Issues and verifies signed, hash-chained, timestamped provenance receipts for autonomous-agent actions, giving an assistant a tamper-evident audit trail.
What you can do
Issue a signed, content-hashed, server-timestamped receipt for an agent action, chained to that agent's prior receipts; raw inputs and outputs are hashed, not stored raw per the tool description. Verify a receipt by id or full object, recomputing the content hash, confirming the id commits to the body, and checking the ed25519 signature. List an agent's receipt hash-chain newest first for auditing everything that agent has attested.
When to use it
Use when you need an auditable, tamper-evident record of what an autonomous agent did, or when you want to check that a receipt presented to you is authentic and unaltered.
Requirements
A remote streamable HTTP endpoint; no packages, environment variables or headers are declared. No authentication is declared.
Before you install
Issuing receipts writes records to a third-party service; the tool description says raw inputs and outputs are hashed rather than stored raw, but confirm this before passing sensitive data. No authentication is declared, so consider who can issue or list receipts for an agent_id.
Enable the server for the chats that should use its tools.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Use with an agent
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/com.dropwatchhq%2Fagent-receipts/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.
Mint a verifiable provenance receipt for an autonomous-agent action. Returns a signed (ed25519), content-hashed (SHA-256), server-timestamped receipt that is hash-chained to this agent's prior receipts (tamper-evident audit trail). Pass the raw inputs/outputs (we hash them — raw data is never stored) OR pre-computed sha256 hashes. Use for compliance, audit trails, and dispute resolution of agentic actions. PAID: $0.01 USDC/call via x402.
Verify a receipt by id (or by passing the full receipt object). Recomputes the content hash, confirms the id commits to the body, and checks the ed25519 signature. Returns the verification checks plus the provenance record (action, agent, input/output hashes, timestamp, chain position). FREE.
Parametersidreceipt
list_receipts
List the receipt hash-chain for an agent_id, newest first (id, action, timestamp, sequence, hashes, verifyUrl). Use to audit everything a given agent has attested. FREE.
Parameterslimitagent_idrequired
Version history
1
v1.0.1LatestSep 16, 2026
Score
72%
72% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
Reached in the last 30 daysRequired25 pts
Auth declaredRequired10 pts
Tools listedRequired15 pts
DescriptionRequired15 pts
Logo10 pts
Publish an icon in the registry entry.
Documentation15 pts
Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.
LicenseNot applicable
A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.