RealAgent MCP

io.github.RedDateTechPublished by GitHub account RedDateTechv0.4.0Updated Oct 24, 2026

AI agent real-name identity: SM2 keypair, QR real-name link, SD-JWT VP generate/verify.

VerifiedSTDIODesktop onlyDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

A local MCP server that gives an AI agent a real-name identity: SM2 key pairs, QR-code identity linking, and SD-JWT verifiable presentations.

What you can do
Link, check and revoke a real-name identity, including generating a QR code and claiming a credential after scanning, and querying identity status and info. Generate, verify and parse SD-JWT verifiable presentations with selective disclosure. Query local credentials and key pairs, including credential summaries, raw credential data and SM2 key fingerprints. Sign, verify, encrypt and decrypt data with SM2. Check whether a newer server version is available.
When to use it
Useful when an agent needs a verifiable real-name identity, needs to issue or check SD-JWT verifiable presentations, or needs SM2 signing and encryption operations performed locally.
Requirements
Runs as a local process over stdio; requires Node.js 18.13 or newer with npm and npx, and the package installed globally. Each agent needs a unique agent-id passed as a command-line argument; data is stored under .realagent/agents/ in the working directory unless a data directory is set. Real-name linking requires scanning a QR code with a user device.
Before you install
The server holds and uses private keys and credentials locally, encrypted with SM4; the raw credential tool exposes credential contents. Signing, encryption, identity linking and revocation act on real identity material, and revocation invalidates credentials. Reusing an agent-id across agents causes identity conflicts. The server checks for and applies version updates.

Installation

In SourceWeft

  1. Open RealAgent MCP in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

realagent-mcp

国信智能体实名关联服务 MCP Server — 单个可执行文件 · 本地通信 · 国密加密 · 全平台支持。

为 AI Agent 提供 SM2 实名身份关联、SD-JWT 可验证证明(VP)生成与验证、SM2 密码学操作等能力。

安装

bash
npm i -g realagent-mcp

必须全局安装(-g)。这样 realagent-mcp 会进入 PATH,MCP 配置里的 npx realagent-mcp 才会命中全局副本,而不会每次都往 _npx 缓存里再拉一份 (即避免依赖重复与 npx 旧缓存问题)。

配置 MCP Client(--agent-id 必填,每个 Agent 使用唯一名称):

json
{  "mcpServers": {    "realagent-mcp": {      "command": "npx",      "args": ["-y", "realagent-mcp", "stdio", "--agent-id", "my-agent"]    }  }}

升级

bash
npm update -g realagent-mcp# 或npm i -g realagent-mcp@latest

升级后重启 MCP Client 即可。Agent 会在每次对话开始时自动调用 system_update 检查新版本。

功能

  • SM2 密钥对生成 — 国密 SM2 签名/验签/加解密
  • 实名关联 — 生成二维码 → 扫码认证 → 自动领取 VC
  • VP 生成/验证 — SD-JWT 可验证证明,W3C VC Data Model v2
  • SM4 加密存储 — 私钥和 VC 使用 SM4-CTR+SM3-HMAC 本地加密
  • 自动更新 — 内置版本检查 + system_update 工具

Tools

MCP Server 运行时动态暴露以下 14 个工具:

实名身份关联

工具说明
identity_link发起实名关联:生成二维码,用户扫码认证后自动领取实名凭证(VC)
identity_status查询当前 Agent 的实名关联状态与身份信息
identity_revoke注销实名关联并作废凭证

可验证证明(VP)

工具说明
identity_vp生成 SD-JWT 可验证证明(VP),支持选择性披露字段
identity_verify_vp验证 VP 的签名与披露内容
vp_parse解析 VP 结构,提取披露的声明字段

凭证与密钥查询

工具说明
vc_info查询本地已领取的可验证凭证(VC)摘要信息
vc_raw获取 VC 原始数据
key_info查询本地 SM2 密钥对与指纹信息

国密运算

工具说明
crypto_sign使用 SM2 私钥对数据签名
crypto_verify验证 SM2 签名
crypto_encryptSM2 加密数据
crypto_decryptSM2 解密数据

系统

工具说明
system_update检查 MCP Server 是否有新版本

AGENT INSTRUCTIONS

以下内容供 AI Agent 读取,用于自动完成安装和配置。

  1. Prerequisite — verify Node.js (do this FIRST, before installing). realagent-mcp requires Node.js >= 18.13 (npm and npx are bundled with it). Before installing, check the environment:

    • Run node --version and npm --version. If both succeed and node --version reports >= v18.13, skip to step 2.
    • If node/npm is not found (no Node.js) or the version is older than 18.13, stop and help the user set it up before going further:
    • After installing/upgrading, have the user restart the terminal and MCP client, then re-verify with node --version, npm --version, and npx --version. Only proceed to step 2 once all three succeed and Node >= 18.13 is confirmed.
  2. Install via npm (global, so realagent-mcp is on PATH):

    npm i -g realagent-mcp
  3. MCP client config — Each agent MUST have a unique --agent-id. One agent-id = one identity = one SM2 key pair. Never reuse an agent-id across agents. The realagent platform registers each key pair as a separate identity; shared agent-id causes identity conflicts.

    Generate an agent-id yourself, using a descriptive name based on the current project or the agent's purpose (e.g. "my-claude-code", "frontend-dev-helper", "pr-review-bot"). Use lowercase letters, digits and hyphens only. Then ASK the user to confirm before using it:

    I'll configure realagent-mcp with agent-id: <name>. This name will be used to derive your unique SM2 identity. Is that OK? You can change it to any name you prefer.

    Once confirmed, write this MCP config:

    json
    {  "mcpServers": {    "realagent-mcp": {      "command": "npx",      "args": [        "-y",        "realagent-mcp",        "stdio",        "--agent-id",        "<confirmed-name>"      ]    }  }}

    Data is stored under .realagent/agents/ in the working directory. Add --data-dir to customize the path.

  4. Restart the MCP client. The server exposes 14 tools (5 identity + 4 key/VC

    • 4 crypto + 1 system). Start with identity_status.
  5. Version check — Call system_update at the start of each conversation (or at least once per day). When an update is available, tell the user and help them run npm update -g realagent-mcp or npm i -g realagent-mcp@latest. Only skip the version check if the user explicitly asks you to.

Source: README.md at commit d6d5eed

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

2
  1. v0.4.0LatestSep 22, 2026
  2. v0.3.2Sep 16, 2026

Score

40% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.