumNoLanguage of the text summary (default en)de | en
pathsarrayNoFiles or directories on the server’s file system (a directory contributes its PDF, XLSX, CSV, DOCX and TXT files, non-recursive). Preferred for local installs
detailenumNosummary (default): per-document counts and the bundleId; full: the whole DocumentBundlesummary | full
inlinearrayNoDocument bytes as base64, for hosts that cannot pass paths
limitsobjectNoPartial IngestLimits override (maxInputBytes, maxCells, ...)

Details

From the project README

Passwerk

Offline EU Battery Passport Compiler.

CI AAS L2 oracle parity

Drop in a supplier's messy documents (BOMs, Excel exports, energy bills, supplier declarations). Get back a conformant Digital Battery Passport in the official AAS format (IDTA 02035-1 to -7) plus a legally cited gap report of what is still missing.

100 % offline. Zero API keys. Agent-agnostic: an MCP server for Claude Desktop, Claude Code, Codex, Cursor and OpenCode, a scriptable CLI, a plain TypeScript library, and a client-side web app with QR preview.

passwerk in Claude Desktop: from five supplier documents to the gap report and the workbench

Claude Desktop with the .mcpb bundle: the model ingests the Musterwerk documents, maps and validates, then opens the workbench inside the chat. Full-resolution MP4, 71 seconds.

Quick start

Let your agent install it. Paste this into Claude Code, Codex, Cursor, OpenCode or any other coding agent. It checks Node, picks the right commands for its host, installs passwerk and tells you how to check that it works:

Install passwerk for me by following
https://raw.githubusercontent.com/ShahriarBijoy/passwerk/main/docs/install/agent.md

Or run the commands yourself (Node >= 22.13):

HostSkill and tools (plugin)Tools only
Claude Codeclaude plugin marketplace add ShahriarBijoy/passwerk
claude plugin install passwerk@passwerk
claude mcp add passwerk --scope user -- npx -y @passwerk/server
Codexcodex plugin marketplace add ShahriarBijoy/passwerk
codex plugin add passwerk@passwerk
codex mcp add passwerk -- npx -y @passwerk/server

Start a new session afterwards, then ask the agent to call list_capabilities.

Claude Desktop: download passwerk-<version>.mcpb from the releases page and open it. Claude Desktop installs the server, asks for your document folder, and the twelve passwerk tools are ready after a restart. Details in docs/install/claude-desktop.md.

Everything else:

npx -y @passwerk/server            # MCP server over stdio, offline, no keys
npx -y @passwerk/cli audit passport.draft.json
docker run -e PASSWERK_AUTH_TOKEN=$(openssl rand -hex 32) -p 127.0.0.1:3777:3777 ghcr.io/shahriarbijoy/passwerk

Host snippets for Codex, Cursor, OpenCode and plain HTTP are in docs/install. The agent workflow (ingest, map, validate, fix, emit) is taught by the bundled skill in skills/passwerk.

Why

Regulation (EU) 2023/1542, Art. 77: from 18 February 2027 every EV, light-means-of-transport and industrial >2 kWh battery placed on the EU market needs a Digital Battery Passport. The passport is roughly 90 data points scattered across a supplier's ERP, spreadsheets and PDFs. Every commercial platform sells to OEMs and Tier-1s. passwerk is the on-ramp for the Tier-2 and Mittelstand supplier who receives the data request and has no tooling to answer it.

Conformance is measured, not asserted. Every emitted golden passport is replayed through the official aas-test-engines oracle on every CI run (docs/CONFORMANCE.md); the badge reports verdict parity with that oracle, expected failures included. Mapping quality on unseen supplier documents is scored in docs/EVALUATION.md. A sovereignty test and a --network none Docker job prove zero network calls. None of this is a certification of battery-passport compliance; the template (L3) and plausibility (L4) checks are passwerk's own.

Packages

PackageRole
@passwerk/rulesBundled, checksummed IDTA 02035 templates, AAS schemas, EC data-point matrix, attribute knowledge base (DE/EN), legal timeline
@passwerk/coreMCP-free library: ingest (PDF, XLSX, DOCX, CSV, TXT), extract, map, validate (4 layers), gap report, emit AAS JSON / AASX / HTML, data carrier (UID, GS1 Digital Link, QR)
@passwerk/serverMCP server over stdio and Streamable HTTP: twelve tools, reference resources, workflow prompts, and the workbench as an MCP App
@passwerk/clipasswerk audit | extract | emit | gaps | obligations | carrier | tools | chat with CI-friendly exit codes (reference)
@passwerk/webClient-side web app: project, documents, facts, review, gaps, export
@passwerk/mcp-appThe same workbench inside Claude Desktop's iframe, opened by review_passport

rules, core, server and cli make no network call and no model call, ever. The two exceptions are opt-in and bring-your-own-key: the web app's mapping assist, which only ever sees labels and values and only ever names attributes, and the passwerk chat demo loop. Point the assist at http://localhost:11434/v1 and it runs against Ollama without a byte leaving the building.

Command line

The CLI runs the same tools as the MCP server, in-process and offline, with exit codes a CI job can gate on (audit: 0 valid, 1 warnings, 2 invalid; gaps: 0 when no required data point is open).

passwerk obligations --type EV --role manufacturer --placed-on-market 2027-06-01
passwerk extract ./supplier-docs --category EV --out facts.json
passwerk audit passport.draft.json
passwerk gaps passport.draft.json --lang de
passwerk emit passport.draft.json --out ./passport
passwerk carrier passport.draft.json --out passport.qr.svg

Web app

apps/web runs the whole pipeline in the browser as six steps: project, documents, facts, review, gaps and export. Documents never leave the browser; the autosave keeps your decisions, facts and proposals in IndexedDB, never the uploaded files. Inside Claude Desktop the same workbench runs as a fixed-height instrument in the host's iframe.

pnpm install && pnpm build
pnpm --filter @passwerk/web dev

Development

Requires Node 22.13 or newer and pnpm 10.

pnpm install
pnpm check      # lint + typecheck + test
pnpm build
pnpm oracle     # replay golden passports through aas-test-engines (needs uv)

Contributor instructions for humans and coding agents live in AGENTS.md. Architecture and scope are in docs/BUILD_PLAN.md, every non-obvious choice in docs/DECISIONS.md.

Security and privacy

PRIVACY.md says what passwerk sends and stores, with the tests that enforce it: nothing leaves the machine unless you switch on one of the two optional model features. SECURITY.md says how to report a vulnerability privately and where the trust boundaries are, the document parsers first.

Not legal advice

passwerk cites the regulation and the standards it implements, but it is a tool, not a lawyer. Every legal claim it emits carries its sources and an isNotLegalAdvice: true flag.

License

Apache-2.0. See LICENSE and NOTICE. Bundled third-party artefacts are documented with their sources, versions, checksums and licences in packages/rules/PROVENANCE.md.

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.