@atrib/verify-mcp 0.2.2 → 0.2.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +38 -22
- package/package.json +13 -1
package/README.md
CHANGED
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
|
|
3
3
|
MCP server exposing the `atrib-verify` cognitive primitive. It verifies counterparty handoff evidence before a receiving agent signs follow-up work that cites those records through `informed_by`.
|
|
4
4
|
|
|
5
|
-
|
|
5
|
+
The package is read-only. It accepts caller-supplied evidence, returns accepted and rejected hashes, and leaves the follow-up signing step to `atrib-emit` or normal wrapped tool calls.
|
|
6
6
|
|
|
7
7
|
## Install
|
|
8
8
|
|
|
@@ -10,27 +10,7 @@ MCP server exposing the `atrib-verify` cognitive primitive. It verifies counterp
|
|
|
10
10
|
npm install @atrib/verify-mcp
|
|
11
11
|
```
|
|
12
12
|
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
```json
|
|
16
|
-
{
|
|
17
|
-
"mcpServers": {
|
|
18
|
-
"atrib-verify": {
|
|
19
|
-
"command": "npx",
|
|
20
|
-
"args": ["-y", "@atrib/verify-mcp"]
|
|
21
|
-
}
|
|
22
|
-
}
|
|
23
|
-
}
|
|
24
|
-
```
|
|
25
|
-
|
|
26
|
-
If installed globally, the package exposes the `atrib-verify` binary:
|
|
27
|
-
|
|
28
|
-
```bash
|
|
29
|
-
npm install -g @atrib/verify-mcp
|
|
30
|
-
atrib-verify
|
|
31
|
-
```
|
|
32
|
-
|
|
33
|
-
## Tool
|
|
13
|
+
## Tool surface
|
|
34
14
|
|
|
35
15
|
Host-specific tool names vary. The MCP tool itself is named `atrib-verify`:
|
|
36
16
|
|
|
@@ -51,6 +31,8 @@ mcp__atrib-verify__atrib-verify({
|
|
|
51
31
|
})
|
|
52
32
|
```
|
|
53
33
|
|
|
34
|
+
## Evidence
|
|
35
|
+
|
|
54
36
|
`packet`, `records`, and `claims` accept the same evidence shapes as `@atrib/verify`:
|
|
55
37
|
|
|
56
38
|
- [D062](https://github.com/creatornader/atrib/blob/main/DECISIONS.md#d062-local-mirror-sidecar--two-tier-private-local--public-canonical-persistence) local mirror envelopes: `{ record, proof?, _local?: { content?, args?, result? } }`
|
|
@@ -83,6 +65,36 @@ The response returns accepted hashes plus compact per-claim evidence:
|
|
|
83
65
|
}
|
|
84
66
|
```
|
|
85
67
|
|
|
68
|
+
## Behaviors
|
|
69
|
+
|
|
70
|
+
- **Read-only**: never signs records, submits to the log, or mutates the local mirror.
|
|
71
|
+
- **Caller-supplied evidence**: does not fetch from the public log or retrieve archive bodies.
|
|
72
|
+
- **Verifier-backed**: delegates signature, trust, body-commitment, inclusion, freshness, and context checks to `@atrib/verify`.
|
|
73
|
+
- **Handoff-oriented**: accepted hashes are the values the receiving agent can cite through `informed_by` when it signs follow-up work.
|
|
74
|
+
- **Explicit rejection**: failed claims stay visible in `rejected` instead of disappearing from the response.
|
|
75
|
+
|
|
76
|
+
## Wire-up
|
|
77
|
+
|
|
78
|
+
Run it through `npx` from an MCP host:
|
|
79
|
+
|
|
80
|
+
```json
|
|
81
|
+
{
|
|
82
|
+
"mcpServers": {
|
|
83
|
+
"atrib-verify": {
|
|
84
|
+
"command": "npx",
|
|
85
|
+
"args": ["-y", "@atrib/verify-mcp"]
|
|
86
|
+
}
|
|
87
|
+
}
|
|
88
|
+
}
|
|
89
|
+
```
|
|
90
|
+
|
|
91
|
+
Or install it globally. The package exposes the `atrib-verify` binary:
|
|
92
|
+
|
|
93
|
+
```bash
|
|
94
|
+
npm install -g @atrib/verify-mcp
|
|
95
|
+
atrib-verify
|
|
96
|
+
```
|
|
97
|
+
|
|
86
98
|
## Local Development
|
|
87
99
|
|
|
88
100
|
From a checkout of the atrib monorepo:
|
|
@@ -106,6 +118,10 @@ For local MCP host testing without npm:
|
|
|
106
118
|
}
|
|
107
119
|
```
|
|
108
120
|
|
|
121
|
+
## Relationship to @atrib/verify
|
|
122
|
+
|
|
123
|
+
`@atrib/verify-mcp` depends on `@atrib/verify` for verifier semantics. The MCP package owns the agent-facing schema, stdio transport, and compact response shape.
|
|
124
|
+
|
|
109
125
|
## Status
|
|
110
126
|
|
|
111
127
|
Public package for cognitive primitive #7. It depends on `@atrib/verify` for verifier semantics and keeps the MCP surface read-only.
|
package/package.json
CHANGED
|
@@ -1,7 +1,19 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@atrib/verify-mcp",
|
|
3
|
-
"version": "0.2.
|
|
3
|
+
"version": "0.2.3",
|
|
4
4
|
"description": "MCP server for atrib. Verifies counterparty handoff evidence before an agent links follow-up work through informed_by.",
|
|
5
|
+
"keywords": [
|
|
6
|
+
"atrib",
|
|
7
|
+
"mcp",
|
|
8
|
+
"model-context-protocol",
|
|
9
|
+
"attribution",
|
|
10
|
+
"verification",
|
|
11
|
+
"verifiable",
|
|
12
|
+
"handoff",
|
|
13
|
+
"agent",
|
|
14
|
+
"ed25519"
|
|
15
|
+
],
|
|
16
|
+
"homepage": "https://atrib.dev",
|
|
5
17
|
"license": "Apache-2.0",
|
|
6
18
|
"type": "module",
|
|
7
19
|
"main": "./dist/index.js",
|