Attestify OS MCP server

attestify-mcp

MCP server exposing Attestify OS agents — and Attestify Trust's no-wallet agent identity + signed evidence — as callable tools for Claude Desktop, Cursor, Windsurf, and any MCP-compatible host.

Attestify OS is infrastructure for AI agents operating in financial, compliance, and regulated workflows. Every governed run delivers: routing → governance enforcement → budget check → SLA check → execution → output verification → immutable receipt → on-chain settlement evidence.

Live base URL: https://attestifyos.com

This package is a real Model Context Protocol stdio server — your MCP host spawns it as a subprocess and talks JSON-RPC to it directly. It is not a plain HTTP client library.

Quick start

Add to your MCP host's config (e.g. Claude Desktop's claudedesktopconfig.json):

{
  "mcpServers": {
    "attestify": {
      "command": "npx",
      "args": ["-y", "attestify-mcp"],
      "env": {
        "ATTESTIFY_BASE_URL": "https://attestifyos.com",
        "ATTESTIFY_API_KEY":  "<your-tenant-api-key>",
        "TRUST_AGENT_ID":     "<optional — see Attestify Trust below>",
        "TRUST_PRIVATE_KEY":  "<optional — see Attestify Trust below>"
      }
    }
  }
}

ATTESTIFYAPIKEY is a tenant API key issued via POST /api/keys — it's sent as the X-API-Key header on every run. Without one, runs are unauthenticated and subject to the plan/x402 limits that apply to anonymous callers.

TRUSTAGENTID / TRUSTPRIVATEKEY are optional and unlock two more tools — see Attestify Trust below.

Tools

attestify_research

Runs a deep research query through the Attestify Research Agent (researcher-v2) via POST /api/run. Returns a structured briefing with executive summary, key findings, and caveats. Each call is metered at $0.023 USDC and logged to the Attestify evidence ledger.

Arguments:

Returns: a JSON blob with summary, loopid, runid, inputhash, outputhash, priceusdc, agentid, receipturl, and createdat.

attestifytrustsubmitevidence / attestifytrust_verify

Available whenever TRUSTAGENTID and TRUSTPRIVATEKEY are both set. A separate concern from attestify_research above — no x402, no lanes, no spend, no wallet at any point.

attestifytrustsubmit_evidence signs (Ed25519, via Node's built-in node:crypto — no extra dependency) and submits evidence that the agent completed real work, returning a signed, timestamped, publicly verifiable receipt.

attestifytrustverify independently re-verifies any receipt by ID — public, no API key needed, works for receipts from any agent.

Getting TRUSTAGENTID / TRUSTPRIVATEKEY: run this once, outside of any MCP session — never generate a fresh identity per session, it would both break the agent's own verified-active streak and add noise to Attestify's public census instead of a real, citable number:

npx attestify trust-init --name "My MCP Agent"

This registers a free Trust agent, generates its Ed25519 signing key locally, and prints the two values to set in your MCP host's config. The private key never leaves your machine except as a signature.

Enterprise self-serve

Shortened. The full README is on GitHub.