AgentLens MCP server
Tamper-evident, SHA-256 hash-chained audit trail and observability for AI agents.
23 stars45 downloads/wk
Reviews
Write oneNobody has reviewed AgentLens yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
AgentLens tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it
- Code scan55 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 13 days ago15/15
- Maintainer identityregistry namespace matches repository owner7/10
How AgentLens compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 91/100
- higher than 85% of 48,255 servers
- GitHub stars
- 23
- more than 91% of 28,688 servers
- Downloads a week
- 45
- more than 37% of 12,191 servers with a package
Install AgentLens in Claude Code, Cursor or VS Code
Runs npx -y @agentkitai/agentlens-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add agentlens -- npx -y @agentkitai/agentlens-mcp
What the publisher says
From the AgentLens repository's README, as published. We do not edit it. Read it on GitHub
🔍 AgentLens Open-source observability for AI agents — with a tamper-evident audit trail Every event SHA-256 hash-chained & cryptographically verifiable — built for EU AI Act Article 12 record-keeping 📖 Documentation · Quick Start · Dashboard · ☁️ Cloud
📑 Table of Contents
- Tamper-Evident by Design
- Quick Start
- Architecture
- Integration Guides
- Key Features
- Dashboard
- AgentLens Cloud
- Packages
- API Overview
- CLI
- Development
- Contributing
AgentLens is a flight recorder for AI agents. It captures every LLM call, tool invocation, approval decision, and error — then presents it through a queryable API and real-time web dashboard.
🔒 Tamper-evident by design
What sets AgentLens apart from other observability tools: every event is SHA-256 hash-chained to the one before it, the same way git commits and blockchains are linked. The audit log is append-only and cryptographically verifiable — alter, delete, or reorder a single record after the fact and verification fails, pointing at the exact event that broke. Purpose-built for the record-keeping obligations of EU AI Act Article 12 and the emerging IETF Agent Audit Trail work.
See it for yourself in 30 seconds (needs Docker):
git clone https://github.com/agentkitai/agentlens && cd agentlens
./demo/aha.sh1/5 Starting AgentLens (SQLite, zero-config)… ✓ up at http://localhost:3400
2/5 Ingesting a 5-event agent trace… ✓ 5 events ingested
3/5 Verifying the hash chain… ✓ CHAIN VALID — no tampering detected
4/5 Tampering with one event in the database… ✓ altered llm_call (changed the logged model)
5/5 Re-verifying the hash chain… ✗ CHAIN BROKEN — tampering detected ✅The demo ingests a real trace, verifies the chain (passes), edits one record directly in the database behind the audit log's back, then re-verifies (fails). Auditors get a signed, verifiable JSON snapshot from GET /api/audit/verify/export.
Five ways to integrate — pick what fits your stack:
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
AgentLens: common questions
- Is AgentLens MCP server safe?
- Yes, by our scan: it is graded A (91/100). Read the AgentLens safety report
- How do I install AgentLens?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does AgentLens need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is AgentLens maintained?
- The last commit was 52 days ago (2026-09-13). The latest release is v0.13.7.
- What can I use instead of AgentLens?
- Servers from other publishers that do the same job: Tradememory Protocol MCP server and SSH Manager MCP server.
- How does AgentLens compare with other MCP servers?
- safety score 91/100 (higher than 85% of 48,255 servers); github stars 23 (more than 91% of 28,688 servers); downloads a week 45 (more than 37% of 12,191 servers with a package). Full comparison.
Alternatives to AgentLens
Same job from other publishers: the closest match first, then the best rated.
- Tradememory ProtocolTamper-evident decision audit trail and outcome-weighted memory for AI trading agents.not reviewedEstablishedB
- SSH ManagerSSH for AI agents: commands, files, backups and health, with approval, a vault and an audit trailnot reviewedEstablishedA