About HiveAttest
HiveAttest is an attestation MCP server for autonomous agents, exposing a set of signing and verification primitives through 19 tools. It uses Ed25519, canonical JSON, and SHA-256, and is presented as a reference implementation with a normative wire format.
Key features
- 01Issue and verify pre-action attestation manifests
- 02Append and verify custody chains and Merkle proofs
- 03Register, validate, and snapshot cargo types
- 04Issue, retrieve, and report warranty breaches
- 05Evaluate gates and return signed receipts
- 06Build and verify non-membership proofs
Use cases
- 01Create verifiable attestations before agent actions
- 02Track custody chains and verify data integrity
- 03Validate payload schemas and pin registry versions
- 04Evaluate gates and record signed outcomes
MCP support
The MCP server exposes 19 attestation tools over Streamable-HTTP and proxies requests to the hivemorph backend. Tools cover manifests, custody chains, cargo validation, gate evaluation, and Merkle proofs.
Configuration
Remote servers need no local install. Pick your client, then copy the config or install in one click.
https://hive-mcp-attest.onrender.com/mcpclaude mcp add --transport http srotzin-hive-mcp-attest https://hive-mcp-attest.onrender.com/mcp{"mcpServers":{"srotzin-hive-mcp-attest":{"type":"http","url":"https://hive-mcp-attest.onrender.com/mcp"}}}Open in Cursor{"servers":{"srotzin-hive-mcp-attest":{"type":"http","url":"https://hive-mcp-attest.onrender.com/mcp"}}}Open in VS Code{"mcpServers":{"srotzin-hive-mcp-attest":{"type":"http","url":"https://hive-mcp-attest.onrender.com/mcp"}}}{"mcpServers":{"srotzin-hive-mcp-attest":{"serverUrl":"https://hive-mcp-attest.onrender.com/mcp"}}}Run commands in a terminal; paste JSON into the client’s MCP config and restart. Servers that need sign-in will prompt on first connect.
Tools
18| Parameter | Type | Required | Description |
|---|---|---|---|
| inputs | object | No | Declared inputs (will be hashed) |
| action_id | string | Yes | Caller-supplied action correlation ID |
| agent_did | string | Yes | DID of the attesting agent |
| intended_op | string | Yes | Operation name, e.g. "tool_invocation" |
| ttl_seconds | integer | No | Validity window in seconds (default 300) |
| target_resource | string | Yes | URI or identifier of the target resource |
Details
From the project READMEhive-mcp-attest
HiveAttest perimeter for autonomous agents — C8/C12/C13/C15-C20
https://hive-mcp-attest.onrender.com/mcp
Layer C — Reference Grade
This is the reference implementation of the HiveAttest claim family. Wire format is normative. Production-grade (Layer B) is a future hardened deployment.
Reference implementation of USPTO Provisional 64/055,601 — HiveAttest claims C8/C12/C13/C15-C20.
Inventor: Stephen A. Rotzin
What this is
hive-mcp-attest is a Model Context Protocol (MCP) server that exposes the complete HiveAttest perimeter as 19 tools, proxying to the live hivemorph backend.
- Protocol: MCP 2024-11-05 over Streamable-HTTP / JSON-RPC 2.0
- Transport:
POST /mcp - Discovery:
GET /.well-known/mcp.json - Health:
GET /health - Backend:
https://hivemorph.onrender.com - Crypto: Ed25519, RFC 8785 JCS, SHA-256 — real signatures, no mocks
- Brand gold:
#FFB800
Tools
| Tool | Claim | Description |
|---|---|---|
attest_passport_issue | C15 | Issue a Pre-Action Attestation Manifest (Ed25519 signed) |
attest_passport_verify | C15 | Verify a passport manifest (signature + temporal + inputs hash) |
attest_custody_append | C16 | Append a signed node to a custody chain (taint propagation) |
attest_custody_verify | C16 | Verify hash linkage, signatures, and taint propagation |
attest_custody_proof | C16 | Get a Merkle inclusion proof for a custody node |
attest_cargo_register | C17 | Register a versioned cargo type (definition_hash pinned) |
attest_cargo_validate | C17 | Validate a payload against a registered cargo schema |
attest_cargo_snapshot | C17 | Registry snapshot with Merkle root for version pinning |
attest_warranty_issue | C18 | Issue a signed warranty committing an agent to a claim |
attest_warranty_breach | C18 | Report a breach — signed breach record returned |
attest_warranty_get | C18 | Retrieve a warranty by ID |
attest_gate_evaluate | C19 | THE HEADLINE TOOL — Gate evaluation with signed C18 receipt |
attest_inspect_sample | C20 | Probabilistic secondary inspection, signed inspection record |
attest_smsh_verify | C8/C12 | Verify a SMSH-Stamp v1 receipt |
attest_absence_build | C13 | Build a sorted Merkle tree for provable non-membership |
attest_absence_prove | C13 | Prove an event is absent from an audit window |
attest_absence_verify | C13 | Verify a non-membership proof against a root |
attest_meta | — | Return layer/spec/patent metadata for all claims |
Endpoints
| Tool | Backend URL |
|---|---|
attest_passport_issue | POST https://hivemorph.onrender.com/v1/attest/passport/issue |
attest_passport_verify | POST https://hivemorph.onrender.com/v1/attest/passport/verify |
attest_custody_append | POST https://hivemorph.onrender.com/v1/attest/custody/append |
attest_custody_verify | POST https://hivemorph.onrender.com/v1/attest/custody/verify |
attest_custody_proof | GET https://hivemorph.onrender.com/v1/attest/custody/{chain_id}/proof/{index} |
attest_cargo_register | POST https://hivemorph.onrender.com/v1/attest/cargo/register |
attest_cargo_validate | POST https://hivemorph.onrender.com/v1/attest/cargo/validate |
attest_cargo_snapshot | GET https://hivemorph.onrender.com/v1/attest/cargo/snapshot |
attest_warranty_issue | POST https://hivemorph.onrender.com/v1/attest/warranty/issue |
attest_warranty_breach | POST https://hivemorph.onrender.com/v1/attest/warranty/breach |
attest_warranty_get | GET https://hivemorph.onrender.com/v1/attest/warranty/{id} |
attest_gate_evaluate | POST https://hivemorph.onrender.com/v1/attest/gate/evaluate |
attest_inspect_sample | POST https://hivemorph.onrender.com/v1/attest/inspect/sample |
attest_smsh_verify | POST https://hivemorph.onrender.com/v1/attest/smsh/verify |
attest_absence_build | POST https://hivemorph.onrender.com/v1/attest/absence/build |
attest_absence_prove | POST https://hivemorph.onrender.com/v1/attest/absence/prove |
attest_absence_verify | POST https://hivemorph.onrender.com/v1/attest/absence/verify |
attest_meta | (local — no backend call) |
Connect (Claude Desktop)
Add to your claude_desktop_config.json:
{
"mcpServers": {
"hive-mcp-attest": {
"command": "node",
"args": ["/path/to/hive-mcp-attest/server.js"],
"env": {
"HIVE_BASE": "https://hivemorph.onrender.com"
}
}
}
}
Or connect via Streamable-HTTP (MCP 2024-11-05):
{
"mcpServers": {
"hive-mcp-attest": {
"url": "https://hive-mcp-attest.onrender.com/mcp",
"transport": "streamable-http"
}
}
}
Environment variables
| Variable | Default | Description |
|---|---|---|
HIVE_BASE | https://hivemorph.onrender.com | Backend hivemorph URL |
PORT | 3000 | Server port |
Cryptographic guarantees
All attestation primitives use:
- Ed25519 — signing key generated at backend startup (or loaded from
HIVE_ATTEST_PRIVATE_KEY_B64URL) - RFC 8785 JCS — deterministic canonicalization for all signing operations
- SHA-256 — payload hashing, Merkle tree nodes
- No mocked signatures — every signature is a real 64-byte Ed25519 output
Patent
Reference implementation of USPTO Provisional 64/055,601 — HiveAttest claims C8/C12/C13/C15-C20.
Inventor: Stephen A. Rotzin. Filed May 2 2026.
Layer
Layer C — Reference Grade. Wire format is normative. Production-grade is Layer B.
Every tool description ends with: "Reference-grade implementation. Wire format normative; production-grade is Layer B."
License
MIT © 2026 Stephen A. Rotzin / Hive Civilization
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.