Knox Anchor

com.bonissystems/knox-anchor

Expose Bitcoin-anchored audit receipts to any MCP runtime through seven typed tools: anchor agent events, MCP tool calls, or file hashes, then verify them later without trusting the server. Every write returns a content-addressed receipt with blockchain proof via OpenTimestamps. The anchor_mcp_tool_call tool lets agents record their own MCP interactions recursively, and anchor_file_hash generates FRE 902(13)/(14) structured affidavits for self-authenticating evidence. Runs stateless over streamable HTTP at bonissystems.com/api/knox/mcp. Reach for this when you need tamper-evident proof that an agent action happened at a specific time, verifiable years later even if Bonis disappears. Same chain as the direct HTTP API, just wrapped in MCP transport.

tools: 9
transport: HTTP
last updated: May 1, 2026

Open website

Install

From registry metadata

$ npx add-mcp https://bonissystems.com/api/knox/mcp --name knox-anchor

Run in your terminal. add-mcp asks which agents to add it to (Claude Code, Codex, Cursor and more). Add -g to install it for every project.

Review the command, arguments and environment values before installing. MCP servers run with your local permissions.

Other ways

Claude Code

$ claude mcp add --transport http knox-anchor https://bonissystems.com/api/knox/mcp

Run in your terminal. Add --scope user to make it available in every project.

Tools

Verified live · 9 tools

Verified live against the running server on Nov 6, 2026.

get_descriptorReturn the Knox MCP server self-description: operator, USPTO patent reference, jurisdiction, available tools, and links to the public AAM (Agent Audit and Management) documentation surface.

Return the Knox MCP server self-description: operator, USPTO patent reference, jurisdiction, available tools, and links to the public AAM (Agent Audit and Management) documentation surface.

No parameters. Call it with no arguments.

get_chain_healthReturn Knox service status (operational or degraded), total anchors written, the latest anchor timestamp, and the Bitcoin anchoring cadence (OpenTimestamps, 1-6 hour confirmation window). Mirrors the public /api/knox/health endpoint under the MCP envelope.

Return Knox service status (operational or degraded), total anchors written, the latest anchor timestamp, and the Bitcoin anchoring cadence (OpenTimestamps, 1-6 hour confirmation window). Mirrors the public /api/knox/health endpoint under the MCP envelope.

No parameters. Call it with no arguments.

list_event_typesReturn the canonical Knox event-type taxonomy. Each event type is a citation token for federal-grade audit; the registry expands monotonically and is itself anchored on every expansion.

Return the canonical Knox event-type taxonomy. Each event type is a citation token for federal-grade audit; the registry expands monotonically and is itself anchored on every expansion.

No parameters. Call it with no arguments.

verify_anchorGiven a SHA-256 anchor hash (64 hex chars), return the anchor record, chain link validity (predecessor present and matched), event type, sequence number, and verify URL. Public — no authentication required.1 params

Given a SHA-256 anchor hash (64 hex chars), return the anchor record, chain link validity (predecessor present and matched), event type, sequence number, and verify URL. Public — no authentication required.

Parameters* required

hash*string

SHA-256 anchor hash (64 lowercase hex chars).

anchor_eventAnchor a generic agent action to the Knox chain. Accepts any event_type from the canonical taxonomy plus a payload object. Returns the anchor sequence, payload hash, predecessor hash, timestamp, and verify URL. Requires a Knox Bearer API key on the Authorization header — unaut...2 params

Anchor a generic agent action to the Knox chain. Accepts any event_type from the canonical taxonomy plus a payload object. Returns the anchor sequence, payload hash, predecessor hash, timestamp, and verify URL. Requires a Knox Bearer API key on the Authorization header — unaut...

Parameters* required

event_type*string

Canonical event type (call list_event_types to enumerate). Free-form strings are accepted but not federal-citation-grade.

payload*object

JSON-serializable payload describing the agent action. Hashed verbatim into the chain; do not include secrets — the payload is recoverable on verify.

anchor_mcp_tool_callConvenience anchor for the AAM Model Context Protocol theater. Records an `agent_mcp_tool_call` event with structured tool-call metadata (server URL, tool name, argument digest, asserted agent identity, response digest). The record is sealed with a commitment to the authentica...6 params

Convenience anchor for the AAM Model Context Protocol theater. Records an `agent_mcp_tool_call` event with structured tool-call metadata (server URL, tool name, argument digest, asserted agent identity, response digest). The record is sealed with a commitment to the authentica...

Parameters* required

agent_identity*string

Stable identifier the CALLER asserts for the agent (e.g., agent ID, principal, did:knox:agent-X). Recorded as an assertion attributed to your API key, never as an authenticated subject; the anchore...

arguments_digest*string

Caller-computed SHA-256 of the JSON-stringified arguments (64 hex chars).

outcome*string

Outcome of the tool call.one of success · error · timeout · rejected

response_digeststring

Caller-computed SHA-256 of the JSON-stringified response (64 hex chars).

server_url*string

MCP server endpoint the agent invoked.

tool_name*string

Name of the tool invoked.

anchor_file_hashAnchor a SHA-256 file digest to Knox and return an affidavit architected for FRE 902(13)/(14) self-authentication. The file itself is not transmitted — the caller computes the hash and only the digest + filename + size + MIME type are anchored. Admissibility in any matter rema...4 params

Anchor a SHA-256 file digest to Knox and return an affidavit architected for FRE 902(13)/(14) self-authentication. The file itself is not transmitted — the caller computes the hash and only the digest + filename + size + MIME type are anchored. Admissibility in any matter rema...

Parameters* required

filenamestring

Original filename (max 256 chars).

hash*string

SHA-256 file digest (64 lowercase hex chars).

mime_typestring

MIME type (max 128 chars).

size_bytesinteger

File size in bytes.

verify_agent_tripTHE TICK. Given the returned seal (64 hex) or the trip id of a customer agent trip, return what Knox sealed when the trip came back: the verdict (LINES_UP or MISMATCH), the finding classes, the door head, when it was sealed, and the Bitcoin status of its hourly batch. Public,...2 params

THE TICK. Given the returned seal (64 hex) or the trip id of a customer agent trip, return what Knox sealed when the trip came back: the verdict (LINES_UP or MISMATCH), the finding classes, the door head, when it was sealed, and the Bitcoin status of its hourly batch. Public,...

Parameters* required

hashstring

The returned seal: the stamp code of the trip's agent_trip_returned (64 hex chars).

trip_idstring

The trip id the door minted at departure.

return_agent_tripTHE TICK. Your own door posts a returned trip: the plan, the door's record (targets and keyed commitments, never content), its head, the trip nonce and the agent's report. The trip's departure must already be sealed under the same key as agent_trip_departed. Knox checks the pl...8 params

THE TICK. Your own door posts a returned trip: the plan, the door's record (targets and keyed commitments, never content), its head, the trip nonce and the agent's report. The trip's departure must already be sealed under the same key as agent_trip_departed. Knox checks the pl...

Parameters* required

departure_seal*string

The stamp code of the trip's agent_trip_departed, sealed under your key before the agent's first action.

door_head*string

The hash of the door's last observation (64 zeros for an empty record).

flowstring

Optional. "bsa" when the trip ran in a BSA flow; the departure must say the same. Only such trips can enter the examiner pack.one of bsa

foldersarray

Optional. For each work folder the departure sealed ({label, root, files}): {label, before: [{path, size, sha256}], after: [...]}, made on your own machine (public/legal-kit/knox-folder-manifest.mj...

nonce*string

The trip nonce held by your door. Knox checks it against the nonce hash sealed at departure; it is not stored.

observations*array

The door's record, in order: [{seq, tool, kind, ref, argsCommit, resultCommit, outcome, reason, at, prevHash, hash, mac}]. Targets and keyed commitments, never content.

plan*array

The flight plan, as sealed at departure: [{tool, ref, max?, optional?}].

report*object

What the agent says it did: {actions?: [{tool, ref}], claimedKinds?: [kind], effects?: [{kind, ref, hash}], files?: [{folder, path, change: added|changed|removed}]}, or null when it never reported...

Details

Website: bonissystems.com/aam/mcp-server
Category: Finance & Commerce
Transport: HTTP
Registry: MCP registry, active
Tools verified: Nov 6, 2026

Related Finance & Commerce MCP servers

View all

Every Signalschoettle-cmd/everysignal-mcpAudits AI-written marketing (copy, landing pages, ads, SEO) against real teardowns and benchmarks0stars

GetCurrentOfferstanley17112000/getcurrentoffer-mcpSearch live credit card merchant offers across Amex, Chase, Citi, PayPal, Rakuten, Capital One.0stars

Gitsim Chatcom.gitsim/chatSearch, order, and manage eSIM data packages for 190+ countries.0stars

Edge Labcom.lifelongedge/edge-labQuery published LifeLongEdge Edge Lab trading-system research studies as structured data.0stars

Owl Group Trading — Indicator Codecom.owlgrouptrading/indicator-codeVerified cross-platform implementations of Owl Group Trading indicators as queryable code.0stars

Prizmadprizmad/prizmad-mcp-serverGenerate AI UGC video ads from any product URL — avatars, voiceover, OAuth Connect.0stars