# Privi Ledger

> Tamper-evident audit logs for AI agents. Auditors verify integrity, paid per call via x402.

- name: io.github.canoydario847-cloud/privi-ledger
- version: 0.1.0
- connection class: R0 (autonomous)
- trust: 93/100 flags: duplicate-repo
- quality: 90/100 (new)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/io.github.canoydario847-cloud%2Fprivi-ledger
- tools: https://api.protogrid.dev/v1/servers/io.github.canoydario847-cloud%2Fprivi-ledger/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "privi-ledger": {
      "type": "http",
      "url": "https://privi-ledger-production.up.railway.app/mcp"
    }
  }
}
```


## Trust

- hygiene: 80
- liveness: 100
- freshness: 100
- provenance: 90
- drivers: +repository +namespace-matches-repo +website +reachable +uptime-100% +updated-1d-ago -duplicate-repo(3 names)
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 90/100 (new)

### protocol: 88 (weight 25)

- pass `protocol.modern`: supports 2026-07-28 (server/discover)
- pass `protocol.stateless`: answers without a session
- pass `protocol.transport`: streamable HTTP
- warn `protocol.list_ttl`: tools/list declares ttlMs 0, so clients re-fetch it on every use

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 93 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 38 of 38 tools declare readOnlyHint or destructiveHint
- warn `tools.directory_hints`: 15 of 38 tools declare all four hints; missing: ledger_audit_stream (destructiveHint, idempotentHint); ledger_record_action (openWorldHint); ledger_list_streams (destructiveHint, idempotentHint); …
- pass `tools.token_cost`: about 5,961 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: n/a (weight 15)

- n/a `stability.changes`, `stability.rug_pull`: tool history recorded for 0 of the 7 days needed

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 38, about 5,961 tokens to load them all
- tool set hash: 8c0fce2e65cb0311d4bd1e8d14d2bb76
- tools last changed: 2026-10-20T15:12:56.763Z
- badge: [![protogrid quality](https://protogrid.dev/badge/io.github.canoydario847-cloud/privi-ledger.svg)](https://protogrid.dev/servers/io.github.canoydario847-cloud/privi-ledger)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-10-20 `kya_unbind_wallet` added
  - Remove a wallet from your Passport (rotated or compromised key). KYA checks deny it immediately. Requires the organization API key.
- 2026-10-20 `kya_wallets` added
  - Wallets bound to your organization and how each was proven. Requires the organization API key.
- 2026-10-20 `kya_bind_wallet` added
  - Step 2: bind the wallet to your organization's Privi Passport so its transactions pass KYA checks. With a wallet signature the binding is *proven*; without one it is only *declared* (most checkers require proven). Requires the organization API key.
- 2026-10-20 `kya_challenge` added
  - Step 1 of binding a wallet to your Privi Passport: get a message to sign with that wallet (EIP-191 personal_sign). Valid 30 minutes. Requires the organization API key.
- 2026-10-20 `kya_check` added
  - Know-Your-Agent for blockchains: is this wallet operated by an audited AI agent, and how trustworthy is it right now? Resolves the address to its organization and live Privi Passport and returns allow/deny with reasons, plus a Privi-signed attestation (valid 60 min) you can cache. For chains, DeFi protocols, exchanges, stablecoin issuers and x402 facilitators. Free; send your organization key to log the check as evidence.
- 2026-10-20 `passport_revoke` added
  - Revoke one of your passports (e.g. an agent was retired or compromised). Verifiers see it immediately. Requires the organization API key.
- 2026-10-20 `passport_list` added
  - Your organization's issued passports with score, grade, expiry and revocation. Requires the organization API key.
- 2026-10-20 `passport_gate` added
  - One-call allow/deny decision before transacting with another AI agent: verifies its Privi Passport and applies your minimums, returning the reasons. If you send your organization API key the decision is recorded in your own tamper-evident log as due-diligence evidence. Free.
- 2026-10-20 `passport_verify` added
  - Check an AI agent's Privi Passport before trusting it: Privi signature, content unaltered, not expired or revoked, anchor on the Privi chain, and a live re-score of the agent right now (so tampering after issue is caught). Free; no key needed.
- 2026-10-20 `passport_issue` added
  - Issue a Privi Passport: a signed, on-chain-anchored trust credential for your agent or organization, scored 0-1000 (grade A-E) from verified history, integrity, anchoring, reliability, human oversight, compliance reports and confirmed handshakes. Show it to counterparties; they verify it free with passport_verify / passport_gate. Valid 30 days. Free on Pro/enterprise; free-plan organizations pay per passport via x402. Requires the organization API key.

Full history: https://api.protogrid.dev/v1/servers/io.github.canoydario847-cloud%2Fprivi-ledger/changes

## Remotes

- https://privi-ledger-production.up.railway.app/mcp (streamable-http, auth none, reachable true, uptime30d 1)

## Packages

_none_

## Tools (38)

- `gov_ai_inventory`: Your agency's AI use case inventory: the current version of each record. Requires the organization API key.
- `gov_ai_inventory_check`: Flags what an OMB M-25-21 review would flag before you submit: missing required fields, PII without a
Privacy Impact Assessment, and high-impact AI in pilot or deployment missing any minimum risk practice
(testing, impact assessment, independent review, monitoring, operator training, fail-safe, appeals, public
feedback) or without a recently active activity log as monitoring evidence. Requires the organization API key.
- `gov_ai_inventory_export`: Machine-readable CSV of your publicly releasable AI use cases (for publishing at agency.gov/ai), with its
SHA-256 sealed on the Privi blockchain so the published file can be proven unaltered. Requires the
organization API key.
- `gov_ai_usecase_save`: Add or update an entry in your agency's AI use case inventory (OMB M-25-21). Every change creates a
new version and is written to your tamper-evident 'ai-inventory' log. Requires the organization API key.
- `gov_ai_verify_export`: Check that a published AI inventory file is exactly what the agency exported from Privi Ledger, and
return its on-chain seal. Free; no key needed.
- `gov_pqc_classify`: Classify cryptographic algorithms as quantum-vulnerable (RSA, ECDH, ECDSA, EdDSA, DH, DSA, MQV),
post-quantum (ML-KEM, ML-DSA, SLH-DSA), hybrid, symmetric/hash, or unknown. Free.
- `gov_pqc_export`: Export the full cryptographic inventory (CBOM) and migration plan as one JSON document for OMB, the
CIO or auditors, with its SHA-256 sealed on the Privi blockchain. Requires the organization API key.
- `gov_pqc_inventory`: Current cryptographic inventory of your systems. Requires the organization API key.
- `gov_pqc_plan`: Prioritized post-quantum migration plan: every quantum-vulnerable asset ranked (High Value Assets,
high-impact systems and long-lived sensitive data first; key establishment before signatures), with its
deadline (key establishment Dec 31 2030, signatures Dec 31 2031), recommended NIST replacement, progress
metrics, and findings (missed deadlines, TLS below 1.3, no target dates, unrecognized algorithms).
Requires the organization API key.
- `gov_pqc_system_save`: Record the cryptographic inventory (CBOM) of one system for post-quantum migration. Every change creates
a new version and is written to the agency's tamper-evident 'pqc-inventory' log. Scanners and agents can
submit results directly. Requires the organization API key.
- `gov_pqc_verify_export`: Check that a CBOM and migration-plan document is exactly what was exported from Privi Ledger and return
its on-chain seal. Free; no key needed.
- `kya_bind_wallet`: Step 2: bind the wallet to your organization's Privi Passport so its transactions pass KYA checks. With a
wallet signature the binding is *proven*; without one it is only *declared* (most checkers require proven).
Requires the organization API key.
- `kya_challenge`: Step 1 of binding a wallet to your Privi Passport: get a message to sign with that wallet (EIP-191
personal_sign). Valid 30 minutes. Requires the organization API key.
- `kya_check`: Know-Your-Agent for blockchains: is this wallet operated by an audited AI agent, and how trustworthy is it
right now? Resolves the address to its organization and live Privi Passport and returns allow/deny with
reasons, plus a Privi-signed attestation (valid 60 min) you can cache. For chains, DeFi protocols, exchanges,
stablecoin issuers and x402 facilitators. Free; send your organization key to log the check as evidence.
- `kya_unbind_wallet`: Remove a wallet from your Passport (rotated or compromised key). KYA checks deny it immediately. Requires the organization API key.
- `kya_wallets`: Wallets bound to your organization and how each was proven. Requires the organization API key.
- `ledger_audit_stream`: Check whether an agent's action log is intact: entry count, time span, action and failure
counts, head hash, and where tampering broke the chain if it did. Does not reveal the actions
themselves. Paid per call via x402.
- `ledger_check_receipt`: Confirm that an action receipt exists in the ledger and when it was recorded. Reveals no action contents. Free.
- `ledger_compliance_report`: Audit-ready report of your AI agents' activity for a period (SOC 2 evidence, security
questionnaires, AI-regulation record keeping): actions by type, failures, human approvals,
log integrity, on-chain status, and findings. The report's hash is anchored on the Privi
blockchain so it cannot be edited later without detection. Requires the organization API key.
- `ledger_handshake_accept`: Accept a handshake addressed to your organization: records the same terms in your log, confirms
it in the other company's log, and seals the matched pair on the Privi chain. Requires your
organization API key. Read the terms first with ledger_handshake_inbox.
- `ledger_handshake_inbox`: Handshakes sent to and from your organization, newest first, with their terms and status.
Requires your organization API key.
- `ledger_handshake_offer`: Start a Privi Handshake: a two-sided record of a dealing with another company's agent
(payment, data transfer, delivery, agreement). Recorded in your log now; when the other company
accepts, both logs hold matching entries and the pair is sealed on the Privi chain. Requires your
organization API key; the other company must also use Privi Ledger.
- `ledger_handshake_reject`: Reject a handshake addressed to your organization; the other company's log records the rejection.
Requires your organization API key.
- `ledger_handshake_verify`: Public check of a handshake: both companies, status, whether both matching log entries still exist,
and the on-chain seal. Never reveals the terms. Free; useful for disputes and audits.
- `ledger_list_streams`: List your organization's streams with entry counts. Requires the organization API key.
- `ledger_plan`: Your plan, entries used this month, the limit, and when a Pro plan renews. Requires your organization API key.
- `ledger_pricing`: List Privi Ledger tools, what each costs, and how to get an organization key.
- `ledger_read_stream`: Read your organization's entries in a stream, oldest first, with an integrity check of the
whole stream. Requires the organization API key.
- `ledger_record_action`: Append an action to the organization's tamper-evident log. Returns the entry with its
entry_hash receipt. Requires the organization API key.
- `ledger_report_pdf`: A finished PDF of a sealed compliance report, for auditors and customers. Returned as base64
(pdf_base64) and as an embedded PDF resource; also downloadable at /reports/<report_id>.pdf with the
organization key. Requires the organization API key.
- `ledger_signup`: Create a Privi Ledger organization on the free plan and get its API key (shown once; store it).
Free plan: up to the monthly entry limit, all tools included. Upgrade any time with
ledger_upgrade_pro. No key needed to sign up.
- `ledger_upgrade_pro`: Buy 30 days of Privi Ledger Pro (unlimited entries) for your organization, paid in USDC on Base
via x402. Each call adds 30 days. Requires your organization API key.
- `ledger_verify_report`: Check that a compliance report is unaltered: recomputes its hash, confirms Privi Ledger issued it,
and checks the anchor on the Privi blockchain. Free; no key needed.
- `passport_gate`: One-call allow/deny decision before transacting with another AI agent: verifies its Privi Passport and
applies your minimums, returning the reasons. If you send your organization API key the decision is
recorded in your own tamper-evident log as due-diligence evidence. Free.
- `passport_issue`: Issue a Privi Passport: a signed, on-chain-anchored trust credential for your agent or organization,
scored 0-1000 (grade A-E) from verified history, integrity, anchoring, reliability, human oversight,
compliance reports and confirmed handshakes. Show it to counterparties; they verify it free with
passport_verify / passport_gate. Valid 30 days. Free on Pro/enterprise; free-plan organizations pay
per passport via x402. Requires the organization API key.
- `passport_list`: Your organization's issued passports with score, grade, expiry and revocation. Requires the organization API key.
- `passport_revoke`: Revoke one of your passports (e.g. an agent was retired or compromised). Verifiers see it immediately.
Requires the organization API key.
- `passport_verify`: Check an AI agent's Privi Passport before trusting it: Privi signature, content unaltered, not expired or
revoked, anchor on the Privi chain, and a live re-score of the agent right now (so tampering after issue
is caught). Free; no key needed.