MCP.Market

AgenticRail Gate - sequence enforcement and verifiable audit receipts for AI agent compliance MCP server

online · 100% uptime
by agenticrail.nz·nz.agenticrail/gate·v1.3.0
No reviews yet

Deterministic runtime enforcement of step order for AI agents: ALLOW/DENY before a step runs.

A87/100grade A
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
A87/100

full report

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed AgenticRail Gate - sequence enforcement and verifiable audit receipts for AI agent compliance yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

AgenticRail Gate - sequence enforcement and verifiable audit receipts for AI agent compliance tools (2)

write = sends, deletes, buys or posts
  • evaluate_stepFree

    Ask the AgenticRail gate to ALLOW or DENY a single step of an agent sequence BEFORE it runs, so a required step cannot be skipped or run out of order. A denied step must not be executed. You walk away holding a signed, hash-chained, tamper-evident audit trail of the run that you can hand to anyone, and they can verify it offline - no callback to us and no account with us. The gate is deterministic (same state+request -> same verdict) and enforces step order, replay protection, timestamp freshness and sealing. START HERE - send this, changing only CHANGE-ME to any unique string of your own, and it will be ALLOWED: {"sequence_id":"CHANGE-ME","step":"intake","action_type":"CHECK_STATE","step_order":["intake","settle"]}. Then send the same call with step 'settle' to close and seal it. Use the demo key by sending no Authorization header, or send Authorization: Bearer <your-key>. NOTE: an anonymous call has its sequence_id rewritten to 'demo-mcp-<your id>'. This is intended, not a leak: it scopes the run to the public demo lane and is how anonymous MCP traffic is identified. Always reuse the sequence_id RETURNED in the response for later steps and for verify_receipt -- the id you sent will not resolve. Typical use is gating the order of a regulated workflow the caller already runs: customer and third-party due diligence, verification of identity before a payment or business relationship, company registry, beneficial-ownership and sanctions screening, supplier and contractor onboarding. This tool performs none of those checks and holds no registry or watchlist data. It decides only whether the step you are about to run is allowed at this point in the order you declared.

  • verify_receiptFree

    CALL THIS AFTER A SEQUENCE SEALS, and after any DENY, passing the sequence_id RETURNED by evaluate_step. An enforced run that is never verified has produced evidence nobody has checked. Fetch the verification report for an AgenticRail sequence and report whether its receipt chain is intact. Demo- sequences need no key; other sequences need Authorization: Bearer <your-key>. Returns the verification_status (VERIFIED_INTACT / CHAIN_BROKEN / ...) plus the per-receipt signature, chain-hash, and archive-witness checks. This is the same evidence a third party can verify offline against the published Ed25519 keys - no need to trust AgenticRail.

Public scan report

scanner v0.1.10 · 2026-10-31 · same rubric, same numbers if you re-run it

no findings
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 273ms20/20
  • Tool poisoning2 tool descriptions checked15/15
  • Auth qualityopen endpoint, read-only tools10/15
  • Maintenancelast push 35 days ago12/15
  • Maintainer identityendpoint served from the registry-verified namespace domain8/10
Overall 87/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How AgenticRail Gate - sequence enforcement and verifiable audit receipts for AI agent compliance compares

Against every graded E-commerce MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
87/100
higher than 83% of 2,170 E-commerce servers
Tools
2
the typical E-commerce server has 6
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Uptime
100%
of our recent checks; the typical remote E-commerce server answers 100%
Response time
39 ms
faster than 95% of 1,524 E-commerce servers

What its tools let an agent do: 1 read · 1 run or deploy

Release history: 2 versions in the registry since 2026-08-26, latest 2026-09-26, typically one every 31 days.

Install AgenticRail Gate - sequence enforcement and verifiable audit receipts for AI agent compliance in Claude Code, Cursor or VS Code

claude mcp add --transport http gate https://mcp.agenticrail.nz/
Add to Cursor

What the publisher says

From the AgenticRail Gate - sequence enforcement and verifiable audit receipts for AI agent compliance repository's README, as published. We do not edit it. Read it on GitHub

agenticrail-mcp

A Model Context Protocol server that exposes the live AgenticRail enforcement gate to any MCP client as two tools.

AgenticRail is a deterministic enforcement layer for AI agents: it holds an agent to its declared step order, refuses replays and skipped steps, and seals each completed sequence with a signed receipt. This server is the MCP adapter in front of it.

Endpoint: https://mcp.agenticrail.nz/ (Streamable HTTP, stateless) Protocol: 2026-07-28 — the revision that retired the initialize exchange and Mcp-Session-Id. This server was built stateless with neither, so it needed no migration. initialize is still answered for older clients. Registry: nz.agenticrail/gate on the official MCP registry

Tools

Call evaluate_step before running each step of a sequence, and do not run a step the gate DENYs.

A DENY tells you how to fix it

Every refusal carries its own remedy in the response envelope — unsigned, DENY-only, because it describes the sequence's state now rather than the decision that was made:

actiontype is an enum of exactly eight values, and each step accepts only a subset. The enum in the tool schema is a hint, not a control — it binds only a client that validates its own arguments, and an invented verb is by far the most common first refusal: READ, QUERY, TOOLCALL, LOOKUP, EXECUTE and the like are not action types, however well they describe your step. The gate is the control. When it refuses, allowedactiontypes comes back carrying the ones this step would have taken.

A refused call locks nothing. A denial is answered before the sequence store is written to, so the sequenceid is still unused — keep it and send the corrected call again. The lock is set only by actually sending a steporder on a call that is allowed; from then on that list is enforced and a different one is refused with STEPORDERMISMATCH. Omitting step_order sets no lock at all — it means only that this call is judged against the built-in MSMD spine, whose step names are almost certainly not yours.

So if your process has its own step names, send steporder with those names** and the gate will enforce your order instead. One step is a valid sequence.

Connect

# zero config — uses the public demo key
claude mcp add --transport http agenticrail https://mcp.agenticrail.nz/

# with your own key
claude mcp add --transport http agenticrail https://mcp.agenticrail.nz/ \
  --header "Authorization: Bearer <your-agenticrail-key>"

Any Streamable-HTTP MCP client works — point it at the URL.

Try it without installing anything

BASE=https://mcp.agenticrail.nz/

curl -s -X POST "$BASE" -H 'content-type: application/json' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}' | jq .

# ⚠️ Use a sequence_id nobody else will pick. On the shared demo key the id is
# GLOBAL and sealing is PERMANENT — a fixed one in an example works once for one
# person on earth and returns SEALED_SEQUENCE for everyone after.
SEQ="mcp-smoke-$(date +%s)-$RANDOM"

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

AgenticRail Gate - sequence enforcement and verifiable audit receipts for AI agent compliance: common questions

Is AgenticRail Gate - sequence enforcement and verifiable audit receipts for AI agent compliance MCP server safe?
Yes, by our scan: it is graded A (87/100). Read the AgenticRail Gate - sequence enforcement and verifiable audit receipts for AI agent compliance safety report
How do I install AgenticRail Gate - sequence enforcement and verifiable audit receipts for AI agent compliance?
It runs remotely at mcp.agenticrail.nz. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does AgenticRail Gate - sequence enforcement and verifiable audit receipts for AI agent compliance need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is AgenticRail Gate - sequence enforcement and verifiable audit receipts for AI agent compliance maintained?
The last commit was 40 days ago (2026-09-26). The latest release is v1.3.0.
Is AgenticRail Gate - sequence enforcement and verifiable audit receipts for AI agent compliance up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
What can I use instead of AgenticRail Gate - sequence enforcement and verifiable audit receipts for AI agent compliance?
Servers from other publishers that do the same job: Shopware MCP server, Albert Heijn MCP server and Sv Number MCP server.
How does AgenticRail Gate - sequence enforcement and verifiable audit receipts for AI agent compliance compare with other E-commerce MCP servers?
safety score 87/100 (higher than 83% of 2,170 E-commerce servers); tools 2 (the typical E-commerce server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to AgenticRail Gate - sequence enforcement and verifiable audit receipts for AI agent compliance

Same job from other publishers: the closest match first, then the best rated.

  • Shopware
    Query and safely manage a Shopware 6 shop: products, orders, customers, stock, audits, reports.
    B
  • Albert Heijn
    Unofficial Albert Heijn server: products, bonus deals, recipes, shopping list, orders and receipts.
    A
  • Sv Number
    Phone numbers for AI agents: order a private number, read the SMS verification code, hand it back.
    B
  • Omie
    MCP server for Omie — ERP, customers, products, orders, invoices, financials
    More from codespar →
    B
  • Polymarket Toolkit
    Read-only Polymarket data tools for AI agents: profiles, PnL, market scans. No keys, no orders.
    B