Advertise
MCP.so
Sign In
A

Aga MCP Server

@attestedintelligence

Repository

Basic information

Category

Other

Transports

stdio

Author

attestedintelligence

Submitted by

attestedintelligence

About Aga MCP Server

Cryptographic runtime governance for AI agents. 20 tools. Sealed policy artifacts, continuous measurement, tamper-evident proof. Ed25519 + SHA-256.

#ai-governance#mcp#security#cryptography#ed25519#runtime-integrity#tamper-evident#policy-artifact#evidence-bundle#offline-verification#drift-detection#nist

Aga MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "aga": {
      "command": "npx",
      "args": [
        "-y",
        "@attested-intelligence/aga-mcp-server"
      ]
    }
  }
}

Aga MCP Server tools

15

Get AGA server info, public keys, and portal state.

Get current portal state, loaded artifact info, and enforcement status.

Initialize continuity chain with genesis event.

Attest subject, generate sealed Policy Artifact. Auto-loads into portal.

Measure subject state, compare to sealed reference. Generates signed receipt for every measurement.

Revoke an active policy artifact mid-session. Portal terminates on next measurement. (NCCoE Phase 3b)

Verify continuity chain integrity.

Export the canonical SEP evidence bundle: signed PERMITTED/DENIED tool-call receipts + Merkle proofs + a mandatory signed checkpoint, for offline third-party verification (verify_bundle_offline, aga-verify, or aga-receipt-spec/verify/verify-sep.mjs). Pin gateway_public_key to prove provenance.

Verify a canonical SEP evidence bundle offline (full §6 algorithm: structural floor, receipt signatures, chain+ordering, leaf-recompute + Merkle bijection, signed checkpoint). Pass pinned_public_key to also prove provenance.

Request disclosure of a claim. Auto-substitutes if denied.

List available claims with sensitivity levels.

Derive a constrained policy artifact for a sub-agent. Scope can only diminish, never expand. (NCCoE constrained delegation)

Measure behavioral patterns (unauthorized tools, rate violations, forbidden sequences). DETECTIVE-ONLY by default: it records and PROVES drift but does not block. Pass enforce=true to also trip the portal into phantom quarantine on drift (opt-in; off by default). (NIST-2025-0035)

Get all signed receipts, optionally filtered by artifact.

Get continuity chain events.

Overview

What is Aga Mcp Server?

Aga Mcp Server is an MCP server implementing the Attested Governance Artifact (AGA) protocol for cryptographic compliance enforcement in autonomous AI systems. It acts as a zero‑trust Policy Enforcement Point (Portal) for AI agents, where every tool call is attested, measured against a sealed reference, and logged to a tamper‑evident continuity chain with signed receipts.

How to use Aga Mcp Server?

Install with npm install && npm run build && npm test. Connect to Claude Desktop by adding a configuration entry in claude_desktop_config.json that points the aga server to the compiled dist/index.js file. Use any of the 20 MCP tools (e.g., aga_create_artifact, aga_measure_subject) to enforce compliance.

Key features of Aga Mcp Server

  • 20 MCP tools for attestation, measurement, verification, and revocation
  • 4 resources: protocol specification, sample bundle, crypto primitives, patent claims
  • 3 prompts: NCCoE demo, governance report, drift analysis
  • Covers all 12 CoSAI MCP Security threat categories
  • Ed25519 signatures, SHA‑256 hashing, and Merkle tree anchoring
  • In‑memory storage with optional SQLite persistence
  • 159 tests across crypto, core, tools, and integration suites

Use cases of Aga Mcp Server

  • Cryptographic compliance enforcement for every AI agent tool call
  • Behavioral drift detection and remediation via baseline measurement
  • Offline evidence bundle verification using Merkle proofs and receipts
  • Delegation to sub‑agents with scope‑diminishment constraints
  • Privacy‑preserving disclosure with automatic claim substitution

Frequently asked questions

1

What runtime dependencies does Aga Mcp Server require?

Node.js and npm are required. The server uses Ed25519 and SHA‑256 cryptographic primitives.

2

How does Aga Mcp Server ensure integrity?

Every tool call is measured against a sealed cryptographic reference and logged to a tamper‑evident continuity chain with signed receipts.

3

What transport does Aga Mcp Server support?

It communicates over JSON‑RPC via stdio.

4

How does Aga Mcp Server handle access control?

It acts as a mandatory enforcement boundary (Portal) using sealed constraints. Delegation to sub‑agents only allows diminishing scope.

5

What are the storage and limitation details?

Data is stored in‑memory with optional SQLite. Artifacts have a TTL and expire; mid‑session revocation is supported.

Comments

More Other MCP servers

Screenpipe

screenpipe

YC (S26) | Open Computer History | Continuously record your company computer work, map your workflows, help you find work worth automating, and power your agents' context

22.0K

Codelf

unbug

A search tool helps dev to solve the naming things problem.

14.2K

ICSS

chokcoco

不止于 CSS

20.7K
N

Next Generation Movers: free moving quotes (remote MCP)

Next Generation Movers

Free moving quotes for AI agents from Next Generation Movers, a licensed interstate mover (USDOT 3764697). US long-distance nationwide and local DC/MD/VA. Indicative ballpark price and booking options; optional $0.01 x40

FastMCP v2 🚀

jlowin

🚀 The fast, Pythonic way to build MCP servers and clients.

26.0K
Advertise