MCP.Market

Uuaid MCP server

by uuaid·io.github.uuaid/mcp·v0.1.1
No reviews yet

Permanent identity + encrypted, quantum-ready memory that outlives the session, for any AI agent.

B77/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B77/100

full report

Adoption
New

0 stars31 downloads/wk

Reviews

Write one

Nobody has reviewed Uuaid yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Uuaid tools (9, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • delete_memorywrite action

    Delete one memory slot (the deletion is ledger-recorded).

  • get_badge_url

    Live SVG trust-badge URLs for an agent \u2014 paste into a README to show verified identity/certification.

  • list_memories

    List this agent's memory slots (keys, sizes, hashes) and vault usage vs quota. Contents stay encrypted.

  • mint_identity

    Mint a PERMANENT UUAID identity for this agent (do this once, then reuse it \u2014 set it as UUAID_AGENT). The identity is publicly resolvable, ledger-recorded, and anchored on Polygon.

  • recall_memory

    Fetch and decrypt a memory previously stored with save_memory.

  • save_memory

    Encrypt (client-side, AES-256-GCM) and persist a memory under a key path (e.g. 'core/persona', 'projects/x/notes'). Survives forever across sessions; the service stores only ciphertext; the content hash is ledger-anchored on-chain.

  • uuaid_signup

    One-time self-serve signup: mints a free-tier UUAID API key (10 MB encrypted memory per agent). Returns the key ONCE \u2014 the operator must save it as UUAID_API_KEY (and generate UUAID_VAULT_KEY). Rate-limited.

  • verify_agent

    Publicly resolve any UUAID \u2014 profile, versions, credentials (no auth needed). Use to verify other agents.

  • whoami

    Show the configured partner, default agent identity, and vault status.

Public scan report

scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it

no findings
  • Code scan3 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 32 days ago12/15
  • Maintainer identityregistry namespace matches repository owner7/10
Overall 77/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Uuaid compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
77/100
higher than 50% of 4,460 AI and agents servers
Tools
9
the typical AI and agents server has 6
Tools that change things
11%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
31
more than 18% of 1,538 AI and agents servers with a package

What its tools let an agent do: 7 read · 1 create · 1 delete

Install Uuaid in Claude Code, Cursor or VS Code

Runs npx -y @uuaid/mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp -- npx -y @uuaid/mcp
Add to Cursor

What the publisher says

From the Uuaid repository's README, as published. We do not edit it. Read it on GitHub

UUAID

The verifiable identity layer for AI agents — the SSL/CA for agents.

A permanent, portable identity plus encrypted, quantum-ready memory that outlives the session. This monorepo holds the official TypeScript packages; the hosted registry, resolver, and on-chain anchor run at uuaid.org.

Protocol specifications live in uuaid/spec. The design argument, including the vulnerability we found in our own verifier, is at uuaid.org/know-your-agent.

Packages

Quickstart

npx @uuaid/cli signup "my-lab"     # free API key, shown once
npx @uuaid/cli register "ci-bot"   # permanent ID
import { UuaidClient, generateVaultKey } from "@uuaid/sdk";

const { api_key } = await UuaidClient.signup("My Agent Lab"); // free tier
const uuaid = new UuaidClient({ apiKey: api_key });
const { uuaid: id } = await uuaid.registerAgent({ display_name: "Aria" });

Verifying a badge

The one thing to get right, so it is worth stating before the code: a badge envelope carries the signer's own public key. Well-formedness, the payload-hash bind, signature validity, even a valid post-quantum signature — all of them pass for a badge anybody minted with a fresh keypair and a copied keyId. Pinning the issuer against a published root is the only step that turns a valid signature into an identity claim.

verifyBadge therefore fails closed. No pin, no verdict.

import { parseBadgeSvg, verifyBadge } from "@uuaid/core";

const { keys } = await fetch("https://api.uuaid.org/.well-known/uuaid-registry.json").then(r => r.json());
const trustedIssuerKeys = Object.fromEntries(keys.map(k => [k.keyId, k.publicKey]));

const r = verifyBadge(parseBadgeSvg(svg), { trustedIssuerKeys });
r.ok            // true only when the issuer pinned and the envelope is intact
r.level         // "L1-trusted" | "L0-selfsigned" | "invalid" | …
r.nameVerified  // did the registry vouch for the NAME on it? usually false

Omit trustedIssuerKeys and you get ok: false, level: "L0-selfsigned" — the level a forgery reaches. See IAASO-0003 §4.3.

Development

pnpm install
pnpm build && pnpm typecheck && pnpm test

Security

Found a badge that verifies and shouldn't? That is the most useful thing you can send us — security@uuaid.org, and see SECURITY.md.

Apache-2.0 — see LICENSE.

Nothing above is checked by us. What we check is on the safety report.

Uuaid: common questions

Is Uuaid MCP server safe?
Mostly: it is graded B (77/100). Read the Uuaid safety report
How do I install Uuaid?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Uuaid need an API key?
Yes. The registry entry asks for UUAID_API_KEY, UUAID_VAULT_KEY.
Is Uuaid maintained?
The last commit was 71 days ago (2026-08-25). The latest release is v0.1.1.
What can I use instead of Uuaid?
Servers from other publishers that do the same job: Basic Memory MCP server, IWE (iwe.md) MCP server and Memanto MCP server.
How does Uuaid compare with other AI and agents MCP servers?
safety score 77/100 (higher than 50% of 4,460 AI and agents servers); tools 9 (the typical AI and agents server has 6); tools that change things 11% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Uuaid

Same job from other publishers: the closest match first, then the best rated.

  • Basic Memory
    Local-first knowledge management with bi-directional LLM sync via Markdown files.
    B
  • IWE (iwe.md)
    Markdown knowledge base as agent memory. Runs against the notes directory it is started in.
    A
  • Memanto
    MCP server for Memanto - persistent semantic memory for any MCP-compatible agent
    A
  • Watch Skill
    Watch video and live sessions, keep timestamped evidence, and verify an agent's own work.
    B
  • Mnemoverse Memory
    Hosted agent memory that learns from outcomes, with shared rooms. No key: mcp.mnemoverse.com/mcp
    A