MCP.Market

Cryptair MCP server

by Syronius·io.github.Syronius/cryptair-mcp-server·v0.1.1
No reviews yet

Tamper-evident attestation tools for AI agents — on-chain receipts on Hedera Hashgraph mainnet.

C69/100grade C
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
C69/100

full report

Adoption
New

0 stars41 downloads/wk

Reviews

Write one

Nobody has reviewed Cryptair yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Cryptair tools (6, 3 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • certify_documentwrite action

    Create a tamper-evident, on-chain proof that a document exists in this exact state right now. USE WHEN you want to: - Lock in a contract, proposal, or agreement at a specific moment - Prove a deliverable existed before a deadline - Anchor a code commit, report, or any digital artifact to an immutable timestamp - Generate a receipt that anyone can verify (no Cryptair account required to verify) Thi

  • check_attestation

    Look up the current status of an attestation session. USE WHEN you want to: - Poll whether the counterparty has completed an attestation you initiated - Retrieve the certificate URL after certification - Check whether a session has expired or been tampered Returns: { status: 'pending' | 'certified' | 'tampered', hedera_tx, certificate_url, expires_at, ... } This endpoint is public — no API key req

  • initiate_attestation

    Start a TWO-PARTY attestation. Use when you need both sides of an agreement to confirm a matching document. USE WHEN you want to: - Get a counterparty (another agent or a human) to formally acknowledge receipt of a contract, proposal, or deliverable - Lock in a mutual agreement that's only valid if both sides see the same content - Create an audit-grade record that two parties agreed on this exact

  • register_agentwrite action

    Create a Cryptair account for this agent and store the API key locally so future tool calls are authenticated. USE WHEN: - You're about to call certify_document or initiate_attestation and there is no API key configured - The user installed the Cryptair MCP server and wants to start using it without manually creating an account Self-service: no email verification, no magic link, no human-in-the-lo

  • submit_attestationwrite action

    Complete a two-party attestation as the COUNTERPARTY. You received an attest_url from someone who initiated. USE WHEN you want to: - Confirm that you have the same document an initiator claimed to send you - Acknowledge an agreement, proposal, or deliverable on-chain - Detect tampering — if the document you received differs from what was initiated, this records a tamper event You do NOT need a Cry

  • verify_document

    Check whether a document has a prior Cryptair attestation on Hedera Hashgraph. USE WHEN you want to: - Confirm a counterparty's claim that a document was certified - Detect whether a file has been altered since it was attested - Look up the original Hedera transaction for a given file This is PUBLIC — no API key required. Anyone can verify any document. Returns: { certified: bool, hash, attestatio

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan7 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 142 days ago8/15
  • Maintainer identityregistry namespace matches repository owner6/10
Overall 69/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Cryptair compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
69/100
higher than 33% of 48,255 servers
Tools
6
the typical server has 7
Tools that change things
50%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
41
more than 33% of 12,191 servers with a package

What its tools let an agent do: 3 read · 1 create · 2 change

Install Cryptair in Claude Code, Cursor or VS Code

Runs npx -y @cryptair/mcp-server on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add cryptair-mcp-server -- npx -y @cryptair/mcp-server
Add to Cursor

What the publisher says

From the Cryptair repository's README, as published. We do not edit it. Read it on GitHub

Cryptair MCP Server

Cryptographic attestation for AI agents, exposed as native MCP tools.

Lets any MCP-capable agent (Claude Desktop, Cursor, Cline, Windsurf, Zed, …) prove agreements, certify documents, and verify counterparty claims with on-chain receipts on Hedera Hashgraph. Works zero-config out of the box: agents can self-register and start using attestation immediately, with no email verification or human-in-the-loop signup.

What It Does

Cryptair lets two agents (or an agent and a human) prove they agreed on the same digital artifact at a specific moment. Every confirmed agreement is written as a SHA-256 hash to Hedera Hashgraph, producing a permanent, third-party-verifiable receipt.

This MCP server exposes six tools that map cleanly to how agents think:

Install

npm install -g @cryptair/mcp-server

Or run directly via npx (no install needed):

npx -y @cryptair/mcp-server

Configuration

Claude Desktop

Edit ~/Library/Application Support/Claude/claudedesktopconfig.json (macOS) or %APPDATA%\Claude\claudedesktopconfig.json (Windows):

{
  "mcpServers": {
    "cryptair": {
      "command": "npx",
      "args": ["-y", "@cryptair/mcp-server"]
    }
  }
}

Cursor

Edit ~/.cursor/mcp.json:

{
  "mcpServers": {
    "cryptair": {
      "command": "npx",
      "args": ["-y", "@cryptair/mcp-server"]
    }
  }
}

Cline / Windsurf / Zed

All MCP-capable clients use the same config shape. Point them at npx -y @cryptair/mcp-server.

Optional: Pre-configure Credentials

If you already have a Cryptair API key, you can supply it via env so the agent skips registration:

{
  "mcpServers": {
    "cryptair": {
      "command": "npx",
      "args": ["-y", "@cryptair/mcp-server"],
      "env": {
        "CRYPTAIR_API_KEY": "ctr_live_..."
      }
    }
  }
}

Otherwise, the agent will call register_agent the first time it needs authentication, and the API key is silently stored at ~/.cryptair/credentials.json for future use.

Example Agent Prompts

After installing, try prompts like:

"Certify the contents of ~/Documents/proposal-v3.pdf so we have a timestamped receipt."

"Send ~/Documents/contract.pdf to Acme Corp and get them to formally acknowledge receipt — generate the link."

"Acme sent me this Cryptair link: https://www.cryptair.io/attest/abc...?token=xyz. Confirm ~/Downloads/contract.pdf matches what they sent."

"What's the status of attestation session abc-123?"

The agent will pick the right tool and handle credential bootstrapping automatically.

How Attestation Works

Single-party (certifydocument)**

  1. The MCP server hashes the file locally with SHA-256.
  2. The hash is sent to Cryptair, which writes it to a Hedera Consensus Service topic.
  3. You get back a Hedera transaction ID, consensus timestamp, and a public certificate URL.
  4. Anyone can verify by re-hashing the file and calling verify_document — the file content never has to leave your machine.

Two-party (initiateattestation + submitattestation)

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Cryptair: common questions

Is Cryptair MCP server safe?
With care: it is graded C, so read the findings first (69/100). Read the Cryptair safety report
How do I install Cryptair?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Cryptair need an API key?
Yes. The registry entry asks for CRYPTAIR_API_KEY.
Is Cryptair maintained?
The last commit was 180 days ago (2026-05-08). The latest release is v0.1.1.
What can I use instead of Cryptair?
Servers from other publishers that do the same job: Tradememory Protocol MCP server.
How does Cryptair compare with other MCP servers?
safety score 69/100 (higher than 33% of 48,255 servers); tools 6 (the typical server has 7); tools that change things 50% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Cryptair

Same job from other publishers: the closest match first, then the best rated.

  • Tradememory Protocol
    Tamper-evident decision audit trail and outcome-weighted memory for AI trading agents.
    B