LedgerLens MCP¶
A production-grade Model Context Protocol server for Kosha Financial, a fictional Indian neobank. AI agents use it to investigate customers, payments, KYC and AML alerts, take audited write actions, and search 85 internal policies and SOPs.
Everything here is synthetic
Kosha Financial, its staff and its customers are fictional. Real Indian regulations (RBI KYC Master Direction, PMLA, DPDP Act) are cited for realism; nothing is legal or compliance advice.
What it demonstrates¶
-
OAuth 2.1, done to spec
MCP Authorization with RFC 9728 discovery, Cognito, per-tool scopes, role-based PII masking and an append-only audit log.
-
Resilience you can watch
Deadlines, retries with jitter and budgets, circuit breakers, bulkheads, rate limits, idempotency and chaos injection.
-
Hybrid RAG with citations
pgvector + Postgres full-text fused by RRF, row-level security on document classification, graceful fallback.
-
Serverless on AWS
Lambda container images, CDK, OIDC deploys and CodeDeploy canaries with automatic rollback.
Where to start¶
| If you want to… | Read |
|---|---|
| See the whole system on one page | High-level design |
| Understand a design choice | Architecture decisions |
| Learn the domain language | Glossary |
| Follow how the design evolved | Plans |