MCP.so
登录
C

Costwright MCP Server

@hernaninverso

基本信息

分类

AI 与智能体

传输方式

stdio

作者

hernaninverso

提交者

Hernán Inverso

关于 Costwright MCP Server

Static worst-case token-budget analysis of LLM-agent workflows

Costwright MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "costwright": {
      "command": "npx",
      "args": [
        "-y",
        "costwright-mcp"
      ],
      "env": {
        "COSTWRIGHT_API_KEY": "your_rapidapi_key"
      }
    }
  }
}

Costwright MCP Server 工具

4

Statically analyze an LLM-agent repo (LangGraph / CrewAI / OpenAI-Agents-SDK) for runaway-budget risk WITHOUT running it. Builds a .py-only archive of the given local path and returns a worst-case budget summary: counts of certifiable / default_dependent / non_certifiable / runaway graph units and a pass|fail verdict. Use before deploying a workflow to catch missing token caps and while-True runaway drivers.

Issue a tamper-evident, Ed25519-signed budget certificate for an agent repo (re-run server-side, logged to a public transparency log). Same input as costwright_check plus an optional label. Returns the cert_id, the signed certificate and a verify_url. Use to produce an auditable proof of a workflow's worst-case spend ceiling.

Verify a previously issued costwright certificate by id (public, no key). Returns its state (valid|expired|revoked|signature_invalid), whether the signature checks out, and the certified result.

Fetch costwright's active Ed25519 public keys (PEM) for offline signature verification of any certificate (public, no key).

概览

What is Costwright Mcp?

Costwright Mcp is a static worst-case token‑budget analyzer for LLM‑agent workflows. It examines a Python repository that uses LangGraph, CrewAI, or the OpenAI Agents SDK and reports – by pure AST analysis, without running the code – the worst‑case budget ceiling of every workflow graph. It can optionally issue an Ed25519‑signed budget certificate that is logged to a public transparency log.

How to use Costwright Mcp?

Configure the MCP server using npx costwright-mcp with the COSTWRIGHT_API_KEY environment variable. Four tools are provided: costwright_check (static analysis), costwright_certify (signed certificate), costwright_verify (public certificate verification), and costwright_pubkey (retrieve public keys). The verify and pubkey tools require no API key.

Key features of Costwright Mcp

  • Static worst‑case token‑budget analysis for LLM agent workflows.
  • Reports certifiable, default‑dependent, non‑certifiable, and runaway units.
  • Issues Ed25519‑signed budget certificates logged to a transparency log.
  • Pure AST analysis – no code execution required.
  • Compatible with LangGraph, CrewAI, and OpenAI Agents SDK.
  • Public verify and pubkey tools for offline verification.

Use cases of Costwright Mcp

  • Catch missing token caps before deploying an agent workflow.
  • Identify while True: runaway drivers in LLM agent code.
  • Provide a “budget type check” for agent workflow pipelines.
  • Issue signed budget certificates for compliance or auditing.

常见问题

1

What kind of repositories does Costwright Mcp analyze?

It analyzes Python repositories that use LangGraph, CrewAI, or the OpenAI Agents SDK, returning worst‑case token budgets for every workflow graph.

2

Does Costwright Mcp run the code it analyzes?

No. It performs pure static AST analysis – the code is never executed.

3

Is an API key required to use Costwright Mcp?

Yes, for the `check` and `certify` tools. The `verify` and `pubkey` tools are public and require no key.

4

Where does my source code go when using Costwright Mcp?

The `check` and `certify` tools upload a compressed archive of the repository to the hosted API. See the privacy policy at https://eleata.io/privacy/ for details.

5

What output does Costwright Mcp produce?

It returns a pass/fail status along with counts of units categorized as certifiable, default‑dependent, non‑certifiable, or runaway, and identifies which LLM calls have no token cap.

评论

AI 与智能体 分类下的更多 MCP 服务器