alexfleetcommander/agent-trust-stack-mcp

MCP (Model Context Protocol) server exposing the **Agent Trust Stack** tools so any MCP-compatible AI agent can use them natively.
Provides **Chain of Consciousness** (CoC) provenance logging and **Agent Rating Protocol** (ARP) reputation scoring — the two operational protocols from the 7-protocol Agent Trust Stack.
Tools
| Tool | Description |
|------|-------------|
| coc_init | Initialize a new cryptographic hash chain (genesis block) |
| coc_add | Append an entry — learn, decide, create, error, note, milestone, session_start/end |
| coc_verify | Verify chain integrity (hash linkage, sequence, completeness) |
| coc_status | Get chain stats (length, agents, time span, event types) |
| coc_tail | Get the last N entries |
| coc_anchor | Submit chain hash for external timestamping (OTS + RFC 3161 TSA) |
| arp_rate | Submit a bilateral blind rating for another agent |
| arp_check | Check an agent's reputation score |
| trust_stack_info | Get info about all 7 protocols with whitepaper links |
| verify_agent_identity | Verify an agent's identity via Agent Card URL |
| get_trust_evidence | Get combined trust evidence (CoC + ARP) for an agent |
Resources
| URI | Description |
|-----|-------------|
| trust-stack://protocols | Overview of all 7 protocols with links |
| trust-stack://installation | Installation instructions |
Installation
For proper OpenTimestamps .ots file format (optional):
Configuration
Add to your MCP client config (Claude Code, Cursor, etc.):
Environment Variables
| Variable | Default | Description |
|----------|---------|-------------|
| COC_CHAIN_DIR | ./chain | Directory for chain files |
| ARP_RATINGS_DIR | ./ratings | Directory for rating files |
Custom data directories
Usage Examples
Once connected, any MCP-compatible agent can call these tools directly:
Start a provenance chain
Log activity
Verify chain integrity
Rate another agent
Check reputation
Running Directly
How It Works
**Chain of Consciousness (CoC):** An append-only JSONL file where each entry contains a SHA-256 hash linking it to the previous entry, creating a tamper-evident log. Any modification to earlier entries breaks the hash chain, making tampering detectable. Optional external anchoring via OpenTimestamps (Bitcoin) and RFC 3161 TSA provides independent timestamp proof.
**Agent Rating Protocol (ARP):** Agents rate each other on a -1.0 to 1.0 scale after interactions. Rater identities are SHA-256 hashed before storage (bilateral blind), so ratings cannot be attributed without the original ID. Reputation is the aggregate of all received ratings.
Local Package vs Hosted API
This package (pip install agent-trust-stack-mcp) runs **locally** as an MCP server with 11 tools for provenance and reputation.
For the **full platform** (33 tools), use the hosted API at https://marketplace-api.vibeagentmaking.com:
| Feature | Local Package | Hosted API |
|---------|--------------|------------|
| CoC provenance | Yes (11 tools) | Yes |