@atrib/recall 0.2.0 → 0.2.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +69 -0
- package/package.json +2 -2
package/README.md
ADDED
|
@@ -0,0 +1,69 @@
|
|
|
1
|
+
# `@atrib/recall`
|
|
2
|
+
|
|
3
|
+
MCP server for atrib. Lets agents query their own provable past from the local signed-record mirror with per-record signature verification.
|
|
4
|
+
|
|
5
|
+
The consumer-side counterpart to `@atrib/emit`: emit produces signed records, recall reads them back and exposes them to the agent through one tool, `recall_my_attribution_history`. Each returned record carries a `signature_verified` boolean so a poorly-written agent treats tampered records as such.
|
|
6
|
+
|
|
7
|
+
## Tool surface
|
|
8
|
+
|
|
9
|
+
```typescript
|
|
10
|
+
mcp__atrib-recall__recall_my_attribution_history({
|
|
11
|
+
// All optional
|
|
12
|
+
context_id?: string, // 32-hex. Filter to records signed under this trace.
|
|
13
|
+
event_type?: 'tool_call' | 'transaction', // Filter to a single event kind.
|
|
14
|
+
// Short-form names are normalized to the URI form.
|
|
15
|
+
limit?: number, // Default 25, max 200.
|
|
16
|
+
offset?: number, // For pagination. Note pagination_caveat in the response.
|
|
17
|
+
compact?: boolean, // Default true — omits signature/content_id/chain_root/spec_version
|
|
18
|
+
// fields. Set false for full record bytes (re-verification).
|
|
19
|
+
include_unverified?: boolean, // Default false — drops records whose signature didn't verify.
|
|
20
|
+
// Set true ONLY when consuming the verbose mode AND explicitly
|
|
21
|
+
// checking signature_verified per record.
|
|
22
|
+
})
|
|
23
|
+
```
|
|
24
|
+
|
|
25
|
+
Returns a `RecallResult` with `total`, `returned`, `filtered_out_by_verification`, `record_file`, `log_origin`, `pagination_caveat`, and `records` (compact or full per the flag).
|
|
26
|
+
|
|
27
|
+
## Trust scope
|
|
28
|
+
|
|
29
|
+
Signature verification is local-only. A passing `signature_verified` proves the record was signed by the named `creator_key`; it does NOT prove the record was committed to log.atrib.dev. To confirm log inclusion, fetch the inclusion proof from the log API.
|
|
30
|
+
|
|
31
|
+
## Configuration
|
|
32
|
+
|
|
33
|
+
| Env var | Required | Purpose |
|
|
34
|
+
|---|---|---|
|
|
35
|
+
| `ATRIB_RECORD_FILE` | optional | Path to the signed-record jsonl mirror to read. Default: `~/.atrib/records/mcp-wrap-claude-code.jsonl` |
|
|
36
|
+
| `ATRIB_LOG_ORIGIN` | optional | Origin used in human-readable response messages. Default: `log.atrib.dev` |
|
|
37
|
+
|
|
38
|
+
## Installation in an MCP host
|
|
39
|
+
|
|
40
|
+
```jsonc
|
|
41
|
+
{
|
|
42
|
+
"mcpServers": {
|
|
43
|
+
"atrib-recall": {
|
|
44
|
+
"command": "node",
|
|
45
|
+
"args": ["/abs/path/to/atrib/services/atrib-recall/dist/index.js"],
|
|
46
|
+
"env": {}
|
|
47
|
+
}
|
|
48
|
+
}
|
|
49
|
+
}
|
|
50
|
+
```
|
|
51
|
+
|
|
52
|
+
Or run via `npx`:
|
|
53
|
+
|
|
54
|
+
```jsonc
|
|
55
|
+
{
|
|
56
|
+
"mcpServers": {
|
|
57
|
+
"atrib-recall": {
|
|
58
|
+
"command": "npx",
|
|
59
|
+
"args": ["-y", "@atrib/recall"]
|
|
60
|
+
}
|
|
61
|
+
}
|
|
62
|
+
}
|
|
63
|
+
```
|
|
64
|
+
|
|
65
|
+
## What this does NOT do
|
|
66
|
+
|
|
67
|
+
- **No log-inclusion verification.** Local signature verification ≠ log commitment proof. Use the log API for inclusion proofs.
|
|
68
|
+
- **No graph derivation.** Returns records, not the §3.2.4 graph. For that, use `@atrib/trace` (causal chain) or query graph-node directly.
|
|
69
|
+
- **No write surface.** Read-only. Use `@atrib/emit` to sign new records.
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@atrib/recall",
|
|
3
|
-
"version": "0.2.
|
|
3
|
+
"version": "0.2.2",
|
|
4
4
|
"description": "MCP server for atrib. Lets agents query their own provable past from the local signed-record mirror with per-record signature verification.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "dist/index.js",
|
|
@@ -10,7 +10,7 @@
|
|
|
10
10
|
"dependencies": {
|
|
11
11
|
"@modelcontextprotocol/sdk": "^1.12.1",
|
|
12
12
|
"zod": "^4.3.6",
|
|
13
|
-
"@atrib/mcp": "0.
|
|
13
|
+
"@atrib/mcp": "0.5.0"
|
|
14
14
|
},
|
|
15
15
|
"devDependencies": {
|
|
16
16
|
"@types/node": "^22.0.0",
|