mcpField
A
Agent Trust (mnki-mcp)

Agent Trust (mnki-mcp)

VerifiedFeaturedLocal
mnki.comDeveloper Tools1Updated 5w ago
DocsRepositoryVisit website

About Agent Trust (mnki-mcp)

Agent Trust is an open profile and reference implementation for verifying agent identity, authority, and the provenance of actions. It includes SDKs, a verifier, CLI, and a local MCP proxy that checks tool calls.

Key features

  1. 01Agent identity and delegated authority
  2. 02Capability-based authorization and attestations
  3. 03Request proof-of-possession and provenance
  4. 04SDKs for TypeScript, Python, and Go
  5. 05CLI for inspection and protection
  6. 06Local proxy verifies MCP tool calls

Use cases

  1. 01Verify an agent's authority before a tool call
  2. 02Delegate constrained permissions to an agent
  3. 03Inspect agent-accessible MCP servers and API keys
  4. 04Verify authorization evidence against an organization snapshot

MCP support

The `mnki-mcp` local proxy verifies each `tools/call` before forwarding it to an MCP server. Agent Trust also specifies carrying its profile over MCP.

#ai#trust

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config
{
  "mcpServers": {
    "agent-trust-mnki": {
      "command": "npx",
      "args": [
        "-y",
        "mnki-cli"
      ]
    }
  }
}
Run commandnpx -y mnki-cli

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages
npmmnki-cli

Tools

No tool list yet

Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.

Details

From the project README

Agent Trust

Prove what an autonomous AI agent is authorized to do. An open profile plus a reference implementation for agent identity, principal binding, delegation with attenuation, capability-based authorization, request proof-of-possession, authorization attestations, tamper-evident provenance, single-use permits, cross-organization revocation and declared effect paths — carried on JWS, OAuth/OIDC, SPIFFE/WIMSE, AuthZEN, OpenID Federation, MCP and A2A. No new cryptography, no new protocol.

No consequential agent action should be accepted because a process is running or a token is valid. It should be accepted because the action is attributable, authorized, constrained, current and verifiable.

PackageWhat it is
packages/verifierThe pure core: parsing, delegation chain + attenuation, policy engine, request proof, delegation credentials, attestations, the 12-step evidence pipeline. Deterministic, dependency-free, WebCrypto only.
packages/sdk-tsmnki-sdk — TypeScript SDK: agent identity (keys, signed requests), guard() for any tool call, verify, delegate, attest, request grants from an access broker, offline verification against an organization's JWKS; framework adapters as subpaths.
packages/climnki-cli — mnki demo · init · identity · verify · inspect · delegate · attest · access · scan · protect · conformance (agenttrust is an alias).
packages/mcpmnki-mcp — a local MCP proxy that verifies every tools/call before it reaches the server (mnki protect installs it).
python/pip install mnki — Python SDK (zero dependencies; mnki[signing] for Agent-Proof).
go/Go verifier (same vectors, no dependencies) and at-verify, the self-hosted verifier that serves /v1/verify from an exported organization snapshot.
spec/Agent Trust Profile v0.2, the interoperability positioning, the Internet-Draft (draft-mnki-agent-trust-profile-00) and the standards plan.
conformance/Executable vectors for certification levels 1–3 (LEVELS.md) — the cross-language contract; the TypeScript, Go and Python runners pass them all.
npx mnki-cli demo      # the 15-second story, no account: a €47,000 refund denied, €420 allowed
npx mnki-cli scan      # find the MCP servers and API keys agents can use on this machine
npm install mnki-sdk   # guard() any tool call
pip install mnki               # same in Python

Develop against the open verifier and SDKs for free; govern fleets with the hosted control plane at mnki.com — see COMMERCIAL.md for the boundary and TRADEMARK.md for name and badge use. Releases carry npm/PyPI provenance, SBOMs and cosign-signed checksums (SECURITY.md).

Apache-2.0.

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.