Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "privi-ledger": {
      "type": "http",
      "url": "https://privi-ledger-production.up.railway.app/mcp"
    }
  }
}

claude mcp add --transport http privi-ledger https://privi-ledger-production.up.railway.app/mcp

[mcp_servers.privi-ledger]
url = "https://privi-ledger-production.up.railway.app/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "privi-ledger": {
      "type": "remote",
      "url": "https://privi-ledger-production.up.railway.app/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "privi-ledger": {
      "type": "http",
      "url": "https://privi-ledger-production.up.railway.app/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=privi-ledger&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vcHJpdmktbGVkZ2VyLXByb2R1Y3Rpb24udXAucmFpbHdheS5hcHAvbWNwIn0%3D"
}

{
  "servers": {
    "privi-ledger": {
      "type": "http",
      "url": "https://privi-ledger-production.up.railway.app/mcp"
    }
  }
}

{
  "mcpServers": {
    "privi-ledger": {
      "httpUrl": "https://privi-ledger-production.up.railway.app/mcp"
    }
  }
}

extensions:
  "privi-ledger":
    enabled: true
    name: "privi-ledger"
    type: streamable_http
    uri: "https://privi-ledger-production.up.railway.app/mcp"
    timeout: 300

Quality 90 / 100new

protocol88 · weight 25

pass
protocol.modernsupports 2026-07-28 (server/discover)
pass
protocol.statelessanswers without a session
pass
protocol.transportstreamable HTTP
warn
protocol.list_ttltools/list declares ttlMs 0, so clients re-fetch it on every use

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene93 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations38 of 38 tools declare readOnlyHint or destructiveHint
warn
tools.directory_hints15 of 38 tools declare all four hints; missing: ledger_audit_stream (destructiveHint, idempotentHint); ledger_record_action (openWorldHint); ledger_list_streams (destructiveHint, idempotentHint); …
pass
tools.token_costabout 5,961 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stabilityn/a · weight 15

n/a
stability.changes, stability.rug_pulltool history recorded for 0 of the 7 days needed

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

38 tools, about 5,961 tokens to load them all · tool set 8c0fce2e65cb · tools last changed 2026-10-20 · checked 2026-10-20 16:30 UTC

Tool changes

2026-10-20kya_unbind_walletadded
Remove a wallet from your Passport (rotated or compromised key). KYA checks deny it immediately. Requires the organization API key.
2026-10-20kya_walletsadded
Wallets bound to your organization and how each was proven. Requires the organization API key.
2026-10-20kya_bind_walletadded
Step 2: bind the wallet to your organization's Privi Passport so its transactions pass KYA checks. With a wallet signature the binding is *proven*; without one it is only *declared* (most checkers require proven). Requires the organization API key.
2026-10-20kya_challengeadded
Step 1 of binding a wallet to your Privi Passport: get a message to sign with that wallet (EIP-191 personal_sign). Valid 30 minutes. Requires the organization API key.
2026-10-20kya_checkadded
Know-Your-Agent for blockchains: is this wallet operated by an audited AI agent, and how trustworthy is it right now? Resolves the address to its organization and live Privi Passport and returns allow/deny with reasons, plus a Privi-signed attestation (valid 60 min) you can cache. For chains, DeFi protocols, exchanges, stablecoin issuers and x402 facilitators. Free; send your organization key to log the check as evidence.
2026-10-20passport_revokeadded
Revoke one of your passports (e.g. an agent was retired or compromised). Verifiers see it immediately. Requires the organization API key.
2026-10-20passport_listadded
Your organization's issued passports with score, grade, expiry and revocation. Requires the organization API key.
2026-10-20passport_gateadded
One-call allow/deny decision before transacting with another AI agent: verifies its Privi Passport and applies your minimums, returning the reasons. If you send your organization API key the decision is recorded in your own tamper-evident log as due-diligence evidence. Free.
2026-10-20passport_verifyadded
Check an AI agent's Privi Passport before trusting it: Privi signature, content unaltered, not expired or revoked, anchor on the Privi chain, and a live re-score of the agent right now (so tampering after issue is caught). Free; no key needed.
2026-10-20passport_issueadded
Issue a Privi Passport: a signed, on-chain-anchored trust credential for your agent or organization, scored 0-1000 (grade A-E) from verified history, integrity, anchoring, reliability, human oversight, compliance reports and confirmed handshakes. Show it to counterparties; they verify it free with passport_verify / passport_gate. Valid 30 days. Free on Pro/enterprise; free-plan organizations pay per passport via x402. Requires the organization API key.

Showing the latest 10. Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 93 / 100

duplicate-repo

provenance90

liveness100

freshness100

hygiene80

+repository +namespace-matches-repo +website +reachable +uptime-100% +updated-1d-ago -duplicate-repo(3 names)

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://privi-ledger-production.up.railway.app/mcp` streamable-http	none	yes	100%	205 ms	2026-07-28	2026-10-20

Tools (38)

`gov_ai_inventory`read-only	Your agency's AI use case inventory: the current version of each record. Requires the organization API key.
`gov_ai_inventory_check`read-only	Flags what an OMB M-25-21 review would flag before you submit: missing required fields, PII without a Privacy Impact Assessment, and high-impact AI in pilot or deployment missing any minimum risk practice (testing, impact assessment, independent review, monitoring, operator training, fail-safe, appeals, public feedback) or without a recently active activity log as monitoring evidence. Requires the organization API key.
`gov_ai_inventory_export`	Machine-readable CSV of your publicly releasable AI use cases (for publishing at agency.gov/ai), with its SHA-256 sealed on the Privi blockchain so the published file can be proven unaltered. Requires the organization API key.
`gov_ai_usecase_save`	Add or update an entry in your agency's AI use case inventory (OMB M-25-21). Every change creates a new version and is written to your tamper-evident 'ai-inventory' log. Requires the organization API key.
`gov_ai_verify_export`read-only	Check that a published AI inventory file is exactly what the agency exported from Privi Ledger, and return its on-chain seal. Free; no key needed.
`gov_pqc_classify`read-only	Classify cryptographic algorithms as quantum-vulnerable (RSA, ECDH, ECDSA, EdDSA, DH, DSA, MQV), post-quantum (ML-KEM, ML-DSA, SLH-DSA), hybrid, symmetric/hash, or unknown. Free.
`gov_pqc_export`	Export the full cryptographic inventory (CBOM) and migration plan as one JSON document for OMB, the CIO or auditors, with its SHA-256 sealed on the Privi blockchain. Requires the organization API key.
`gov_pqc_inventory`read-only	Current cryptographic inventory of your systems. Requires the organization API key.
`gov_pqc_plan`read-only	Prioritized post-quantum migration plan: every quantum-vulnerable asset ranked (High Value Assets, high-impact systems and long-lived sensitive data first; key establishment before signatures), with its deadline (key establishment Dec 31 2030, signatures Dec 31 2031), recommended NIST replacement, progress metrics, and findings (missed deadlines, TLS below 1.3, no target dates, unrecognized algorithms). Requires the organization API key.
`gov_pqc_system_save`	Record the cryptographic inventory (CBOM) of one system for post-quantum migration. Every change creates a new version and is written to the agency's tamper-evident 'pqc-inventory' log. Scanners and agents can submit results directly. Requires the organization API key.
`gov_pqc_verify_export`read-only	Check that a CBOM and migration-plan document is exactly what was exported from Privi Ledger and return its on-chain seal. Free; no key needed.
`kya_bind_wallet`	Step 2: bind the wallet to your organization's Privi Passport so its transactions pass KYA checks. With a wallet signature the binding is proven; without one it is only declared (most checkers require proven). Requires the organization API key.
`kya_challenge`	Step 1 of binding a wallet to your Privi Passport: get a message to sign with that wallet (EIP-191 personal_sign). Valid 30 minutes. Requires the organization API key.
`kya_check`read-only	Know-Your-Agent for blockchains: is this wallet operated by an audited AI agent, and how trustworthy is it right now? Resolves the address to its organization and live Privi Passport and returns allow/deny with reasons, plus a Privi-signed attestation (valid 60 min) you can cache. For chains, DeFi protocols, exchanges, stablecoin issuers and x402 facilitators. Free; send your organization key to log the check as evidence.
`kya_unbind_wallet`destructive	Remove a wallet from your Passport (rotated or compromised key). KYA checks deny it immediately. Requires the organization API key.
`kya_wallets`read-only	Wallets bound to your organization and how each was proven. Requires the organization API key.
`ledger_audit_stream`read-only	Check whether an agent's action log is intact: entry count, time span, action and failure counts, head hash, and where tampering broke the chain if it did. Does not reveal the actions themselves. Paid per call via x402.
`ledger_check_receipt`read-only	Confirm that an action receipt exists in the ledger and when it was recorded. Reveals no action contents. Free.
`ledger_compliance_report`	Audit-ready report of your AI agents' activity for a period (SOC 2 evidence, security questionnaires, AI-regulation record keeping): actions by type, failures, human approvals, log integrity, on-chain status, and findings. The report's hash is anchored on the Privi blockchain so it cannot be edited later without detection. Requires the organization API key.
`ledger_handshake_accept`	Accept a handshake addressed to your organization: records the same terms in your log, confirms it in the other company's log, and seals the matched pair on the Privi chain. Requires your organization API key. Read the terms first with ledger_handshake_inbox.
`ledger_handshake_inbox`read-only	Handshakes sent to and from your organization, newest first, with their terms and status. Requires your organization API key.
`ledger_handshake_offer`	Start a Privi Handshake: a two-sided record of a dealing with another company's agent (payment, data transfer, delivery, agreement). Recorded in your log now; when the other company accepts, both logs hold matching entries and the pair is sealed on the Privi chain. Requires your organization API key; the other company must also use Privi Ledger.
`ledger_handshake_reject`	Reject a handshake addressed to your organization; the other company's log records the rejection. Requires your organization API key.
`ledger_handshake_verify`read-only	Public check of a handshake: both companies, status, whether both matching log entries still exist, and the on-chain seal. Never reveals the terms. Free; useful for disputes and audits.
`ledger_list_streams`read-only	List your organization's streams with entry counts. Requires the organization API key.
`ledger_plan`read-only	Your plan, entries used this month, the limit, and when a Pro plan renews. Requires your organization API key.
`ledger_pricing`read-only	List Privi Ledger tools, what each costs, and how to get an organization key.
`ledger_read_stream`read-only	Read your organization's entries in a stream, oldest first, with an integrity check of the whole stream. Requires the organization API key.
`ledger_record_action`	Append an action to the organization's tamper-evident log. Returns the entry with its entry_hash receipt. Requires the organization API key.
`ledger_report_pdf`read-only	A finished PDF of a sealed compliance report, for auditors and customers. Returned as base64 (pdf_base64) and as an embedded PDF resource; also downloadable at /reports/<report_id>.pdf with the organization key. Requires the organization API key.
`ledger_signup`	Create a Privi Ledger organization on the free plan and get its API key (shown once; store it). Free plan: up to the monthly entry limit, all tools included. Upgrade any time with ledger_upgrade_pro. No key needed to sign up.
`ledger_upgrade_pro`	Buy 30 days of Privi Ledger Pro (unlimited entries) for your organization, paid in USDC on Base via x402. Each call adds 30 days. Requires your organization API key.
`ledger_verify_report`read-only	Check that a compliance report is unaltered: recomputes its hash, confirms Privi Ledger issued it, and checks the anchor on the Privi blockchain. Free; no key needed.
`passport_gate`read-only	One-call allow/deny decision before transacting with another AI agent: verifies its Privi Passport and applies your minimums, returning the reasons. If you send your organization API key the decision is recorded in your own tamper-evident log as due-diligence evidence. Free.
`passport_issue`	Issue a Privi Passport: a signed, on-chain-anchored trust credential for your agent or organization, scored 0-1000 (grade A-E) from verified history, integrity, anchoring, reliability, human oversight, compliance reports and confirmed handshakes. Show it to counterparties; they verify it free with passport_verify / passport_gate. Valid 30 days. Free on Pro/enterprise; free-plan organizations pay per passport via x402. Requires the organization API key.
`passport_list`read-only	Your organization's issued passports with score, grade, expiry and revocation. Requires the organization API key.
`passport_revoke`destructive	Revoke one of your passports (e.g. an agent was retired or compromised). Verifiers see it immediately. Requires the organization API key.
`passport_verify`read-only	Check an AI agent's Privi Passport before trusting it: Privi signature, content unaltered, not expired or revoked, anchor on the Privi chain, and a live re-score of the agent right now (so tampering after issue is caught). Free; no key needed.

Schemas: list_tools.

Also listed as

2 other active names share this repository: io.github.canoydario847-cloud/privi-anchor, io.github.canoydario847-cloud/privi-verify

Similar MCP servers

More from io.github.canoydario847-cloud

Official server.json

{
  "name": "io.github.canoydario847-cloud/privi-ledger",
  "title": "Privi Ledger",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://privi-ledger-production.up.railway.app/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "0.1.0",
  "repository": {
    "url": "https://github.com/canoydario847-cloud/Privi-Network",
    "source": "github",
    "subfolder": "ledger-server"
  },
  "websiteUrl": "https://github.com/canoydario847-cloud/Privi-Network/tree/main/ledger-server",
  "description": "Tamper-evident audit logs for AI agents. Auditors verify integrity, paid per call via x402."
}