meshsig 0.6.0 → 0.7.1

package/README.md

@@ -20,7 +20,8 @@
   <a href="https://meshsig.ai">meshsig.ai</a> ·
   <a href="#cli">CLI</a> ·
   <a href="#dashboard">Dashboard</a> ·
-  <a href="#openclaw-integration">OpenClaw</a> ·
+  <a href="#mcp-server">MCP</a> ·
+  <a href="#integrations">Integrations</a> ·
   <a href="#api-reference">API</a> ·
   <a href="#audit--compliance">Audit</a>
 </p>
@@ -204,9 +205,39 @@ meshsig revoked
 
 Built-in protection against abuse. 60 requests per minute per IP address. Exceeding the limit returns `429 Too Many Requests` with retry information.
 
-## OpenClaw Integration
+## Integrations
 
-MeshSig integrates natively with [OpenClaw](https://openclaw.com). One install secures all agent-to-agent delegations with cryptographic signatures.
+MeshSig is **framework-agnostic** — it works with any AI agent framework via the HTTP API, CLI, or MCP protocol.
+
+### Any Framework (HTTP API)
+
+Use the REST API to sign and verify messages from any language or framework:
+
+```bash
+# Register an agent
+curl -X POST http://localhost:4888/agents/register \
+  -H 'Content-Type: application/json' \
+  -d '{"name":"my-agent","capabilities":[{"type":"analysis"}]}'
+
+# Send a signed message
+curl -X POST http://localhost:4888/messages/send \
+  -H 'Content-Type: application/json' \
+  -d '{"fromDid":"did:msig:...","toDid":"did:msig:...","message":"task","privateKey":"..."}'
+```
+
+Works with **LangChain**, **CrewAI**, **AutoGen**, **LlamaIndex**, **Semantic Kernel**, **Haystack**, custom agents, and any system that can make HTTP requests.
+
+### MCP (Claude, Cursor, Windsurf, Cline)
+
+MeshSig ships as a native MCP server. See the [MCP Server](#mcp-server) section.
+
+```bash
+npx meshsig-mcp
+```
+
+### OpenClaw (Native)
+
+MeshSig includes built-in scripts for OpenClaw agent-to-agent delegation:
 
 ```bash
 # With MeshSig running on the same server as OpenClaw:
@@ -224,7 +255,7 @@ Before:  Agent A → invoke.sh → Agent B  (no proof)
 After:   Agent A → invoke.sh → [SIGN] → MeshSig → [VERIFY] → Agent B
 ```
 
-### Auto-register new agents
+### Auto-register agents
 
 ```bash
 # When a new agent is provisioned:
@@ -234,6 +265,34 @@ bash scripts/register-agent.sh agent-name-here
 bash scripts/unregister-agent.sh agent-name-here
 ```
 
+### Python / JavaScript SDK
+
+Use MeshSig programmatically:
+
+```javascript
+// JavaScript / TypeScript
+import { generateIdentity, sign, verify } from 'meshsig';
+
+const agent = await generateIdentity();
+const signature = await sign('hello', agent.privateKey);
+const valid = await verify('hello', signature, agent.publicKey); // true
+```
+
+```python
+# Python — use the HTTP API
+import requests
+
+# Register
+r = requests.post('http://localhost:4888/agents/register',
+    json={'name': 'my-agent', 'capabilities': [{'type': 'analysis'}]})
+agent = r.json()
+
+# Verify
+r = requests.post('http://localhost:4888/verify',
+    json={'message': 'hello', 'signature': sig, 'did': agent['record']['did']})
+print(r.json()['valid'])  # True
+```
+
 ## How It Works
 
 ### Identity
@@ -336,6 +395,46 @@ See [docs/SECURITY.md](docs/SECURITY.md) for the full security whitepaper.
 
 No database to configure. No cloud services. No API keys. Install, start, secure.
 
+## MCP Server
+
+MeshSig works as a Model Context Protocol (MCP) server — any AI tool can use it directly.
+
+**9 tools available:** `meshsig_init`, `meshsig_sign`, `meshsig_verify`, `meshsig_identity`, `meshsig_agents`, `meshsig_stats`, `meshsig_audit`, `meshsig_revoke`, `meshsig_revoked`
+
+### Claude Desktop
+
+Add to `~/.claude/claude_desktop_config.json`:
+
+```json
+{
+  "mcpServers": {
+    "meshsig": {
+      "command": "npx",
+      "args": ["meshsig-mcp"]
+    }
+  }
+}
+```
+
+### Cursor / Windsurf / Cline
+
+Add to your MCP config:
+
+```json
+{
+  "meshsig": {
+    "command": "npx",
+    "args": ["meshsig-mcp"]
+  }
+}
+```
+
+Then ask your AI: *"Sign this message with MeshSig"* or *"Verify this agent's signature"* — it works directly.
+
+### Environment Variables
+
+- `MESHSIG_SERVER` — MeshSig server URL (default: `http://localhost:4888`)
+
 ## License
 
 MIT

package/dist/mcp-server.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/mcp-server.js

@@ -0,0 +1,311 @@
+#!/usr/bin/env node
+// ============================================================================
+// MeshSig MCP Server — Model Context Protocol integration
+//
+// Exposes MeshSig cryptographic operations as MCP tools that any
+// AI application (Claude, Cursor, Windsurf, Cline) can use directly.
+//
+// Usage:
+//   npx meshsig-mcp              # Start as stdio MCP server
+//   node dist/mcp-server.js      # Direct execution
+//
+// Claude Desktop config (~/.claude/claude_desktop_config.json):
+//   {
+//     "mcpServers": {
+//       "meshsig": {
+//         "command": "npx",
+//         "args": ["meshsig-mcp"]
+//       }
+//     }
+//   }
+// ============================================================================
+import { generateIdentity, sign, verify, verifyWithDid, isValidDid, hashPayload } from './crypto.js';
+import { resolve } from 'node:path';
+import { homedir } from 'node:os';
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+const MESHSIG_DIR = resolve(homedir(), '.meshsig');
+const IDENTITY_FILE = resolve(MESHSIG_DIR, 'identity.json');
+const DEFAULT_SERVER = process.env.MESHSIG_SERVER || 'http://localhost:4888';
+function ensureDir() {
+    if (!existsSync(MESHSIG_DIR))
+        mkdirSync(MESHSIG_DIR, { recursive: true });
+}
+function loadIdentity() {
+    if (!existsSync(IDENTITY_FILE))
+        return null;
+    return JSON.parse(readFileSync(IDENTITY_FILE, 'utf-8'));
+}
+function sendResponse(id, result) {
+    const msg = JSON.stringify({ jsonrpc: '2.0', id, result });
+    process.stdout.write(`${msg}\n`);
+}
+function sendError(id, code, message) {
+    const msg = JSON.stringify({ jsonrpc: '2.0', id, error: { code, message } });
+    process.stdout.write(`${msg}\n`);
+}
+function sendNotification(method, params) {
+    const msg = JSON.stringify({ jsonrpc: '2.0', method, params });
+    process.stdout.write(`${msg}\n`);
+}
+// -- Tool Definitions --------------------------------------------------------
+const TOOLS = [
+    {
+        name: 'meshsig_init',
+        description: 'Generate a new Ed25519 cryptographic identity (DID + keypair). The identity is stored locally at ~/.meshsig/identity.json. This is required before signing messages.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                force: { type: 'boolean', description: 'Overwrite existing identity if one exists', default: false },
+            },
+        },
+    },
+    {
+        name: 'meshsig_sign',
+        description: 'Sign a message with your Ed25519 private key. Returns the digital signature, hash, and your DID. Requires meshsig_init to have been run first.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                message: { type: 'string', description: 'The message to sign' },
+            },
+            required: ['message'],
+        },
+    },
+    {
+        name: 'meshsig_verify',
+        description: 'Verify an Ed25519 signature against a message and public key or DID. Returns whether the signature is valid. Anyone can verify without needing a private key.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                message: { type: 'string', description: 'The original message that was signed' },
+                signature: { type: 'string', description: 'The Base64-encoded Ed25519 signature' },
+                signer: { type: 'string', description: 'The signer\'s public key (Base64) or DID (did:msig:...)' },
+            },
+            required: ['message', 'signature', 'signer'],
+        },
+    },
+    {
+        name: 'meshsig_identity',
+        description: 'Show your MeshSig identity — DID and public key. Returns null if no identity has been generated yet.',
+        inputSchema: { type: 'object', properties: {} },
+    },
+    {
+        name: 'meshsig_agents',
+        description: 'List all agents registered on the MeshSig server with their DIDs, trust scores, capabilities, and origin (local/remote).',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                server: { type: 'string', description: 'MeshSig server URL', default: 'http://localhost:4888' },
+            },
+        },
+    },
+    {
+        name: 'meshsig_audit',
+        description: 'Export the complete audit report from the MeshSig server — all agents, connections, signed messages, and verification status. Useful for compliance and security reviews.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                server: { type: 'string', description: 'MeshSig server URL', default: 'http://localhost:4888' },
+            },
+        },
+    },
+    {
+        name: 'meshsig_stats',
+        description: 'Get MeshSig server statistics — number of agents, connections, messages, and uptime.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                server: { type: 'string', description: 'MeshSig server URL', default: 'http://localhost:4888' },
+            },
+        },
+    },
+    {
+        name: 'meshsig_revoke',
+        description: 'Revoke a compromised agent. This permanently blocks all future messages from this agent. Cannot be undone.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                did: { type: 'string', description: 'The DID of the agent to revoke (did:msig:...)' },
+                reason: { type: 'string', description: 'Reason for revocation', default: 'Compromised' },
+                server: { type: 'string', description: 'MeshSig server URL', default: 'http://localhost:4888' },
+            },
+            required: ['did'],
+        },
+    },
+    {
+        name: 'meshsig_revoked',
+        description: 'List all revoked (compromised) agents on the MeshSig server.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                server: { type: 'string', description: 'MeshSig server URL', default: 'http://localhost:4888' },
+            },
+        },
+    },
+];
+// -- Tool Handlers -----------------------------------------------------------
+async function handleTool(name, args) {
+    switch (name) {
+        case 'meshsig_init': {
+            ensureDir();
+            if (existsSync(IDENTITY_FILE) && !args.force) {
+                const existing = loadIdentity();
+                return { content: [{ type: 'text', text: `Identity already exists.\nDID: ${existing.did}\nPublic Key: ${existing.publicKey}\nUse force=true to regenerate.` }] };
+            }
+            const identity = await generateIdentity();
+            writeFileSync(IDENTITY_FILE, JSON.stringify(identity, null, 2));
+            return { content: [{ type: 'text', text: `✓ Identity generated\nDID: ${identity.did}\nPublic Key: ${identity.publicKey}\nStored at: ${IDENTITY_FILE}\n\nYour private key is stored locally. Never share it.` }] };
+        }
+        case 'meshsig_sign': {
+            const identity = loadIdentity();
+            if (!identity)
+                return { content: [{ type: 'text', text: 'No identity found. Run meshsig_init first.' }], isError: true };
+            const signature = await sign(args.message, identity.privateKey);
+            const hash = hashPayload(args.message);
+            return { content: [{ type: 'text', text: JSON.stringify({
+                            did: identity.did, message: args.message, signature, hash,
+                            publicKey: identity.publicKey, timestamp: new Date().toISOString(),
+                        }, null, 2) }] };
+        }
+        case 'meshsig_verify': {
+            let valid;
+            if (isValidDid(args.signer)) {
+                valid = await verifyWithDid(args.message, args.signature, args.signer);
+            }
+            else {
+                valid = await verify(args.message, args.signature, args.signer);
+            }
+            return { content: [{ type: 'text', text: valid
+                            ? `✓ SIGNATURE VALID\nSigner: ${args.signer}`
+                            : `✗ SIGNATURE INVALID\nSigner: ${args.signer}\nThe signature does not match the message and key provided.`
+                    }] };
+        }
+        case 'meshsig_identity': {
+            const identity = loadIdentity();
+            if (!identity)
+                return { content: [{ type: 'text', text: 'No identity found. Run meshsig_init first.' }] };
+            return { content: [{ type: 'text', text: JSON.stringify({
+                            did: identity.did, publicKey: identity.publicKey, createdAt: identity.createdAt,
+                        }, null, 2) }] };
+        }
+        case 'meshsig_agents': {
+            const server = args.server || DEFAULT_SERVER;
+            try {
+                const res = await fetch(`${server}/agents`);
+                const data = await res.json();
+                return { content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] };
+            }
+            catch {
+                return { content: [{ type: 'text', text: `Cannot connect to MeshSig server at ${server}` }], isError: true };
+            }
+        }
+        case 'meshsig_audit': {
+            const server = args.server || DEFAULT_SERVER;
+            try {
+                const res = await fetch(`${server}/audit/export`);
+                const data = await res.json();
+                return { content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] };
+            }
+            catch {
+                return { content: [{ type: 'text', text: `Cannot connect to MeshSig server at ${server}` }], isError: true };
+            }
+        }
+        case 'meshsig_stats': {
+            const server = args.server || DEFAULT_SERVER;
+            try {
+                const res = await fetch(`${server}/stats`);
+                const data = await res.json();
+                return { content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] };
+            }
+            catch {
+                return { content: [{ type: 'text', text: `Cannot connect to MeshSig server at ${server}` }], isError: true };
+            }
+        }
+        case 'meshsig_revoke': {
+            const server = args.server || DEFAULT_SERVER;
+            try {
+                const res = await fetch(`${server}/agents/revoke`, {
+                    method: 'POST', headers: { 'Content-Type': 'application/json' },
+                    body: JSON.stringify({ did: args.did, reason: args.reason || 'Compromised' }),
+                });
+                const data = await res.json();
+                return { content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] };
+            }
+            catch {
+                return { content: [{ type: 'text', text: `Cannot connect to MeshSig server at ${server}` }], isError: true };
+            }
+        }
+        case 'meshsig_revoked': {
+            const server = args.server || DEFAULT_SERVER;
+            try {
+                const res = await fetch(`${server}/revoked`);
+                const data = await res.json();
+                return { content: [{ type: 'text', text: JSON.stringify(data, null, 2) }] };
+            }
+            catch {
+                return { content: [{ type: 'text', text: `Cannot connect to MeshSig server at ${server}` }], isError: true };
+            }
+        }
+        default:
+            return { content: [{ type: 'text', text: `Unknown tool: ${name}` }], isError: true };
+    }
+}
+// -- MCP Message Handler -----------------------------------------------------
+async function handleMessage(req) {
+    switch (req.method) {
+        case 'initialize':
+            sendResponse(req.id, {
+                protocolVersion: '2024-11-05',
+                capabilities: { tools: {} },
+                serverInfo: { name: 'meshsig', version: '0.7.0' },
+            });
+            break;
+        case 'notifications/initialized':
+            break;
+        case 'tools/list':
+            sendResponse(req.id, { tools: TOOLS });
+            break;
+        case 'tools/call': {
+            const { name, arguments: args } = req.params;
+            try {
+                const result = await handleTool(name, args || {});
+                sendResponse(req.id, result);
+            }
+            catch (err) {
+                sendResponse(req.id, {
+                    content: [{ type: 'text', text: `Error: ${err.message}` }],
+                    isError: true,
+                });
+            }
+            break;
+        }
+        default:
+            if (req.id !== undefined) {
+                sendError(req.id, -32601, `Method not found: ${req.method}`);
+            }
+    }
+}
+// -- Stdio Transport ---------------------------------------------------------
+let buffer = '';
+process.stdin.setEncoding('utf-8');
+process.stdin.on('data', (chunk) => {
+    buffer += chunk;
+    const lines = buffer.split('\n');
+    buffer = lines.pop() || '';
+    for (const line of lines) {
+        const trimmed = line.trim();
+        if (!trimmed)
+            continue;
+        try {
+            const msg = JSON.parse(trimmed);
+            handleMessage(msg).catch(err => {
+                console.error('MCP handler error:', err);
+            });
+        }
+        catch {
+            // skip non-JSON lines
+        }
+    }
+});
+process.stdin.on('end', () => process.exit(0));
+console.error('MeshSig MCP Server started — waiting for JSON-RPC messages on stdin');
+//# sourceMappingURL=mcp-server.js.map

package/dist/mcp-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server.js","sourceRoot":"","sources":["../src/mcp-server.ts"],"names":[],"mappings":";AACA,+EAA+E;AAC/E,0DAA0D;AAC1D,EAAE;AACF,iEAAiE;AACjE,qEAAqE;AACrE,EAAE;AACF,SAAS;AACT,6DAA6D;AAC7D,oDAAoD;AACpD,EAAE;AACF,gEAAgE;AAChE,MAAM;AACN,sBAAsB;AACtB,qBAAqB;AACrB,4BAA4B;AAC5B,kCAAkC;AAClC,UAAU;AACV,QAAQ;AACR,MAAM;AACN,+EAA+E;AAE/E,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACrG,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7E,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;AACnD,MAAM,aAAa,GAAG,OAAO,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;AAC5D,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,uBAAuB,CAAC;AAE7E,SAAS,SAAS;IAChB,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,YAAY;IACnB,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC;AAC1D,CAAC;AAWD,SAAS,YAAY,CAAC,EAAmB,EAAE,MAAW;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,SAAS,CAAC,EAAmB,EAAE,IAAY,EAAE,OAAe;IACnE,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAC7E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc,EAAE,MAAW;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,+EAA+E;AAE/E,MAAM,KAAK,GAAG;IACZ;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,sKAAsK;QACnL,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,2CAA2C,EAAE,OAAO,EAAE,KAAK,EAAE;aACrG;SACF;KACF;IACD;QACE,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,gJAAgJ;QAC7J,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qBAAqB,EAAE;aAChE;YACD,QAAQ,EAAE,CAAC,SAAS,CAAC;SACtB;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,+JAA+J;QAC5K,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sCAAsC,EAAE;gBAChF,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,sCAAsC,EAAE;gBAClF,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,yDAAyD,EAAE;aACnG;YACD,QAAQ,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC;SAC7C;KACF;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,sGAAsG;QACnH,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;KAChD;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,0HAA0H;QACvI,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE,OAAO,EAAE,uBAAuB,EAAE;aAChG;SACF;KACF;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,2KAA2K;QACxL,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE,OAAO,EAAE,uBAAuB,EAAE;aAChG;SACF;KACF;IACD;QACE,IAAI,EAAE,eAAe;QACrB,WAAW,EAAE,sFAAsF;QACnG,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE,OAAO,EAAE,uBAAuB,EAAE;aAChG;SACF;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,4GAA4G;QACzH,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+CAA+C,EAAE;gBACrF,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uBAAuB,EAAE,OAAO,EAAE,aAAa,EAAE;gBACxF,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE,OAAO,EAAE,uBAAuB,EAAE;aAChG;YACD,QAAQ,EAAE,CAAC,KAAK,CAAC;SAClB;KACF;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,8DAA8D;QAC3E,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,oBAAoB,EAAE,OAAO,EAAE,uBAAuB,EAAE;aAChG;SACF;KACF;CACF,CAAC;AAEF,+EAA+E;AAE/E,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,IAAS;IAC/C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,SAAS,EAAE,CAAC;YACZ,IAAI,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC7C,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;gBAChC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,kCAAkC,QAAQ,CAAC,GAAG,iBAAiB,QAAQ,CAAC,SAAS,iCAAiC,EAAE,CAAC,EAAE,CAAC;YACnK,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAC1C,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAChE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,8BAA8B,QAAQ,CAAC,GAAG,iBAAiB,QAAQ,CAAC,SAAS,gBAAgB,aAAa,yDAAyD,EAAE,CAAC,EAAE,CAAC;QACpN,CAAC;QAED,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;YAChC,IAAI,CAAC,QAAQ;gBAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,4CAA4C,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACzH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;YAChE,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACtD,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI;4BACzD,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;yBACnE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACnB,CAAC;QAED,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,IAAI,KAAc,CAAC;YACnB,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,KAAK,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACzE,CAAC;iBAAM,CAAC;gBACN,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAClE,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK;4BAC5C,CAAC,CAAC,8BAA8B,IAAI,CAAC,MAAM,EAAE;4BAC7C,CAAC,CAAC,gCAAgC,IAAI,CAAC,MAAM,8DAA8D;qBAC5G,CAAC,EAAE,CAAC;QACP,CAAC;QAED,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;YAChC,IAAI,CAAC,QAAQ;gBAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,4CAA4C,EAAE,CAAC,EAAE,CAAC;YAC1G,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACtD,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS;yBAChF,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACnB,CAAC;QAED,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,cAAc,CAAC;YAC7C,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,SAAS,CAAC,CAAC;gBAC5C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAS,CAAC;gBACrC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAC9E,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,uCAAuC,MAAM,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAAC,CAAC;QAC3H,CAAC;QAED,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,cAAc,CAAC;YAC7C,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,eAAe,CAAC,CAAC;gBAClD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC9B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAC9E,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,uCAAuC,MAAM,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAAC,CAAC;QAC3H,CAAC;QAED,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,cAAc,CAAC;YAC7C,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,QAAQ,CAAC,CAAC;gBAC3C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC9B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAC9E,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,uCAAuC,MAAM,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAAC,CAAC;QAC3H,CAAC;QAED,KAAK,gBAAgB,CAAC,CAAC,CAAC;YACtB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,cAAc,CAAC;YAC7C,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,gBAAgB,EAAE;oBACjD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,aAAa,EAAE,CAAC;iBAC9E,CAAC,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC9B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAC9E,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,uCAAuC,MAAM,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAAC,CAAC;QAC3H,CAAC;QAED,KAAK,iBAAiB,CAAC,CAAC,CAAC;YACvB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,cAAc,CAAC;YAC7C,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,UAAU,CAAC,CAAC;gBAC7C,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC9B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAC9E,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,uCAAuC,MAAM,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAAC,CAAC;QAC3H,CAAC;QAED;YACE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,IAAI,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACzF,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E,KAAK,UAAU,aAAa,CAAC,GAAmB;IAC9C,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACnB,KAAK,YAAY;YACf,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE;gBACnB,eAAe,EAAE,YAAY;gBAC7B,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC3B,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE;aAClD,CAAC,CAAC;YACH,MAAM;QAER,KAAK,2BAA2B;YAC9B,MAAM;QAER,KAAK,YAAY;YACf,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YACvC,MAAM;QAER,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;YAC7C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;gBAClD,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE;oBACnB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;oBAC1D,OAAO,EAAE,IAAI;iBACd,CAAC,CAAC;YACL,CAAC;YACD,MAAM;QACR,CAAC;QAED;YACE,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;gBACzB,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,qBAAqB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/D,CAAC;IACL,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E,IAAI,MAAM,GAAG,EAAE,CAAC;AAEhB,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;AACnC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;IACzC,MAAM,IAAI,KAAK,CAAC;IAChB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAE3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChC,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;gBAC7B,OAAO,CAAC,KAAK,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;YAC3C,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAE/C,OAAO,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAC"}

package/package.json

@@ -1,17 +1,20 @@
 {
   "name": "meshsig",
-  "version": "0.6.0",
-  "description": "Cryptographic security layer for AI agents. Ed25519 identity, signed messages, trust scoring.",
+  "version": "0.7.1",
+  "description": "Cryptographic security layer for AI agents. Ed25519 identity, signed messages, trust scoring. Works with LangChain, CrewAI, AutoGen, OpenClaw, or any agent framework.",
   "main": "dist/index.js",
   "type": "module",
   "bin": {
-    "meshsig": "dist/main.js"
+    "meshsig": "dist/main.js",
+    "meshsig-mcp": "dist/mcp-server.js"
   },
   "license": "MIT",
   "keywords": [
     "ai-agents", "cryptography", "ed25519", "digital-signatures",
-    "identity", "did", "security", "trust", "openclaw", "mesh",
-    "agent-security", "w3c-did", "audit", "compliance"
+    "identity", "did", "security", "trust", "mesh",
+    "agent-security", "w3c-did", "audit", "compliance", "mcp",
+    "model-context-protocol", "langchain", "crewai", "autogen",
+    "openclaw", "llm-agents", "agent-framework"
   ],
   "repository": {
     "type": "git",