Aga Mcp Server
@attestedintelligence
About Aga Mcp Server
Cryptographic runtime governance for AI agents. 20 tools. Sealed policy artifacts, continuous measurement, tamper-evident proof. Ed25519 + SHA-256.
Config
Add this server to your MCP-compatible client using the configuration below.
{
"mcpServers": {
"aga": {
"command": "npx",
"args": [
"-y",
"@attested-intelligence/aga-mcp-server"
]
}
}
}Tools
15Get AGA server info, public keys, and portal state.
Get current portal state, loaded artifact info, and enforcement status.
Initialize continuity chain with genesis event.
Attest subject, generate sealed Policy Artifact. Auto-loads into portal.
Measure subject state, compare to sealed reference. Generates signed receipt for every measurement.
Revoke an active policy artifact mid-session. Portal terminates on next measurement. (NCCoE Phase 3b)
Verify continuity chain integrity.
Export the canonical SEP evidence bundle: signed PERMITTED/DENIED tool-call receipts + Merkle proofs + a mandatory signed checkpoint, for offline third-party verification (verify_bundle_offline, aga-verify, or aga-receipt-spec/verify/verify-sep.mjs). Pin gateway_public_key to prove provenance.
Verify a canonical SEP evidence bundle offline (full §6 algorithm: structural floor, receipt signatures, chain+ordering, leaf-recompute + Merkle bijection, signed checkpoint). Pass pinned_public_key to also prove provenance.
Request disclosure of a claim. Auto-substitutes if denied.
List available claims with sensitivity levels.
Derive a constrained policy artifact for a sub-agent. Scope can only diminish, never expand. (NCCoE constrained delegation)
Measure behavioral patterns (unauthorized tools, rate violations, forbidden sequences). DETECTIVE-ONLY by default: it records and PROVES drift but does not block. Pass enforce=true to also trip the portal into phantom quarantine on drift (opt-in; off by default). (NIST-2025-0035)
Get all signed receipts, optionally filtered by artifact.
Get continuity chain events.
Overview
What is Aga Mcp Server?
Aga Mcp Server is an MCP server implementing the Attested Governance Artifact (AGA) protocol for cryptographic compliance enforcement in autonomous AI systems. It acts as a zero‑trust Policy Enforcement Point (Portal) for AI agents, where every tool call is attested, measured against a sealed reference, and logged to a tamper‑evident continuity chain with signed receipts.
How to use Aga Mcp Server?
Install with npm install && npm run build && npm test. Connect to Claude Desktop by adding a configuration entry in claude_desktop_config.json that points the aga server to the compiled dist/index.js file. Use any of the 20 MCP tools (e.g., aga_create_artifact, aga_measure_subject) to enforce compliance.
Key features of Aga Mcp Server
- 20 MCP tools for attestation, measurement, verification, and revocation
- 4 resources: protocol specification, sample bundle, crypto primitives, patent claims
- 3 prompts: NCCoE demo, governance report, drift analysis
- Covers all 12 CoSAI MCP Security threat categories
- Ed25519 signatures, SHA‑256 hashing, and Merkle tree anchoring
- In‑memory storage with optional SQLite persistence
- 159 tests across crypto, core, tools, and integration suites
Use cases of Aga Mcp Server
- Cryptographic compliance enforcement for every AI agent tool call
- Behavioral drift detection and remediation via baseline measurement
- Offline evidence bundle verification using Merkle proofs and receipts
- Delegation to sub‑agents with scope‑diminishment constraints
- Privacy‑preserving disclosure with automatic claim substitution
FAQ from Aga Mcp Server
What runtime dependencies does Aga Mcp Server require?
Node.js and npm are required. The server uses Ed25519 and SHA‑256 cryptographic primitives.
How does Aga Mcp Server ensure integrity?
Every tool call is measured against a sealed cryptographic reference and logged to a tamper‑evident continuity chain with signed receipts.
What transport does Aga Mcp Server support?
It communicates over JSON‑RPC via stdio.
How does Aga Mcp Server handle access control?
It acts as a mandatory enforcement boundary (Portal) using sealed constraints. Delegation to sub‑agents only allows diminishing scope.
What are the storage and limitation details?
Data is stored in‑memory with optional SQLite. Artifacts have a TTL and expire; mid‑session revocation is supported.
Frequently asked questions
What runtime dependencies does Aga Mcp Server require?
Node.js and npm are required. The server uses Ed25519 and SHA‑256 cryptographic primitives.
How does Aga Mcp Server ensure integrity?
Every tool call is measured against a sealed cryptographic reference and logged to a tamper‑evident continuity chain with signed receipts.
What transport does Aga Mcp Server support?
It communicates over JSON‑RPC via stdio.
How does Aga Mcp Server handle access control?
It acts as a mandatory enforcement boundary (Portal) using sealed constraints. Delegation to sub‑agents only allows diminishing scope.
What are the storage and limitation details?
Data is stored in‑memory with optional SQLite. Artifacts have a TTL and expire; mid‑session revocation is supported.
Basic information
More Other MCP servers
Inbox Zero AI
elie222The world's best AI personal assistant for email. Open source app to help you reach inbox zero fast.
ghidraMCP
LaurieWiredMCP Server for Ghidra
MaxKB
1Panel-dev🔥 MaxKB is an open-source platform for building enterprise-grade agents. 强大易用的开源企业级智能体平台。
🚀 Model Context Protocol (MCP) Curriculum for Beginners
microsoftThis open-source curriculum introduces the fundamentals of Model Context Protocol (MCP) through real-world, cross-language examples in .NET, Java, TypeScript, JavaScript, Rust and Python. Designed for developers, it focuses on practical techniques for building modular, scalable,
Mcp
browsermcpBrowser MCP is a Model Context Provider (MCP) server that allows AI applications to control your browser
Comments