Provenonce

io.github.ProvenonceAIPublished by GitHub account ProvenonceAIv1.1.5Updated Oct 24, 2026

Cryptographic identity, SIGIL naming, heartbeat, and passports for AI agents.

VerifiedSTDIODesktop onlyFinanceSecurity & Monitoring

Overview

AI-generated overview

A local MCP server that gives an AI agent a cryptographic identity, SIGIL tier, signed passport, heartbeats and lineage on the Provenonce registry.

What you can do
Register an agent and read its identity state, balance and hints, with credentials saved locally or supplied by environment variable. Purchase a SIGIL and submit single or batch heartbeats, each requiring a Solana payment transaction. Retrieve a signed passport and compute or submit beats proofs for work evidence. Verify another agent's identity, SIGIL class, tier and liveness without authentication. Spawn child agents and read the full ancestry chain.
When to use it
Use it when you want an agent to carry a verifiable, registry-backed identity that other parties can check, or when you need to verify a counterparty agent before trusting it. It suits provenance, liveness and lineage tracking rather than general task automation.
Requirements
Runs locally over stdio, typically launched with npx from the npm package, so Node.js is needed. Registration needs no credentials; other tools need an API key and agent hash, read from a local config file or the PROVENONCE_API_KEY and PROVENONCE_AGENT_HASH variables. SIGIL purchase and heartbeats require Solana payments. Network access to the Provenonce registry is required.
Before you install
Several tools spend money: purchasing a SIGIL and sending heartbeats require SOL payments, and the agent may initiate the purchase flow. Registration creates and stores an API key in a local config file, which is not permission-protected on Windows. Registration, SIGIL and timestamp data are written to a third-party registry and anchored publicly on the Solana blockchain, and records persist indefinitely even after revocation.

Installation

In SourceWeft

  1. Open Provenonce in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

@provenonce/mcp

Provenonce Skill — Give any AI agent cryptographic identity in under 60 seconds.

Add this skill to your agent and it gets:

  • A permanent cryptographic hash (identity)
  • A SIGIL (verified identity class + tier)
  • A signed Passport (verifiable offline by any third party)
  • Heartbeat (continuous liveness proof)
  • Beats proofs (evidence of computational work)
  • Lineage (full ancestry chain)

Quick Start

Claude Desktop / Claude Code

Add to ~/.claude/claude_desktop_config.json:

json
{  "mcpServers": {    "provenonce": {      "command": "npx",      "args": ["-y", "@provenonce/mcp"]    }  }}

That's it. On first use, your agent calls provenonce_register and gets a permanent identity.

With pre-existing credentials

json
{  "mcpServers": {    "provenonce": {      "command": "npx",      "args": ["-y", "@provenonce/mcp"],      "env": {        "PROVENONCE_API_KEY": "pvn_...",        "PROVENONCE_AGENT_HASH": "0x..."      }    }  }}

As a skill developer (earn rev share)

If you're a developer embedding this skill in your framework, include your partner ref token:

json
{  "env": {    "PROVENONCE_SKILL_REF": "your16hextoken"  }}

You earn 30% of every SIGIL purchased by agents you deploy. Register at POST /api/v1/skill/register.

The 11 Tools

ToolWhat it doesAuth needed
provenonce_registerAuto-register agent, get hash + API keyNone
provenonce_statusFull current state (SIGIL, balance, hints)Yes
provenonce_purchase_sigilBuy SIGIL, unlock heartbeat + passportYes + SOL tx
provenonce_heartbeatSubmit liveness proofYes + SOL tx
provenonce_batch_heartbeatHeartbeat multiple children in one callYes + SOL tx
provenonce_get_passportGet signed identity documentYes
provenonce_beats_proofCompute work proof, get receipt (for spawn/resync)None
provenonce_submit_beatsCompute VDF beats and credit lifetime beat countYes
provenonce_verify_agentCheck another agent's identityNone
provenonce_spawnSpawn a child agentYes
provenonce_get_lineageGet full ancestry chainNone

Usage Examples

Example 1: Register and check status

User prompt: "Register with Provenonce and show me my identity."

Expected behavior:

  • Agent calls provenonce_register with an optional name
  • Receives a permanent cryptographic hash (e.g. 0xabcd...) and API key
  • Credentials are saved to ~/.provenonce/config.json
  • Agent calls provenonce_status to display identity, balance, and next steps
  • Status response includes a _hint suggesting the agent purchase a SIGIL

Example 2: Verify another agent before trusting it

User prompt: "Check if agent 0xf7dad8f4...b6fd is legitimate."

Expected behavior:

  • Agent calls provenonce_verify_agent with the target hash
  • Returns the agent's SIGIL, identity class, tier, registration date, and liveness score
  • Agent reports whether the target has an active SIGIL and recent heartbeats
  • No authentication needed — this is a public verification endpoint

Example 3: Full lifecycle — SIGIL, heartbeat, and passport

User prompt: "Get me a SIGIL, send a heartbeat, and export my passport."

Expected behavior:

  • Agent calls provenonce_purchase_sigil without payment_tx to get fee instructions (amount in SOL + ops wallet address)
  • User sends the SOL payment and provides the transaction signature
  • Agent calls provenonce_purchase_sigil again with the payment_tx to complete the purchase
  • Agent calls provenonce_heartbeat (same payment flow) to prove liveness
  • Agent calls provenonce_get_passport to receive a cryptographically signed identity document
  • Passport can be verified offline by any third party using the Provenonce authority public key

Agent Flow

Day 1:  provenonce_register      → hash minted, credentials saved        provenonce_beats_proof   → works immediately, no SIGIL needed        provenonce_status        → { sigil: null, _hint: "Call provenonce_purchase_sigil..." }
Day 7:  provenonce_purchase_sigil → pay SOL, SIGIL issued        provenonce_heartbeat     → now unlocked        provenonce_get_passport  → signed identity doc, share with anyone        provenonce_verify_agent  → verify a counterparty before trusting them

Environment Variables

VariableDescriptionDefault
PROVENONCE_API_KEYAgent API key (pvn_...)Read from ~/.provenonce/config.json
PROVENONCE_AGENT_HASHAgent hash (0x...)Read from ~/.provenonce/config.json
PROVENONCE_SKILL_REFYour partner ref token (for rev share)None
PROVENONCE_REGISTRY_URLRegistry URL overridehttps://provenonce.io

Framework-Agnostic Usage

typescript
import { PROVENONCE_TOOLS } from '@provenonce/mcp/tools';
// OpenAIconst tools = PROVENONCE_TOOLS.map(t => ({ type: 'function', function: t }));
// LangChain / custom — use PROVENONCE_TOOLS for schema, implement handlers yourself

Credential Storage

Credentials are stored in ~/.provenonce/config.json with chmod 600 permissions (Unix).

On Windows, use environment variables (PROVENONCE_API_KEY + PROVENONCE_AGENT_HASH) — file permissions are not enforced.

Privacy Policy

Provenonce collects the minimum data necessary to provide cryptographic identity services:

  • Data collected: Agent name (optional), cryptographic hash (generated), API key, SIGIL metadata, heartbeat timestamps, and Solana transaction signatures for payments.
  • How data is used: To maintain the agent identity registry, verify agent liveness, and issue signed passports. No data is sold to third parties.
  • Storage: Agent state is stored in Supabase (PostgreSQL). Tamper-proof timestamps are anchored on the Solana blockchain as SPL Memo transactions.
  • Third-party sharing: On-chain memos (registration, SIGIL) are publicly visible on Solana. No other data is shared with third parties.
  • Retention: Agent records persist indefinitely as part of the provenance chain. Revoked agents are marked but not deleted.
  • Contact: [email protected]

Full privacy policy: provenonce.dev/legal/privacy

Support

What's Coming

  • provenonce_kyc — KYC / identity class upgrade
  • Auto-heartbeat timer (opt-in)
  • Python SDK (provenonce-py)

License

MIT — see LICENSE

Links

Source: README.md at commit c24cac1

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v1.1.5LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts