
Provenonce
io.github.jarekpiotPublished by GitHub account jarekpiotv1.1.4Updated Oct 28, 2026
Cryptographic identity, SIGIL naming, heartbeat, and passports for AI agents.
Overview
Gives an AI agent a cryptographic identity, SIGIL tier, heartbeat liveness proofs and a signed passport, plus tools to verify other agents.
- What you can do
- Register an agent and read its current state, balance and hints
- Buy a SIGIL and submit single or batch heartbeats, paid in SOL
- Fetch a signed passport and compute or submit beats work proofs
- Verify another agent's identity and retrieve an agent's full lineage
- Spawn child agents under the registered identity
- When to use it
- Useful when you want an agent to carry a verifiable, persistent identity that other parties can check offline, or when you need to verify a counterparty agent before trusting it. Not needed for ordinary tool use that does not involve agent identity or provenance.
- Requirements
- Runs locally over stdio via npx from the npm package @provenonce/mcp, so Node.js is needed. Registration creates credentials stored in a config file under the home directory, or supplied through the PROVENONCE_API_KEY and PROVENONCE_AGENT_HASH environment variables. SIGIL purchase and heartbeats require Solana payments; an optional PROVENONCE_SKILL_REF token enables partner revenue share, and PROVENONCE_REGISTRY_URL overrides the registry endpoint.
Installation
In SourceWeft
- Open Provenonce in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
@provenonce/mcp
Provenonce Skill — Give any AI agent cryptographic identity in under 60 seconds.
Add this skill to your agent and it gets:
- A permanent cryptographic hash (identity)
- A SIGIL (verified identity class + tier)
- A signed Passport (verifiable offline by any third party)
- Heartbeat (continuous liveness proof)
- Beats proofs (evidence of computational work)
- Lineage (full ancestry chain)
Quick Start
Claude Desktop / Claude Code
Add to ~/.claude/claude_desktop_config.json:
That's it. On first use, your agent calls provenonce_register and gets a permanent identity.
With pre-existing credentials
As a skill developer (earn rev share)
If you're a developer embedding this skill in your framework, include your partner ref token:
You earn 30% of every SIGIL purchased by agents you deploy. Register at POST /api/v1/skill/register.
The 11 Tools
Usage Examples
Example 1: Register and check status
User prompt: "Register with Provenonce and show me my identity."
Expected behavior:
- Agent calls
provenonce_registerwith an optional name - Receives a permanent cryptographic hash (e.g.
0xabcd...) and API key - Credentials are saved to
~/.provenonce/config.json - Agent calls
provenonce_statusto display identity, balance, and next steps - Status response includes a
_hintsuggesting the agent purchase a SIGIL
Example 2: Verify another agent before trusting it
User prompt: "Check if agent 0xf7dad8f4...b6fd is legitimate."
Expected behavior:
- Agent calls
provenonce_verify_agentwith the target hash - Returns the agent's SIGIL, identity class, tier, registration date, and liveness score
- Agent reports whether the target has an active SIGIL and recent heartbeats
- No authentication needed — this is a public verification endpoint
Example 3: Full lifecycle — SIGIL, heartbeat, and passport
User prompt: "Get me a SIGIL, send a heartbeat, and export my passport."
Expected behavior:
- Agent calls
provenonce_purchase_sigilwithoutpayment_txto get fee instructions (amount in SOL + ops wallet address) - User sends the SOL payment and provides the transaction signature
- Agent calls
provenonce_purchase_sigilagain with thepayment_txto complete the purchase - Agent calls
provenonce_heartbeat(same payment flow) to prove liveness - Agent calls
provenonce_get_passportto receive a cryptographically signed identity document - Passport can be verified offline by any third party using the Provenonce authority public key
Agent Flow
Environment Variables
Framework-Agnostic Usage
Credential Storage
Credentials are stored in ~/.provenonce/config.json with chmod 600 permissions (Unix).
On Windows, use environment variables (PROVENONCE_API_KEY + PROVENONCE_AGENT_HASH) — file permissions are not enforced.
Privacy Policy
Provenonce collects the minimum data necessary to provide cryptographic identity services:
- Data collected: Agent name (optional), cryptographic hash (generated), API key, SIGIL metadata, heartbeat timestamps, and Solana transaction signatures for payments.
- How data is used: To maintain the agent identity registry, verify agent liveness, and issue signed passports. No data is sold to third parties.
- Storage: Agent state is stored in Supabase (PostgreSQL). Tamper-proof timestamps are anchored on the Solana blockchain as SPL Memo transactions.
- Third-party sharing: On-chain memos (registration, SIGIL) are publicly visible on Solana. No other data is shared with third parties.
- Retention: Agent records persist indefinitely as part of the provenance chain. Revoked agents are marked but not deleted.
- Contact: [email protected]
Full privacy policy: provenonce.dev/legal/privacy
Support
- Documentation: provenonce.dev
- Issues: github.com/ProvenonceAI/provenonce-mcp/issues
- Email: [email protected]
What's Coming
provenonce_kyc— KYC / identity class upgrade- Auto-heartbeat timer (opt-in)
- Python SDK (
provenonce-py)
License
MIT — see LICENSE
Links
- Registry: provenonce.io
- Docs: provenonce.dev
- API: provenonce.io/openapi.yaml
Source: README.md at commit c24cac1
Tools
0Version history
1- v1.1.4LatestSep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts