io.github.jdhart81/agent-covenant

–Likes are community signals, not a measured score.

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Deny-by-default authority leases for agents wielding real power.

Author	io.github.jdhart81
Access	remote
Publisher key required	No
Measured state	Deep-tested
L1 liveness	alive
L1 latency	119 ms
Last measured	2026-10-26

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "agent-covenant": {
      "url": "https://mcp.viridisconservation.com/covenant/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (7)

grant_covenant
Grant an agent a covenant: an explicit lease of authority. scopes support wildcards ('payments.*', '*'); budget_minor is the total spend ceiling in minor units; expires_at is ISO-8601. Returns the covenant_id.
Parameters:
- principal (required) — string
- agent_id (required) — string
- scopes (required) — array
- budget_minor (required) — integer
- expires_at (required) — string
Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared
check_act
Check (and if allowed, record) a proposed act against a covenant. Deny-by-default. Idempotent on act_id — retries never double-consume budget. Every check lands on the audit chain.
Parameters:
- covenant_id (required) — string
- act_id (required) — string
- scope (required) — string
- amount_minor — integer
Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared
revoke_covenant
Revoke a covenant immediately and terminally. All subsequent checks deny.
Parameters:
- covenant_id (required) — string
- reason — string
Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared
covenant_status
Current state, consumed/remaining budget, and check count.
Parameters:
- covenant_id (required) — string
Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared
verify_audit
Verify the tamper-evident audit chain of allowed/denied acts.
Parameters:
- covenant_id (required) — string
Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared
list_covenants
List covenants, optionally filtered by state (ACTIVE|REVOKED|EXPIRED) and/or the bound agent.
Parameters:
- state
- agent_id
Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared
describe_agent
Fleet-standard self-description.
Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

Repository

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.