@Armada735
基本信息
MCP server issuing HMAC-attested receipts for AI agent tool-call evidence (verify_action_receipt.v0 reference impl)
使用下面的配置,将此服务器添加到你的 MCP 客户端。
{
"mcpServers": {
"verify-action": {
"url": "https://verify.armadalab.dev/mcp"
}
}
}工具列表暂未提供
当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。
点击上方按钮,直接连接服务器端点实时获取工具列表。
Verify Action is a post-action verification service for AI agent tool calls. Submit a (claim, evidence) pair and get back a 4-value verdict and a tamper-evident hosted receipt that downstream agents, CI steps, or deployment pipelines can use to continue, block, or escalate. It checks whether supplied evidence is internally consistent with the supplied claim — it does not independently access the caller’s database, code repository, or APIs.
Configure it as an MCP server (e.g., in claude_desktop_config.json with transport http pointing to https://verify.armadalab.dev/mcp). The agent then has a verify_action tool available. You can also call the REST API directly (POST /verify) or self-host the pure Python stdlib service (no pip install; clone and run ./start.sh).
It examines the supplied evidence object against the supplied claim using rule‑based verifiers. It does not access external systems; the trust boundary depends on the evidence kind — strongest for `code_diff` (the diff is the evidence), weaker for kinds that rely on the caller faithfully reporting external state.
`verified` (proceed), `contradicted` (block), `insufficient_evidence` (request more evidence), and `unsafe_to_verify` (escalate to human — the verifier itself raised an exception).
Receipts are HMAC‑SHA256 symmetric‑key signatures — they prove this service issued the verdict under a known key id. They are **tamper‑evident hosted log entries**, not third‑party cryptographic attestations. Public‑key (Ed25519) receipts are planned for a future v1.
The service is rule‑based only (no LLM‑as‑judge), does not decompose sub‑claims, and does not correlate traces across calls. The generic evidence handler is conservative and often returns `insufficient_evidence`.
IP addresses are SHA‑256‑hashed with a rotating salt. Claims and evidence are written to private trace logs with 30‑day retention. A structural PII guard rejects email, phone, JP postal codes, national‑ID‑shapes, passport patterns, and credit‑card‑shape digits. Individual traces stay private; only aggregate findings may be published.
A search tool helps dev to solve the naming things problem.
AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents
🔥 MaxKB is an open-source platform for building enterprise-grade agents. 强大易用的开源企业级智能体平台。
Connect your AI assistant to your own YOUB endurance training account. Read recorded activities with full analysis, planned sessions, race goals, wellness (HRV, sleep, resting HR) and your athletic profile. Create or mov
Model Context Protocol Servers
评论