MCP.Market

Audit Ledger MCP server

by shahidh68·io.github.shahidh68/audit-ledger-mcp·v0.3.1·1 stars
No reviews yet

Record AI decisions to a tamper-evident audit ledger from any MCP-compatible agent.

B78/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B78/100

full report

Adoption
Growing

1 stars63 downloads/wk

Reviews

Write one

Nobody has reviewed Audit Ledger yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Audit Ledger tools (4)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • list_decisions

    List recorded AI decisions for the calling tenant within a time window. Returns newest first. The read key scopes the result to the caller's tenant — cross-tenant reads require an admin read key. Use this for compliance review, audit prep, or agent self-inspection of recent activity.

  • record_decision

    Record an AI decision to the audit ledger. Stores model version, hashed inputs, structured output, and human-review flag. The record is immutably sealed in S3 Object Lock for 7 years and queryable for the lifetime of the decision. Use this immediately after any AI decision that may need to be audited later — credit, hiring, fraud, customer routing, content moderation.

  • verify_completeness

    Detect whether any audit records have been deleted or omitted for the caller's tenant. Each successfully stored decision receives a per-tenant monotonic sequence number. This tool compares the ledger's counter against the rows actually present in DynamoDB and returns any sequence numbers that are missing. Use this when a regulator or compliance team asks 'can you prove the log is complete?' — veri

  • verify_decision

    Verify a recorded AI decision has not been altered since it was written. The ledger fetches the queryable copy (DynamoDB) and the immutable copy (S3 Object Lock COMPLIANCE mode) independently and compares them. Returns integrity_verified=true if they match. Use this to satisfy a regulator request or to prove an audit trail to a compliance team.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan17 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 83 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 78/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Audit Ledger compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
78/100
higher than 57% of 4,460 AI and agents servers
Tools
4
the typical AI and agents server has 6
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
1
more than 50% of 2,711 AI and agents servers
Downloads a week
63
more than 51% of 1,538 AI and agents servers with a package

What its tools let an agent do: 4 read

Install Audit Ledger in Claude Code, Cursor or VS Code

Runs npx -y audit-ledger-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add audit-ledger-mcp -- npx -y audit-ledger-mcp
Add to Cursor

What the publisher says

From the Audit Ledger repository's README, as published. We do not edit it. Read it on GitHub

audit-ledger-mcp

Connect Claude, Cursor, LangGraph, or your own agent to the AI Audit Ledger. This MCP server gives an agent the tools to record, check, and list decisions in a tamper-evident log with one line of config.

It is built for teams that need a clear record of AI decisions: EU AI Act Article 12 logging, FCA SS1/23 model risk evidence, and GDPR data minimisation. Raw personal data is hashed locally before anything is sent, so the ledger only sees fingerprints.

The AI Audit Ledger family. This MCP server writes decisions to the

ledger, which proves what happened

and whether the record was changed. The

AI Decision Evidence Hub sits

above the ledger, read-only. It turns each lightweight decision record into an

audit case file by showing what evidence is present, what is still missing, who

owns each gap, and the current readiness score. Family:

audit-ledger · audit-ledger-mcp ·

evidence-hub.

Try the live dashboard →  ·  30 synthetic decisions written via this MCP server, queryable and verifiable.

A LangGraph workflow calls record_decision after each agent step. Three audit events written to the live ledger; every one independently verifiable.

What it does

Exposes four tools to any MCP-compatible agent:

Each call ends up as a regulator-grade audit record in your deployed ledger — DynamoDB for query, S3 Object Lock COMPLIANCE mode for the immutable copy, 7-year retention by default.

Quick start — zero configuration

npx -y audit-ledger-mcp

That's it. With no environment variables, the server boots into sandbox mode and writes records to a shared public tenant on a hosted ledger. You can try every tool — recorddecision, verifydecision, verifycompleteness, listdecisions — without provisioning anything.

When sandbox mode is active, you'll see a banner on stderr:

[audit-ledger-mcp] ─────────────── SANDBOX MODE ───────────────
[audit-ledger-mcp] No AUDIT_API_URL configured.
[audit-ledger-mcp] Using the public sandbox at sandbox-public.
[audit-ledger-mcp]   View: https://d2pfirb2397ixy.cloudfront.net
[audit-ledger-mcp] Do NOT write real personal data...

Sandbox properties

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Audit Ledger: common questions

Is Audit Ledger MCP server safe?
Mostly: it is graded B (78/100). Read the Audit Ledger safety report
How do I install Audit Ledger?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Audit Ledger need an API key?
Yes. The registry entry asks for AUDIT_WRITE_KEY, AUDIT_READ_KEY, AUDIT_HMAC_KEY.
Is Audit Ledger maintained?
The last commit was 120 days ago (2026-07-06). The latest release is v0.3.1.
What can I use instead of Audit Ledger?
Servers from other publishers that do the same job: CHAP Coordinator MCP server, three.ws Provenance MCP server and Memanto MCP server.
How does Audit Ledger compare with other AI and agents MCP servers?
safety score 78/100 (higher than 57% of 4,460 AI and agents servers); tools 4 (the typical AI and agents server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Audit Ledger

Same job from other publishers: the closest match first, then the best rated.

  • CHAP Coordinator
    Auditable records of human decisions over AI agent work. Approvals, edits, overrides, escalations.
    A
  • three.ws Provenance
    Append-only, signed, on-chain-verifiable agent action log — record and audit what agents did.
    B
  • Memanto
    MCP server for Memanto - persistent semantic memory for any MCP-compatible agent
    A
  • Mockserver
    Mock, record/replay, verify and chaos-test any HTTP, REST, gRPC or LLM dependency over MCP.
    A
  • freellmpool
    OpenAI-compatible MCP gateway cataloging 22 LLM providers, with routing, failover, and tools.
    A