Cyphrex

io.github.getcyphrexPublished by GitHub account getcyphrexv0.3.0Updated Oct 29, 2026

Checks AI agent actions before they run. Signed, RFC 3161 timestamped evidence for audits.

VerifiedStreamable HTTPWeb executableDeveloper ToolsSecurity & MonitoringAI & ML

Overview

AI-generated overview

Cyphrex lets an assistant register AI agents, pre-check proposed actions, log what ran, and keep signed, timestamped audit evidence.

What you can do
  • Register and verify agents, and set their behavior profiles
  • Run a policy check on a proposed action before it executes, and log actions that were executed
  • Retrieve an agent's audit log
  • Scan upstream MCP tools/list payloads for threats and diff tool snapshots, and scan tools/call results for PII, injection and volume anomalies
  • Proxy JSON-RPC tools/list or tools/call requests to an upstream MCP server, enforcing threat policy before results are returned
  • Run a public AIUC-1 readiness self-check, and verify records or export bundles for signatures, timestamps, hash chains and file hashes
When to use it
Useful when an assistant drives autonomous agents and you want a gate before actions run, an audit trail of what happened, and verifiable evidence for reviews or compliance checks. Also relevant if you route MCP traffic through a scanning proxy or need to check AIUC-1 readiness.
Requirements
Remote streamable HTTP endpoint; no local package. Requires a Cyphrex API key sent in the Authorization header as a bearer token. The AIUC-1 gap check and record verification are described as usable without an API key.
Before you install
The API key is a live credential passed in the Authorization header; keep it out of logs and shared configs. Logging and proxying send agent actions and upstream tool results to Cyphrex, so review what data leaves your environment. The AIUC-1 self-check is not a certification and is not affiliated with or endorsed by AIUC.

Installation

In SourceWeft

  1. Open Cyphrex in the dashboard and add it to a workspace.
  2. Connect Authorization token credentials. They are stored privately and never shown on public pages.
  3. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.getcyphrex%2Fcyphrex-mcp/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "cyphrex": {
      "type": "http",
      "url": "https://mcp.cyphrex.io/mcp",
      "headers": {
        "Authorization": "Bearer <YOUR_TOKEN>"
      }
    }
  }
}

README

This repository has no README.

Tools

11

register_agent

Register a new Cyphrex agent

Parametersnamerequiredtyperequireddescriptionrequired

check_action

Run Cyphrex check on a proposed action

ParametersactionrequiredagentIdrequired

log_action

Log an executed action for a Cyphrex agent

ParametersactionrequiredagentIdrequiredmetadata

get_audit_log

Get Cyphrex audit log for an agent

ParameterslimitagentIdrequired

set_behavior_profile

Set behavior profile for an agent

ParametersagentIdrequiredprofilerequired

verify_agent

Fetch/verify agent details

ParametersagentIdrequired

scan_mcp_tools_list

Scan an upstream MCP tools/list payload for threats and diff tool snapshots

ParameterstoolsrequiredagentIdrequiredserverUrlrequired

scan_mcp_tool_result

Scan an upstream MCP tools/call result for PII, injection, and volume anomalies

ParametersresultrequiredagentIdrequiredtoolNamerequiredserverUrl

proxy_mcp_request

Proxy a JSON-RPC tools/list or tools/call request to an upstream MCP server. Cyphrex enforces threat policy before the caller receives the upstream result.

ParametersagentIdrequiredmessagerequiredupstreamUrlrequiredupstreamSessionIdupstreamAuthorization

run_aiuc1_gap_check

Public AIUC-1 readiness self-check. No API key. AIUC-1 readiness self-check. Not certification, and not affiliated with or endorsed by AIUC.

Parametersemailanswersrequiredsend_resultsmarketing_opt_in

verify_record

Check a record or export bundle. Reports the signature, a public timestamp when one is present, and an RFC 3161 timestamp valid when a token is attached. A record also reports its hash chain. A bundle reports file_hashes against the manifest. Each part is pass, fail, not_present, or not_checked. A signature that verifies only with a caller-supplied key that is not Cyphrex's is pass_supplied_key. No API key.

Parametersrecordbundle_base64public_key_pem

Version history

2
  1. v0.3.0LatestOct 29, 2026
  2. v0.2.1Sep 16, 2026

Score

75% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • License10 pts

    Declare a license in the repository or the registry entry.