{"name":"io.github.attestedintelligence/aga-mcp-server","slug":"attestedintelligence-aga-mcp-server","title":null,"description":"Verifiable decision records for AI agents: signed receipts for calls to its own governed tools.","url":"https://mcp.market/server/attestedintelligence-aga-mcp-server","rating":null,"grade":"B","score":80,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":32,"stars":0,"forks":0,"downloads_week":609,"last_push_at":"2026-09-26T13:36:25.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/attestedintelligence/aga-mcp-server","website":"https://attestedintelligence.com","version":"3.6.2","remotes":[],"packages":[{"registryType":"npm","identifier":"@attested-intelligence/aga-mcp-server","version":"3.6.2","transport":{"type":"stdio"},"environmentVariables":[{"description":"Ed25519 seed, 64 hex characters, that signs this server's evidence-bundle receipts and checkpoint, so gateway_public_key (get_server_info) is the same after a restart and can be pinned. Set in your MCP client's configuration, the seed sits inside the governed client's trust domain. Receipts are kept in memory only; save a generate_evidence_bundle result before the server stops. Unset or invalid: a new key each start, warned on stderr. When set, even to an invalid value, AGA_GATEWAY_KEY_FILE is not read.","format":"string","isSecret":true,"name":"AGA_GATEWAY_KEY"},{"description":"Path to a file holding the 64-hex Ed25519 seed; read only when AGA_GATEWAY_KEY is unset or empty, with the same effect. A stdio server started by your MCP client runs as the client's OS user, so the file sits inside the governed client's trust domain. Missing, unreadable or invalid: a new key each start, warned on stderr.","format":"filepath","name":"AGA_GATEWAY_KEY_FILE"}]}],"tools":[{"name":"attest_subject","description":"Attest subject, generate sealed Policy Artifact. Auto-loads into portal.","write_action":false,"price_micros":0,"input_schema":null},{"name":"generate_evidence_bundle","description":"Export the canonical SEP evidence bundle: signed PERMITTED/DENIED tool-call receipts + Merkle proofs + a mandatory signed checkpoint, for offline third-party verification (verify_bundle_offline, aga-verify, or aga-receipt-spec/verify/verify-sep.mjs). Pin gateway_public_key to prove provenance.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_chain_events","description":"Get continuity chain events.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_portal_state","description":"Get current portal state, loaded artifact info, and enforcement status.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_receipts","description":"Get all signed receipts, optionally filtered by artifact.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_server_info","description":"Get AGA server info, public keys, and portal state.","write_action":false,"price_micros":0,"input_schema":null},{"name":"init_chain","description":"Initialize continuity chain with genesis event.","write_action":false,"price_micros":0,"input_schema":null},{"name":"list_claims","description":"List available claims with sensitivity levels.","write_action":false,"price_micros":0,"input_schema":null},{"name":"measure_behavior","description":"Measure behavioral patterns (unauthorized tools, rate violations, forbidden sequences). DETECTIVE-ONLY by default: it records and PROVES drift but does not block. Pass enforce=true to also trip the portal into phantom quarantine on drift (opt-in; off by default). (NIST-2025-0035)","write_action":false,"price_micros":0,"input_schema":null},{"name":"verify_bundle_offline","description":"Verify a canonical SEP evidence bundle offline (full §6 algorithm: structural floor, receipt signatures, chain+ordering, leaf-recompute + Merkle bijection, signed checkpoint). Pass pinned_public_key to also prove provenance.","write_action":false,"price_micros":0,"input_schema":null},{"name":"verify_chain","description":"Verify continuity chain integrity.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":80,"grade":"B","scanned_at":"2026-09-26T16:31:24.592Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-26T16:31:24.599Z","components":{"code":{"score":25,"max":25,"notes":["101 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":6,"max":15,"notes":["static API keys via environment variables"]},"maintenance":{"score":15,"max":15,"notes":["last push 0 days ago"]},"identity":{"score":6,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[],"inputs":{"packages":[{"registryType":"npm","identifier":"@attested-intelligence/aga-mcp-server","version":"3.6.2","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":6,"publishedAt":"2026-09-25T06:16:21.906Z","repositoryUrl":"git+https://github.com/attestedintelligence/aga-mcp-server.git","weeklyDownloads":609}],"repo":{"found":true,"owner":"attestedintelligence","repo":"aga-mcp-server","archived":false,"pushedAt":"2026-09-26T13:36:25Z","stars":0,"forks":0,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/251516328?v=4","ownerCreatedAt":"2025-12-25T22:03:38Z","license":"MIT"},"icon":{"url":"https://attestedintelligence.com/apple-touch-icon.png","source":"site","width":180,"height":180},"presence":{"stars":0,"forks":0,"downloadsWeek":609,"license":"MIT","lastPushAt":"2026-09-26T13:36:25.000Z","score":32}}}},"grade_history":[],"reviews":[]}