Agent Surety

io.github.jdhart81Published by GitHub account jdhart81v0.2.0Updated Nov 9, 2026

Counterparty risk transfer for the agent economy: agents post bonds behind their promises, wronged c

The publisher's own server: Energyai

VerifiedStreamable HTTPWeb executableFinanceSecurity & Monitoring

Overview

AI-generated overview

Remote MCP service for posting, pricing, claiming against and releasing surety bonds behind an agent's promises, with arbitration-gated payouts and a…

What you can do
  • Price and post bonds: underwrite a counterparty's track record into a deterministic premium quote, then post a bond with a principal and coverage window
  • Manage bond lifecycle: activate a posted bond with a funding reference, release the remaining stake after the window, and list or inspect bonds by state
  • Handle claims: file a claim against an active bond and execute an arbitration ruling that slashes the bond, capped at its available balance
  • Verify records: check the tamper-evident audit hash chain for a bond and read an agent's capabilities and input contract
When to use it
Use it when agents need to back their commitments with a stake and counterparties want a priced, auditable way to claim against broken promises. It suits agent-to-agent trust and settlement setups where arbitration rulings, not the assistant, decide payouts.
Requirements
A remote streamable HTTP endpoint; no package install, environment variables or headers are declared. The hosted service has a free tier of 10 calls per day per service, with paid options for payments, seats and SLA; the code is also Apache-2.0 and can be self-hosted from the repository.
Before you install
Bonds involve real money: posting freezes a fee (2% default) and activating links a payment-rail transaction, so calls can commit funds. Filing claims, slashing and releasing change bond state and payouts; slashing requires a ruling case id and content hash and pays at most once. The hosted service handles payment, settlement and customer data outside the open-source repo.

Installation

In SourceWeft

  1. Open Agent Surety in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.jdhart81%2Fagent-surety/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "agent-surety": {
      "type": "http",
      "url": "https://mcp.viridisconservation.com/surety/mcp"
    }
  }
}

README

Viridis Agent Fleet: open-source agents for the agent economy

Deterministic, auditable MCP agents: trust and settlement rails (identity, trust, escrow, metering, arbitration, notary, surety, provenance, covenant, offsets, compute-ledger) and priced-grade services (tax credits, GHG accounting, construction takeoff, measurement, compliance). Every core is pure Python with no LLM in the serving path, and every result is content-addressed so anyone can re-verify it.

Licensed Apache-2.0. Run any agent yourself, fork it, embed it.

Run an agent locally (free, forever)

bash
pip install -r requirements-dev.txtpython3 agent-escrow-agent/adapters/mcp_server.py          # stdio MCPpython3 run_fleet_tests.py                                 # every agent's invariant tests

Or use the hosted fleet

https://mcp.viridisconservation.com runs all agents as one managed MCP service:

Self-hosted (this repo)Hosted by Viridis
Agent logic & verification✅ identical✅ identical
Viridis-signed receipts & notary chain–✅
Shared trust/reputation network data–✅
Maintained rule packs (tax, GHG factors, regs)snapshot✅ kept current
Payments (x402, card), seats, SLA–✅

Free tier: 10 calls/day per service; the rails (identity, escrow, metering…) are free forever. Verification is always free.

For agents

Agents and LLM tools can start from llms.txt, a generated index of every agent, and AGENTS.md, the rules for using and changing the fleet.

Part of the Viridis open-source commons

Building agents for conservation or energy work? VergeCommon and EnergyAI MCP also expose MCP tools, and ViridisOS serves its decision functions to agents over MCP.

This project is one of a connected set of open tools from Viridis. Each stands on its own; together they run from field evidence to checked decisions.

Conservation commons

Verifiable science

  • Viridis Canon: machine-checked Lean 4 mathematics for ecological decisions, with a DOI for every result
  • ViridisOS: open reference runtime for DOI-backed decision modules and recomputable results
  • Viridis Research: the nightly public research record, each claim labeled by what a verifier actually checked
  • ProofLens: see what a Lean statement means before reading the proof

Agent tools

  • Viridis Agent Fleet (this repository): open-source MCP agents with deterministic, auditable cores
  • EnergyAI MCP: energy-planning estimates and incentive sources for AI agents

Browse every project on the Viridis profile. If this one is useful to you, a star helps other people find it.

Boundary

This repo contains agent cores, MCP adapters, tests, standards and self-host tooling. The hosted service layer (gateway, payment and settlement, seats, signing authority, operations, telemetry and customer data) is proprietary and is not in this repo. Please don't open PRs that add it.

"Viridis", "Viridis Conservation" and the Viridis marks are trademarks of Viridis LLC; see TRADEMARKS.md.

Source: README.md at commit 350712c

Tools

10

post_bond

Post a surety bond behind an agent's promises. principal is a positive integer in minor units; expires_at is the ISO-8601 coverage window end. The bond fee (2% default) is computed and frozen at post.

Parameterscoveragecurrencyprincipalrequiredexpires_atrequiredprincipal_agentrequired

activate_bond

Mark a POSTED bond ACTIVE (idempotent). funding_ref links the payment rail transaction that funded the stake.

Parametersbond_idrequiredfunding_ref

file_claim

File a claim against an ACTIVE bond. Claims pay out ONLY when an arbitration ruling upholds them (see slash_bond).

Parametersreasonbond_idrequiredclaimantrequiredamount_minorrequired

slash_bond

Execute an arbitration ruling against a claim. Requires the ruling's case id + content hash from agent-arbitration — no ruling, no slash; a given ruling pays at most once. Payout caps at the bond's available balance (over-claims exhaust the bond).

Parametersupheldbond_idrequiredclaim_idrequiredruling_hashrequiredruling_case_idrequired

release_bond

Release the remaining stake to the principal after the coverage window elapses — refused while any claim is still open.

Parametersbond_idrequired

bond_status

Current record for a bond (state, balances, claims, audit head).

Parametersbond_idrequired

list_bonds

List bonds, optionally filtered by state (POSTED|ACTIVE|RELEASED|EXHAUSTED).

Parametersstate

verify_audit

Validate the tamper-evident audit hash chain for a bond.

Parametersbond_idrequired

price_bond

Underwrite a surety bond: deterministic actuarial premium quote from a counterparty's track record (attestations, notarized deliveries, completed bonds lower the rate; slashes raise it or decline outright). Integer-only model uw-v1; the returned quote_hash lets any party recompute and verify the quote. Pure — never mutates bond state.

Parametersslashesattestationsduration_daysrequiredslashed_minorcoverage_minorrequiredbonds_completedsuccessful_deliveries

describe_agent

Return capabilities and input contract.

Takes no parameters.

Version history

1
  1. v0.2.0LatestSep 16, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

Other Energyaisolution integrations