Connection check
local install
aga-mcp-server
Cryptographic runtime governance for AI agents — signed, offline-verifiable SEP evidence bundles (Ed25519-SHA256-JCS), verifiable offline by six verifier configurations across three toolchains (JavaScript, Go, Python).
Tools
11
GitHub stars
—
Installs / wk
225
Licence
MIT
Transport
stdio
Last checked
never
Tools & capabilities
11 toolsRead from the published package source — this server runs locally, so there is no endpoint to query. Names are taken from the code, not observed at runtime, and descriptions are often absent.
attest_subject
from source
Attest subject, generate sealed Policy Artifact. Auto-loads into portal. Attest subject, generate sealed Policy Artifact. Auto-loads into portal.
generate_evidence_bundle
from source
Export the canonical SEP evidence bundle: signed PERMITTED/DENIED tool-call receipts + Merkle proofs + a mandatory signed checkpoint, for offline third-party verification (verify_b… Export the canonical SEP evidence bundle: signed PERMITTED/DENIED tool-call receipts + Merkle proofs + a mandatory signed checkpoint, for offline third-party verification (verify_bundle_offline, aga-verify, or aga-receipt-spec/verify/verify-sep.mjs). Pin gateway_public_key to prove provenance.
get_chain_events
from source
Get continuity chain events. Get continuity chain events.
get_portal_state
from source
Get current portal state, loaded artifact info, and enforcement status. Get current portal state, loaded artifact info, and enforcement status.
get_receipts
from source
Get all signed receipts, optionally filtered by artifact. Get all signed receipts, optionally filtered by artifact.
get_server_info
from source
Get AGA server info, public keys, and portal state. Get AGA server info, public keys, and portal state.
init_chain
from source
Initialize continuity chain with genesis event. Initialize continuity chain with genesis event.
list_claims
from source
List available claims with sensitivity levels. List available claims with sensitivity levels.
measure_behavior
from source
Measure behavioral patterns (unauthorized tools, rate violations, forbidden sequences). DETECTIVE-ONLY by default: it records and PROVES drift but does not block. Pass enforce=true… Measure behavioral patterns (unauthorized tools, rate violations, forbidden sequences). DETECTIVE-ONLY by default: it records and PROVES drift but does not block. Pass enforce=true to also trip the portal into phantom quarantine on drift (opt-in; off by default). (NIST-2025-0035)
verify_bundle_offline
from source
Verify a canonical SEP evidence bundle offline (full §6 algorithm: structural floor, receipt signatures, chain+ordering, leaf-recompute + Merkle bijection, signed checkpoint). Pass… Verify a canonical SEP evidence bundle offline (full §6 algorithm: structural floor, receipt signatures, chain+ordering, leaf-recompute + Merkle bijection, signed checkpoint). Pass pinned_public_key to also prove provenance.
verify_chain
from source