HiveAttest

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Pre-action attestation perimeter for AI agents — 8 primitives, signed C18 receipt per call.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "HiveAttest": {
      "url": "https://hive-mcp-attest.onrender.com/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (18)

• attest_passport_issue

  Issue a Pre-Action Attestation Manifest (C15: hive-passport). Signs with Ed25519 over RFC 8785 JCS-canonical body. Reference-grade implementation. Wire format normative; production-grade is Layer B.

  Parameters:

  • action_id (required) — string — Caller-supplied action correlation ID
  • agent_did (required) — string — DID of the attesting agent
  • intended_op (required) — string — Operation name, e.g. "tool_invocation"
  • target_resource (required) — string — URI or identifier of the target resource
  • inputs — object — Declared inputs (will be hashed)
  • ttl_seconds — integer — Validity window in seconds (default 300)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• attest_passport_verify

  Verify a Pre-Action Attestation Manifest (C15: hive-passport). Checks Ed25519 signature, temporal validity, and optionally observed inputs hash. Reference-grade implementation. Wire format normative; production-grade is Layer B.

  Parameters:

  • manifest (required) — object — Full passport manifest object (from attest_passport_issue)
  • observed_inputs — object — Optional observed inputs to check against declared hash

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• attest_custody_append

  Append a node to a custody chain (C16: hive-custody). Taint propagates: once tainted, always tainted. Reference-grade implementation. Wire format normative; production-grade is Layer B.

  Parameters:

  • chain_id (required) — string — Chain identifier (create new by using a fresh ID)
  • transform_id (required) — string — Transform identifier for this step
  • agent_did (required) — string — DID of the agent performing the transform
  • payload — object — Transform payload (will be hashed)
  • taint_status — string — Declared taint status

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• attest_custody_verify

  Verify a custody chain: hash linkage, Ed25519 signatures, and taint propagation (C16). Reference-grade implementation. Wire format normative; production-grade is Layer B.

  Parameters:

  • nodes (required) — array — Ordered array of custody chain node objects (from attest_custody_append responses)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• attest_custody_proof

  Retrieve a Merkle inclusion proof for a specific node in a custody chain (C16). Reference-grade implementation. Wire format normative; production-grade is Layer B.

  Parameters:

  • chain_id (required) — string — Chain identifier
  • index (required) — integer — 0-based node index

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• attest_cargo_register

  Register a versioned cargo type in the HiveAttest registry (C17: hive-cargo-taxonomy). Pins a definition hash for version-anchoring. Reference-grade implementation. Wire format normative; production-grade is Layer B.

  Parameters:

  • id (required) — string — Unique cargo type ID, e.g. "pii"
  • name (required) — string — Human-readable cargo type name
  • version (required) — string — Semver version string, e.g. "1.0.0"
  • sensitivity (required) — string
  • schema (required) — object — JSON Schema defining the payload shape
  • supersedes — object — Optional {id, version} of superseded type

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• attest_cargo_validate

  Validate a payload against a registered cargo type schema (C17). Reference-grade implementation. Wire format normative; production-grade is Layer B.

  Parameters:

  • cargo_type_id (required) — string — Registered cargo type ID
  • version (required) — string — Cargo type version
  • payload (required) — object — Payload to validate against the schema

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• attest_cargo_snapshot

  Get a registry snapshot with Merkle root for version pinning (C17). Reference-grade implementation. Wire format normative; production-grade is Layer B.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• attest_warranty_issue

  Issue an attestation warranty committing an agent to a claim (C18: hive-attestation-warranty). Signed with Ed25519. Reference-grade implementation. Wire format normative; production-grade is Layer B.

  Parameters:

  • agent_did (required) — string — DID of the warranting agent
  • action_id (required) — string — Action correlation ID being warranted
  • claim (required) — string — Human-readable warranty claim
  • scope — object — Scope constraints
  • expires_at — string — ISO-8601 expiry UTC (optional)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• attest_warranty_breach

  Report a warranty breach. Marks the warranty as breached and returns a signed breach record (C18). Reference-grade implementation. Wire format normative; production-grade is Layer B.

  Parameters:

  • warranty_id (required) — string — Warranty ID to report breach on
  • breach_description (required) — string — Description of the breach
  • evidence — object — Optional evidence dict

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• attest_warranty_get

  Retrieve a warranty by ID (C18). Reference-grade implementation. Wire format normative; production-grade is Layer B.

  Parameters:

  • warranty_id (required) — string — Warranty ID

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• attest_gate_evaluate

  THE HEADLINE TOOL. Evaluate whether an agent may proceed through the HiveAttest gate (C19: hive-gate-enforcer). Verifies passport signature + expiry, cargo registry membership, and warranty status. Every response (allow OR deny) includes a signed C18-format receipt of the gate decision. Reference-grade implementation. Wire format normative; production-grade is Layer B.

  Parameters:

  • passport_manifest (required) — object — C15 passport manifest from attest_passport_issue
  • context — object — Additional gate evaluation context
  • custody_root — string — Expected custody chain Merkle root (optional)
  • warranty_ids — array — Active warranty IDs to verify
  • cargo_manifest — object — C17 cargo manifest (optional)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• attest_inspect_sample

  Probabilistic secondary inspection of a record batch (C20: hive-secondary-inspection). Returns a signed inspection record. Reference-grade implementation. Wire format normative; production-grade is Layer B.

  Parameters:

  • sample_id (required) — string — Identifier for the sample batch
  • records (required) — array — Records to probabilistically inspect
  • seed — integer — Optional RNG seed for reproducibility
  • sample_rate — number — Fraction to inspect (0.0 to 1.0)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• attest_smsh_verify

  Verify a SMSH-Stamp v1 receipt (C8/C12: smsh-stamp-verifier). Validates schema, version, algorithm, timestamp, and Ed25519 signature. Reference-grade implementation. Wire format normative; production-grade is Layer B.

  Parameters:

  • receipt (required) — object — SMSH-Stamp v1 receipt object
  • pubkey_b64url — string — Override trust anchor Ed25519 public key (base64url, 32 bytes)
  • max_age_seconds — integer — Reject receipts older than this many seconds

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• attest_absence_build

  Build a sorted Merkle tree for an audit window (enables cryptographic non-membership proofs, C13: prov-absence). Reference-grade implementation. Wire format normative; production-grade is Layer B.

  Parameters:

  • window_id (required) — string — Audit window identifier
  • events (required) — array — Observed events to commit to the sorted Merkle tree

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• attest_absence_prove

  Prove that a query event is NOT a member of a previously-built audit window (C13). Reference-grade implementation. Wire format normative; production-grade is Layer B.

  Parameters:

  • window_id (required) — string — Audit window identifier (must have been built)
  • query (required) — object — Event to prove absent

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• attest_absence_verify

  Verify a non-membership proof against an expected Merkle root (C13). Reference-grade implementation. Wire format normative; production-grade is Layer B.

  Parameters:

  • proof (required) — object — Non-membership proof from attest_absence_prove
  • root_hex (required) — string — Expected Merkle root (hex)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• attest_meta

  Return HiveAttest layer/spec/patent metadata for all claims. Useful for agent introspection. Reference-grade implementation. Wire format normative; production-grade is Layer B.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

Publisher website Repository

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.