Rkvst
DataTrails provides an evidence management platform that delivers a reliable chain of custody for supply chain data, ensuring data authenticity and transparency.
Verdict
Common use cases
- Audit asset provenance during compliance reviews
- Investigate supply chain events in real time
- Download compliance attachments for legal holds
- Verify custody transfers before shipment approval
- Surface event trails during incident postmortems
Integration
- Vendor
- Rkvst
- Category
- other
- Auth
- API_KEY
- Tools
- 26
- Composio slug
rkvst
Tools
- Download Event Attachment
Tool to download an attachment from a specified event on an asset. use when you have asset uuid, event uuid, and attachment uuid, and want the raw binary content.
- Get App Registration
Tool to retrieve details for a given app registration id. use after obtaining the application's uuid to inspect its configuration and credentials.
- Get Asset
Tool to retrieve details for a given asset. use after you have its uuid; set `at time` to get historical state.
- Get Blob
Tool to retrieve details of a blob by id. use after confirming the blob id.
- Get Event
Tool to retrieve details of a specified event. use when you need full metadata, attributes, and associated trails of an existing event in datatrails.
- Get IAM Subject
Tool to retrieve iam subject details. use when you need to fetch details for a specific iam subject by its id.
- Get Member
Tool to retrieve details for a given member id. use after obtaining a valid member uuid.
- Get Public Asset
Tool to retrieve details for a public asset. use when you have a public asset uuid.
- Get Public Asset Event
Tool to retrieve a specific public asset event. use when you have public asset and event uuids.
- Get Tenancy
Tool to retrieve details for a specific tenancy. use after you have a tenancy id.
- List App Registrations
Tool to list all app registrations. use after acquiring a valid auth token to retrieve the applications registered under the tenant.
- List Asset Events
Tool to list events for a specified asset. use after confirming you have the asset uuid.
- List Assets
Tool to list all assets with optional pagination and filters. use when you need to retrieve asset metadata in batches via page size and next page token.
- List IAM Subjects
Tool to list iam subjects. use when you need to retrieve provider-managed subjects, optionally filtering by display name. use after authenticating the tenant.
- List Members
Tool to list all tenant members. use when you need an overview of all users in your tenant.
- List Public Asset Events
Tool to list events for a specific public asset. use when you need to retrieve the event history of a public asset after confirming its public availability.
- List Public Assets
Tool to list all public assets. use when you need to retrieve all assets made public.
- List Tenancies
Tool to list all tenancies. use after authenticating to retrieve the tenancy records available to the current tenant.
- Promote Member
Tool to promote a tenant member to owner role. use when you need to elevate permissions after verifying the member identity.
- Retrieve asset attachment metadata
Tool to retrieve metadata for an attachment on a specified asset. use after obtaining asset and attachment uuids.
- Retrieve Caps
Tool to retrieve resource limit quotas for a specified service. use when checking quota availability before provisioning resources.
- Retrieve Event Attachment Metadata
Tool to retrieve metadata for an attachment on a specified event. use when you have asset uuid, event uuid, and attachment uuid and need details like size, hash, and scan status.
- Retrieve Public Asset Attachment Metadata
Tool to retrieve metadata for an attachment on a specified public asset. use when you have the public asset uuid and attachment uuid, before downloading the content.
- Retrieve Public Event Attachment Metadata
Tool to retrieve metadata for an attachment on a public asset event. use after you have the public asset uuid, event uuid, and attachment uuid.
- Search Events
Tool to search events matching filter criteria with pagination. use when retrieving events by odata filter and paging through large result sets.
- Update App Registration
Tool to update an application's display name or custom claims. use after retrieving an app registration to apply partial updates to its configuration.
Setup
Setup guide
- 11. In Switchy, open your workspace settings and navigate to the MCP Integrations section. 2. Click 'Add Integration' and select Rkvst from the list. 3. In a separate tab, log into your Rkvst account and go to Access Policies or API Tokens (the exact location depends on your Rkvst plan). 4. Generate a new API key with read permissions for assets, events, and blobs — if your team needs to download attachments, ensure the key includes blob access. 5. Copy the API key and paste it into the Switchy integration form, then click 'Connect'. 6. Switchy will validate the key and confirm the connection. 7. To test, open any Space, type '@Rkvst get asset <uuid>' using a known asset ID from your Rkvst tenancy, and verify the response includes asset details. 8. If the test fails, double-check the API key's scope and that the asset UUID is correct and accessible under your account's permissions.
What teammates see: by default, memories from Rkvst are scoped to the Space (PROJECT visibility) - you can mark any memory PRIVATE or share it ORG-wide.
Works well with
Top models
Compatibility data appears once enough Spaces have used this MCP together with a given model.
How Switchy teams use it
Starter prompts
Retrieve Asset History
@Rkvst get asset <asset-uuid> and list all events associated with it, including timestamps and event types.Open in a Space →
Download Audit Attachment
@Rkvst download the attachment from event <event-uuid> on asset <asset-uuid> with attachment id <attachment-uuid>.Open in a Space →
Inspect App Registration
@Rkvst get app registration <app-uuid> and show me its current configuration and credential status.Open in a Space →
Check IAM Subject Permissions
@Rkvst get IAM subject <subject-id> and summarize its roles and access policies.Open in a Space →
Review Public Asset Details
@Rkvst get public asset <public-asset-uuid> and list its visible events and attributes.Open in a Space →
Example outputs
Illustrative - representative of the model's voice and quality, not literal recordings.
@Rkvst show me the full audit trail for asset uuid a7f3c2e1-4b9d-4a8e-9c1f-2d3e4f5a6b7c including all events and their timestamps
Retrieved asset 'Manufacturing Line 3 - Sensor Array' with 14 recorded events spanning March 2024 to present. Key events include: initial commissioning (2024-03-12), calibration updates (2024-04-03, 2024-06-15), maintenance logs (2024-07-22), and a firmware upgrade (2024-08-09). Each event includes cryptographic proof of authenticity, actor identity, and immutable timestamp. The asset is currently in 'operational' status with last activity recorded 3 days ago. This illustrative example shows how DataTrails structures provenance data for a physical asset.
This example demonstrates Rkvst's core strength: immutable audit trails for supply chain and compliance use cases. You'll need a valid asset UUID from your DataTrails tenant. The `at_time` parameter lets you query historical state, useful for regulatory audits. Note that event retrieval respects your tenant's access policies—shared assets may have redacted fields.
@Rkvst create a new event on asset uuid b8e4d3f2-5c0e-4b9f-0d2g-3e4f5a6b7c8d recording a quality inspection with attributes inspector_id='QA-447' and result='pass'
Event created successfully on asset 'Batch #2847 - Pharmaceutical Component'. Event UUID: e9f5e4g3-6d1f-5c0g-1e3h-4f5g6b7c8d9e. Recorded attributes: inspector_id='QA-447', result='pass', timestamp='2024-10-15T14:32:18Z'. This event is now part of the asset's immutable history and can be independently verified via the DataTrails public ledger. The event includes cryptographic signatures binding it to your tenant's identity. This illustrative example shows how quality checkpoints are logged in a tamper-evident chain.
This write operation showcases Rkvst's ability to append verifiable events to an asset's lifecycle. You must have write permissions on the asset and valid API credentials. Each event is cryptographically signed and cannot be altered post-creation—ideal for compliance scenarios where audit integrity is critical. Be mindful of attribute schema conventions in your tenant.
@Rkvst analyze all events across assets tagged 'critical-infrastructure' in the last 90 days and summarize any anomalies or compliance gaps
Analyzed 127 events across 8 assets tagged 'critical-infrastructure' from July 16 to October 15, 2024. Found 3 potential compliance gaps: Asset 'Substation-North' missing required monthly maintenance log (last entry 47 days ago), Asset 'Pipeline-Segment-12' has 2 events with unverified actor signatures, and Asset 'Transformer-Unit-5' shows a 9-day gap between decommissioning event and final inspection. All other assets show consistent audit patterns with no anomalies. Recommend immediate follow-up on the maintenance gap and signature verification issues. This illustrative synthesis combines event retrieval with AI reasoning to surface actionable insights.
This example pairs Rkvst's audit data with the AI's pattern-recognition capabilities, useful for compliance officers or operations teams. The MCP retrieves raw event data; the AI synthesizes it into a risk summary. Requires read access to all queried assets and may hit rate limits on tenants with high event volume. Tag-based queries depend on your tenant's metadata conventions.
Use-case deep-dives
When Rkvst wins for compliance teams tracking physical goods
A 6-person compliance team at a medical device manufacturer needs to prove chain-of-custody for components moving through three contract manufacturers. Rkvst is the right call here because it's purpose-built for immutable asset provenance—each component gets an asset UUID, every handoff is an event with attachments (certs, photos, shipping docs). The Get Asset and Get Event tools let your AI pull historical state at any timestamp, which is exactly what auditors ask for. The 26-tool surface is overkill for simple tracking, but if you're in pharma, aerospace, or food safety where regulators demand cryptographic proof of custody, Rkvst's blockchain-backed events justify the API key setup. If your audit needs are lighter (just Slack threads and spreadsheets), this is overengineered—stick with a simpler document MCP.
How app registration tools support security ops at scale
A 12-person security team manages API credentials for 40 external partners accessing their platform. Rkvst's Get App Registration and Get IAM Subject tools let an AI assistant audit which apps have active keys, when they were last rotated, and which subjects (users or service accounts) hold permissions. This scenario works because Rkvst treats credentials as first-class assets with full event history—your AI can answer "show me all app registrations that haven't rotated keys in 90 days" without writing custom queries. The trade-off: if your partner count is under 10 or you're using a standard IAM like Okta, Rkvst's asset-centric model adds complexity you don't need. It shines when credential lifecycle is tied to physical or contractual milestones (like annual supplier audits) that need tamper-proof logs.
When public asset sharing justifies the Rkvst investment
A 4-person sustainability team at a fashion brand wants to publish carbon footprint data for each product line, letting customers verify claims via QR codes. Rkvst's Get Public Asset tool is built for this: you create an asset per product, attach emissions events with third-party verification docs (using Download Event Attachment), then share the public UUID. Customers or journalists can query the immutable trail without needing your API key. This works if transparency is a regulatory requirement or competitive differentiator—think EU Digital Product Passport mandates. If you're just posting static PDFs to a website, Rkvst is overkill; the 26-tool API and blockchain backend only pay off when stakeholders demand real-time, unforgeable proof. For brands facing greenwashing scrutiny, it's a defensible moat.
Frequently asked
What does the Rkvst MCP do in Switchy?
It connects your team to Rkvst's DataTrails platform for verifiable audit trails and asset provenance. You can query assets, events, and attachments, retrieve IAM subjects and app registrations, and inspect historical asset states. Useful for compliance teams tracking supply chain or custody records without leaving the Switchy workspace.
Do I need admin access to connect Rkvst?
You need an API key with read permissions for the resources your team wants to query — assets, events, blobs, IAM subjects, or app registrations. Rkvst uses API key authentication, so whoever generates the key in the DataTrails console controls what Switchy can see. No OAuth flow; just paste the key during setup.
Can the Rkvst MCP create or update assets and events?
No. The 26 tools are read-only: you can retrieve asset details, download event attachments, and inspect historical states, but you cannot create new assets, log events, or modify existing records. For write operations, use Rkvst's web UI or API directly.
How does this compare to querying Rkvst's API directly?
The MCP wraps Rkvst's REST API into natural-language tools, so your team can ask "show me the latest event for asset X" instead of writing curl commands. You get the same data, but conversational access is faster for ad-hoc compliance checks. For bulk exports or automation, stick with the API.
Who on the team should connect the Rkvst MCP?
Whoever owns your DataTrails account and can generate API keys with appropriate read scopes. Typically a compliance lead or supply chain manager. Once connected, any Switchy member in your workspace can query Rkvst data, so review your team's access policies before sharing the integration.