diff --git a/README.md b/README.md
index 1b4fdd2..a653ef3 100644
--- a/README.md
+++ b/README.md
@@ -438,3 +438,5 @@ where it is going. Releases carry PyPI provenance attestations from GitHub Actio
 ## License
 
 Apache-2.0. The enforcement kernel is and will remain fully open source.
+
+<!-- mcp-name: io.github.ctrlrun/ctrlrun-mcp-operator -->
diff --git a/server.json b/server.json
new file mode 100644
index 0000000..57009a7
--- /dev/null
+++ b/server.json
@@ -0,0 +1,31 @@
+{
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
+  "name": "io.github.ctrlrun/ctrlrun-mcp-operator",
+  "title": "CTRLRun Operator",
+  "description": "Answer CTRLRun approvals from an MCP client. Lists the pending approval requests, inspects a held action, grants or denies one, resolves an ambiguous effect, and reads receipts, effects and stats. Read tools answer without a credential; write tools refuse without one that names a person.",
+  "websiteUrl": "https://docs.ctrlrun.dev/mcp/overview",
+  "repository": {
+    "url": "https://github.com/CTRLRun/ctrlrun",
+    "source": "github"
+  },
+  "version": "0.12.1",
+  "packages": [
+    {
+      "registryType": "pypi",
+      "registryBaseUrl": "https://pypi.org",
+      "identifier": "ctrlrun",
+      "version": "0.12.1",
+      "transport": {
+        "type": "streamable-http",
+        "url": "http://127.0.0.1:8901/mcp"
+      },
+      "packageArguments": [
+        {
+          "type": "positional",
+          "value": "mcp-operator",
+          "description": "Serve the operator's own commands as MCP tools, over loopback."
+        }
+      ]
+    }
+  ]
+}