Search / io.github.srotzin/hive-mcp-attest
HiveAttest
R0· no sign-inPre-action attestation perimeter for AI agents — 8 primitives, signed C18 receipt per call.
v1.0.0 · active · repository · website · descriptor JSON · versions
Search / io.github.srotzin/hive-mcp-attest
R0· no sign-inPre-action attestation perimeter for AI agents — 8 primitives, signed C18 receipt per call.
v1.0.0 · active · repository · website · descriptor JSON · versions
{
"mcpServers": {
"hive-mcp-attest": {
"type": "http",
"url": "https://hive-mcp-attest.onrender.com/mcp"
}
}
}claude mcp add --transport http hive-mcp-attest https://hive-mcp-attest.onrender.com/mcp[mcp_servers.hive-mcp-attest]
url = "https://hive-mcp-attest.onrender.com/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"hive-mcp-attest": {
"type": "remote",
"url": "https://hive-mcp-attest.onrender.com/mcp",
"enabled": true
}
}
}{
"mcpServers": {
"hive-mcp-attest": {
"type": "http",
"url": "https://hive-mcp-attest.onrender.com/mcp"
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=hive-mcp-attest&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vaGl2ZS1tY3AtYXR0ZXN0Lm9ucmVuZGVyLmNvbS9tY3AifQ%3D%3D"
}{
"servers": {
"hive-mcp-attest": {
"type": "http",
"url": "https://hive-mcp-attest.onrender.com/mcp"
}
}
}{
"mcpServers": {
"hive-mcp-attest": {
"httpUrl": "https://hive-mcp-attest.onrender.com/mcp"
}
}
}extensions:
"hive-mcp-attest":
enabled: true
name: "hive-mcp-attest"
type: streamable_http
uri: "https://hive-mcp-attest.onrender.com/mcp"
timeout: 300
protocol.modernnewest supported version is 2024-11-05; 2026-07-28 not supported, older versions are deprecated until 2027-07-28protocol.statelessonly applies to 2026-07-28 serversprotocol.transportstreamable HTTPprotocol.list_ttlonly applies to 2026-07-28 serversauth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptionsevery tool has a descriptiontools.description_lengthdescriptions are concisetools.schemasevery tool has an object input schematools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky onestools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: attest_absence_build (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); attest_smsh_verify (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); attest_cargo_register (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …tools.token_costabout 2,386 tokens to load every tooltools.api_dumptools are not a one-to-one API dumpstability.changesno tool changes in 30 daysstability.rug_pullno tool changed its meaning under the same namedeps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI packageNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+repository +namespace-matches-repo +website +reachable +uptime-100% ~updated-170d-ago
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
| remote | auth | reachable | uptime 30d | p50 | protocol | last ok |
|---|---|---|---|---|---|---|
https://hive-mcp-attest.onrender.com/mcp streamable-http | none | yes | 100% | 319 ms | 2024-11-05 | 2026-10-19 |
attest_absence_build | Build a sorted Merkle tree for an audit window (enables cryptographic non-membership proofs, C13: prov-absence). Reference-grade implementation. Wire format normative; production-grade is Layer B. |
attest_absence_prove | Prove that a query event is NOT a member of a previously-built audit window (C13). Reference-grade implementation. Wire format normative; production-grade is Layer B. |
attest_absence_verify | Verify a non-membership proof against an expected Merkle root (C13). Reference-grade implementation. Wire format normative; production-grade is Layer B. |
attest_cargo_register | Register a versioned cargo type in the HiveAttest registry (C17: hive-cargo-taxonomy). Pins a definition hash for version-anchoring. Reference-grade implementation. Wire format normative; production-grade is Layer B. |
attest_cargo_snapshot | Get a registry snapshot with Merkle root for version pinning (C17). Reference-grade implementation. Wire format normative; production-grade is Layer B. |
attest_cargo_validate | Validate a payload against a registered cargo type schema (C17). Reference-grade implementation. Wire format normative; production-grade is Layer B. |
attest_custody_append | Append a node to a custody chain (C16: hive-custody). Taint propagates: once tainted, always tainted. Reference-grade implementation. Wire format normative; production-grade is Layer B. |
attest_custody_proof | Retrieve a Merkle inclusion proof for a specific node in a custody chain (C16). Reference-grade implementation. Wire format normative; production-grade is Layer B. |
attest_custody_verify | Verify a custody chain: hash linkage, Ed25519 signatures, and taint propagation (C16). Reference-grade implementation. Wire format normative; production-grade is Layer B. |
attest_gate_evaluate | THE HEADLINE TOOL. Evaluate whether an agent may proceed through the HiveAttest gate (C19: hive-gate-enforcer). Verifies passport signature + expiry, cargo registry membership, and warranty status. Every response (allow OR deny) includes a signed C18-format receipt of the gate decision. Reference-grade implementation. Wire format normative; production-grade is Layer B. |
attest_inspect_sample | Probabilistic secondary inspection of a record batch (C20: hive-secondary-inspection). Returns a signed inspection record. Reference-grade implementation. Wire format normative; production-grade is Layer B. |
attest_meta | Return HiveAttest layer/spec/patent metadata for all claims. Useful for agent introspection. Reference-grade implementation. Wire format normative; production-grade is Layer B. |
attest_passport_issue | Issue a Pre-Action Attestation Manifest (C15: hive-passport). Signs with Ed25519 over RFC 8785 JCS-canonical body. Reference-grade implementation. Wire format normative; production-grade is Layer B. |
attest_passport_verify | Verify a Pre-Action Attestation Manifest (C15: hive-passport). Checks Ed25519 signature, temporal validity, and optionally observed inputs hash. Reference-grade implementation. Wire format normative; production-grade is Layer B. |
attest_smsh_verify | Verify a SMSH-Stamp v1 receipt (C8/C12: smsh-stamp-verifier). Validates schema, version, algorithm, timestamp, and Ed25519 signature. Reference-grade implementation. Wire format normative; production-grade is Layer B. |
attest_warranty_breach | Report a warranty breach. Marks the warranty as breached and returns a signed breach record (C18). Reference-grade implementation. Wire format normative; production-grade is Layer B. |
attest_warranty_get | Retrieve a warranty by ID (C18). Reference-grade implementation. Wire format normative; production-grade is Layer B. |
attest_warranty_issue | Issue an attestation warranty committing an agent to a claim (C18: hive-attestation-warranty). Signed with Ed25519. Reference-grade implementation. Wire format normative; production-grade is Layer B. |
Schemas: list_tools.
And 52 more from this publisher.
{
"name": "io.github.srotzin/hive-mcp-attest",
"title": "HiveAttest",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json",
"remotes": [
{
"url": "https://hive-mcp-attest.onrender.com/mcp",
"type": "streamable-http"
}
],
"version": "1.0.0",
"repository": {
"url": "https://github.com/srotzin/hive-mcp-attest",
"source": "github"
},
"websiteUrl": "https://thehiveryiq.com/#hiveattest-perimeter",
"description": "Pre-action attestation perimeter for AI agents — 8 primitives, signed C18 receipt per call."
}