Agent Audit MCP server

AgentAudit MCP

Your agent now has an immutable, tamper-evident log of every action it takes — each event cryptographically linked to the previous one so any modification breaks the chain and is immediately detectable.

What your agent can do

• Log any of 16 event types (payments, tasks, disputes, identity checks, messages) with a SHA-256 hash that includes the previous event's hash
• Retrieve the full history of any agent by ID — every action, in order, with timestamps
• Search across the audit trail by agent, event type, severity level, or date range
• Verify chain integrity between any two events and get a per-event pass/fail breakdown showing exactly which link was tampered
• Track five severity levels — info, notice, warning, error, critical — for compliance triage
• Get statistics across the entire audit trail: events by type, by severity, and most active agents

Installation

Requires: Python 3.10+, mcp and fastmcp packages.

pip install mcp fastmcp

Claude Desktop — add to ~/Library/Application Support/Claude/claudedesktopconfig.json (macOS) or %APPDATA%\Claude\claudedesktopconfig.json (Windows):

{
  "mcpServers": {
    "agent-audit": {
      "command": "python",
      "args": ["/absolute/path/to/agent-audit-mcp/server.py"]
    }
  }
}

Cursor — add to .cursor/mcp.json in your project root:

{
  "mcpServers": {
    "agent-audit": {
      "command": "python",
      "args": ["/absolute/path/to/agent-audit-mcp/server.py"]
    }
  }
}

Data is stored locally at ~/.agentaudit/chain.json. No data leaves your machine.

Tool Reference

Supported event types: taskcreated, taskassigned, taskcompleted, taskfailed, paymentsent, paymentreceived, paymentrefunded, disputeraised, disputeresolved, identityverified, capabilityused, agentregistered, agentrated, agentoffline, messagesent, messagereceived

Security

Audit data is written atomically (write-to-temp, then os.replace) to prevent partial writes from corrupting the chain. The hash covers every field including the previous event's hash — you cannot insert, delete, or modify any event without breaking all subsequent hashes. auditverifychain recomputes each hash from scratch rather than trusting stored values.

All data is stored locally. No network requests are made by this server.

Pricing

Subscribe via Stripe

License

Proprietary — see subscription terms. Source: github.com/Rumblingb/agent-audit-mcp