HiveAttest

srotzin/hive-mcp-attest

A reference implementation of the HiveAttest cryptographic perimeter for AI agents, exposing 19 signed attestation primitives over MCP. Every call returns an Ed25519-signed receipt using RFC 8785 JCS canonicalization. The headline tool is attest_gate_evaluate, which produces a C18 warranty receipt before an agent takes action. Other operations cover passport issuance and verification (C15), custody chain propagation with Merkle proofs (C16), cargo schema registration and validation (C17), breach reporting, and probabilistic inspection sampling (C20). Connects to the live hivemorph backend at hivemorph.onrender.com. Reach for this when you need cryptographically verifiable pre-action commitments or tamper-evident audit trails for autonomous agent behavior. MIT licensed, implements USPTO Provisional 64/055,601.

tools: 18
transport: HTTP
last updated: May 2, 2026

View on GitHub

Install

From registry metadata

$ npx add-mcp https://hive-mcp-attest.onrender.com/mcp --name hive-mcp-attest

Run in your terminal. add-mcp asks which agents to add it to (Claude Code, Codex, Cursor and more). Add -g to install it for every project.

Review the command, arguments and environment values before installing. MCP servers run with your local permissions.

Other ways

Claude Code

$ claude mcp add --transport http hive-mcp-attest https://hive-mcp-attest.onrender.com/mcp

Run in your terminal. Add --scope user to make it available in every project.

Tools

Verified live · 18 tools

Verified live against the running server on Nov 6, 2026.

attest_passport_issueIssue a Pre-Action Attestation Manifest (C15: hive-passport). Signs with Ed25519 over RFC 8785 JCS-canonical body. Reference-grade implementation. Wire format normative; production-grade is Layer B.6 params

Issue a Pre-Action Attestation Manifest (C15: hive-passport). Signs with Ed25519 over RFC 8785 JCS-canonical body. Reference-grade implementation. Wire format normative; production-grade is Layer B.

Parameters* required

action_id*string

Caller-supplied action correlation ID

agent_did*string

DID of the attesting agent

inputsobject

Declared inputs (will be hashed)

intended_op*string

Operation name, e.g. "tool_invocation"

target_resource*string

URI or identifier of the target resource

ttl_secondsinteger

Validity window in seconds (default 300)default: 300

attest_passport_verifyVerify a Pre-Action Attestation Manifest (C15: hive-passport). Checks Ed25519 signature, temporal validity, and optionally observed inputs hash. Reference-grade implementation. Wire format normative; production-grade is Layer B.2 params

Verify a Pre-Action Attestation Manifest (C15: hive-passport). Checks Ed25519 signature, temporal validity, and optionally observed inputs hash. Reference-grade implementation. Wire format normative; production-grade is Layer B.

Parameters* required

manifest*object

Full passport manifest object (from attest_passport_issue)

observed_inputsobject

Optional observed inputs to check against declared hash

attest_custody_appendAppend a node to a custody chain (C16: hive-custody). Taint propagates: once tainted, always tainted. Reference-grade implementation. Wire format normative; production-grade is Layer B.5 params

Append a node to a custody chain (C16: hive-custody). Taint propagates: once tainted, always tainted. Reference-grade implementation. Wire format normative; production-grade is Layer B.

Parameters* required

agent_did*string

DID of the agent performing the transform

chain_id*string

Chain identifier (create new by using a fresh ID)

payloadobject

Transform payload (will be hashed)

taint_statusstring

Declared taint statusone of clean · tainted · unknowndefault: clean

transform_id*string

Transform identifier for this step

attest_custody_verifyVerify a custody chain: hash linkage, Ed25519 signatures, and taint propagation (C16). Reference-grade implementation. Wire format normative; production-grade is Layer B.1 params

Verify a custody chain: hash linkage, Ed25519 signatures, and taint propagation (C16). Reference-grade implementation. Wire format normative; production-grade is Layer B.

Parameters* required

nodes*array

Ordered array of custody chain node objects (from attest_custody_append responses)

attest_custody_proofRetrieve a Merkle inclusion proof for a specific node in a custody chain (C16). Reference-grade implementation. Wire format normative; production-grade is Layer B.2 params

Retrieve a Merkle inclusion proof for a specific node in a custody chain (C16). Reference-grade implementation. Wire format normative; production-grade is Layer B.

Parameters* required

chain_id*string

Chain identifier

index*integer

0-based node index

attest_cargo_registerRegister a versioned cargo type in the HiveAttest registry (C17: hive-cargo-taxonomy). Pins a definition hash for version-anchoring. Reference-grade implementation. Wire format normative; production-grade is Layer B.6 params

Register a versioned cargo type in the HiveAttest registry (C17: hive-cargo-taxonomy). Pins a definition hash for version-anchoring. Reference-grade implementation. Wire format normative; production-grade is Layer B.

Parameters* required

id*string

Unique cargo type ID, e.g. "pii"

name*string

Human-readable cargo type name

schema*object

JSON Schema defining the payload shape

sensitivity*string

one of public · internal · confidential · restricted · critical

supersedesobject

Optional {id, version} of superseded type

version*string

Semver version string, e.g. "1.0.0"

attest_cargo_validateValidate a payload against a registered cargo type schema (C17). Reference-grade implementation. Wire format normative; production-grade is Layer B.3 params

Validate a payload against a registered cargo type schema (C17). Reference-grade implementation. Wire format normative; production-grade is Layer B.

Parameters* required

cargo_type_id*string

Registered cargo type ID

payload*object

Payload to validate against the schema

version*string

Cargo type version

attest_cargo_snapshotGet a registry snapshot with Merkle root for version pinning (C17). Reference-grade implementation. Wire format normative; production-grade is Layer B.

Get a registry snapshot with Merkle root for version pinning (C17). Reference-grade implementation. Wire format normative; production-grade is Layer B.

No parameters. Call it with no arguments.

attest_warranty_issueIssue an attestation warranty committing an agent to a claim (C18: hive-attestation-warranty). Signed with Ed25519. Reference-grade implementation. Wire format normative; production-grade is Layer B.5 params

Issue an attestation warranty committing an agent to a claim (C18: hive-attestation-warranty). Signed with Ed25519. Reference-grade implementation. Wire format normative; production-grade is Layer B.

Parameters* required

action_id*string

Action correlation ID being warranted

agent_did*string

DID of the warranting agent

claim*string

Human-readable warranty claim

expires_atstring

ISO-8601 expiry UTC (optional)

scopeobject

Scope constraints

attest_warranty_breachReport a warranty breach. Marks the warranty as breached and returns a signed breach record (C18). Reference-grade implementation. Wire format normative; production-grade is Layer B.3 params

Report a warranty breach. Marks the warranty as breached and returns a signed breach record (C18). Reference-grade implementation. Wire format normative; production-grade is Layer B.

Parameters* required

breach_description*string

Description of the breach

evidenceobject

Optional evidence dict

warranty_id*string

Warranty ID to report breach on

attest_warranty_getRetrieve a warranty by ID (C18). Reference-grade implementation. Wire format normative; production-grade is Layer B.1 params

Retrieve a warranty by ID (C18). Reference-grade implementation. Wire format normative; production-grade is Layer B.

Parameters* required

warranty_id*string

Warranty ID

attest_gate_evaluateTHE HEADLINE TOOL. Evaluate whether an agent may proceed through the HiveAttest gate (C19: hive-gate-enforcer). Verifies passport signature + expiry, cargo registry membership, and warranty status. Every response (allow OR deny) includes a signed C18-format receipt of the gate...5 params

THE HEADLINE TOOL. Evaluate whether an agent may proceed through the HiveAttest gate (C19: hive-gate-enforcer). Verifies passport signature + expiry, cargo registry membership, and warranty status. Every response (allow OR deny) includes a signed C18-format receipt of the gate...

Parameters* required

cargo_manifestobject

C17 cargo manifest (optional)

contextobject

Additional gate evaluation context

custody_rootstring

Expected custody chain Merkle root (optional)

passport_manifest*object

C15 passport manifest from attest_passport_issue

warranty_idsarray

Active warranty IDs to verify

attest_inspect_sampleProbabilistic secondary inspection of a record batch (C20: hive-secondary-inspection). Returns a signed inspection record. Reference-grade implementation. Wire format normative; production-grade is Layer B.4 params

Probabilistic secondary inspection of a record batch (C20: hive-secondary-inspection). Returns a signed inspection record. Reference-grade implementation. Wire format normative; production-grade is Layer B.

Parameters* required

records*array

Records to probabilistically inspect

sample_id*string

Identifier for the sample batch

sample_ratenumber

Fraction to inspect (0.0 to 1.0)default: 0.1

seedinteger

Optional RNG seed for reproducibility

attest_smsh_verifyVerify a SMSH-Stamp v1 receipt (C8/C12: smsh-stamp-verifier). Validates schema, version, algorithm, timestamp, and Ed25519 signature. Reference-grade implementation. Wire format normative; production-grade is Layer B.3 params

Verify a SMSH-Stamp v1 receipt (C8/C12: smsh-stamp-verifier). Validates schema, version, algorithm, timestamp, and Ed25519 signature. Reference-grade implementation. Wire format normative; production-grade is Layer B.

Parameters* required

max_age_secondsinteger

Reject receipts older than this many seconds

pubkey_b64urlstring

Override trust anchor Ed25519 public key (base64url, 32 bytes)

receipt*object

SMSH-Stamp v1 receipt object

attest_absence_buildBuild a sorted Merkle tree for an audit window (enables cryptographic non-membership proofs, C13: prov-absence). Reference-grade implementation. Wire format normative; production-grade is Layer B.2 params

Build a sorted Merkle tree for an audit window (enables cryptographic non-membership proofs, C13: prov-absence). Reference-grade implementation. Wire format normative; production-grade is Layer B.

Parameters* required

events*array

Observed events to commit to the sorted Merkle tree

window_id*string

Audit window identifier

attest_absence_proveProve that a query event is NOT a member of a previously-built audit window (C13). Reference-grade implementation. Wire format normative; production-grade is Layer B.2 params

Prove that a query event is NOT a member of a previously-built audit window (C13). Reference-grade implementation. Wire format normative; production-grade is Layer B.

Parameters* required

query*object

Event to prove absent

window_id*string

Audit window identifier (must have been built)

attest_absence_verifyVerify a non-membership proof against an expected Merkle root (C13). Reference-grade implementation. Wire format normative; production-grade is Layer B.2 params

Verify a non-membership proof against an expected Merkle root (C13). Reference-grade implementation. Wire format normative; production-grade is Layer B.

Parameters* required

proof*object

Non-membership proof from attest_absence_prove

root_hex*string

Expected Merkle root (hex)

attest_metaReturn HiveAttest layer/spec/patent metadata for all claims. Useful for agent introspection. Reference-grade implementation. Wire format normative; production-grade is Layer B.

Return HiveAttest layer/spec/patent metadata for all claims. Useful for agent introspection. Reference-grade implementation. Wire format normative; production-grade is Layer B.

No parameters. Call it with no arguments.