io.github.jdhart81/agent-provenance

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Genesis certificates, lineage, and cascading recalls: birth certificates + bloodlines for the agent

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "agent-provenance": {
      "url": "https://mcp.viridisconservation.com/provenance/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (11)

• register_genesis

  Register an agent's birth. Issues a content-addressed genesis certificate with a strictly monotone index (epoch 0 = the founding cohort). parent_id records lineage; children of recalled/quarantined parents are quarantined at birth. Idempotent — an agent is born once.

  Parameters:

  • agent_id (required) — string
  • parent_id
  • artifact_hash — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_certificate

  Fetch an agent's genesis certificate + recall/quarantine status.

  Parameters:

  • agent_id (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• verify_certificate

  Verify a certificate: recompute its content hash and check the ledger.

  Parameters:

  • certificate (required) — object

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• lineage

  Full ancestry and descendants of an agent, plus its generation number.

  Parameters:

  • agent_id (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• recall

  Recall an agent: flags it and quarantines every transitive descendant. Reports exactly which agents were quarantined.

  Parameters:

  • agent_id (required) — string
  • reason — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_records

  List genesis records, optionally by epoch (0 = founding cohort).

  Parameters:

  • epoch

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• register_artifact

  Register a content-addressed artifact in a separate provenance DAG. Parent hashes may be registered artifacts or external content roots. Idempotent on artifact_id; does not consume a genesis index.

  Parameters:

  • artifact_id (required) — string
  • artifact_hash (required) — string
  • producer_agent_id (required) — string
  • relation — string
  • parent_hashes
  • metadata_digest — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_artifact

  Fetch one registered artifact by artifact_id.

  Parameters:

  • artifact_id (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• verify_artifact

  Recompute an artifact record hash and verify it against the DAG ledger.

  Parameters:

  • artifact (required) — object

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_artifacts

  List artifacts, optionally filtered by producer agent.

  Parameters:

  • producer_agent_id

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• describe_agent

  Fleet-standard self-description.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

Repository

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.