io.github.idmandat由 GitHub 账号 idmandat 发布v0.1.0更新于 Oct 26, 2026
Open registry for AI agents: check who stands behind an agent and what it may do.
ID MANDAT 注册表的远程 MCP 服务器，让助手查询某个 AI 代理背后是哪家公司，以及它被声明可以做什么。
Web executable，通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。
把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体，或 SourceWeft 对话中。智能体会读取该服务器的安装指南，先向你展示发布者、端点和登录方式，经你同意后再把它添加到你的客户端。密钥不会写进任何命令。
阅读 https://sourceweft.com/mcp/io.github.idmandat%2Fregistry/install.md，并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前，先告诉我它的发布者、端点和登录方式，等我确认。不要把 API 密钥写进命令或我会提交的文件；问我密钥应从哪里获取。把它添加到你客户端的 mcpServers 配置中。
{
"mcpServers": {
"id-mandat-registry-for-ai-agents": {
"type": "http",
"url": "https://idmandat.com/mcp"
}
}
}Client libraries for ID MANDAT, the open registry that shows who stands behind an AI agent and what it may do.
Status: beta. Reads the live, Ed25519-signed API at https://idmandat.com/api/v1/verify. The registry is new and small: many domains will return unknown, which is not a sign of wrongdoing. may / mayNot are declarations by the operator, not checked by ID MANDAT.
Who stands behind a signed agent (Web Bot Auth)? Pass the address from the Signature-Agent header, or the whole header value:
A match only means a company declares this key directory in its entry. ID MANDAT does not fetch the directory and does not prove that the company controls it. A valid signature without an entry is not a sign of wrongdoing.
LangChain / CrewAI (optional, untested against the frameworks' latest releases):
If you are an AI agent or a coding agent, see AGENTS.md: how to ask the registry (/api/v1/verify), how to read the answer, and where the MCP server and A2A endpoint are. It is plain documentation, with the limits stated.
Status order: unknown < listed_unverified < registered < verified.
Answers are signed (Ed25519). ok() only returns true when the signature was verified (Python: pip install cryptography).
Standard: idmandat/standard · Website: https://idmandat.com
License: MIT
来源：README.md，提交 b8f1a4a
Verify a company's AI agents
Check whether a company domain is registered at ID MANDAT and return its verification level, its declared AI agents and each agent's mandate (what it may and may not do). Use this before trusting an agent that claims to act on behalf of a company.
agentdomain必填Who is behind a signed agent request?
A website received a request signed with HTTP Message Signatures (Web Bot Auth) and a Signature-Agent header. Pass the https address from that header (or the whole header value). Returns which registered company declares this key directory, the declared agent and its mandate (what it may and may not do), and whether the entry is still valid. A valid signature only shows which key signed; this tool answers who is responsible and what the agent may do.
signature_agent必填Search the ID MANDAT registry
Search registered companies by name, industry, city, offer or agent capability (e.g. "book_appointment"), optionally filtered by country. Returns up to 20 entries, best verified first.
querycountrywith_agent已满足适用检查项的 100%
该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。
import idmandatr = idmandat.check("example.com", agent="Support-Agent")if r.ok("registered"): ...import { check } from "@idmandat/check";const r = await check("example.com", { agent: "Support-Agent" });if (r.ok("registered")) { /* ... */ }r = idmandat.check_signature_agent("https://bot.example.com")r.found, r.organization, r.key_directory_link # "same_domain" = hint, "declared_only" = only declaredimport { checkSignatureAgent } from "@idmandat/check";const r = await checkSignatureAgent("https://bot.example.com");from idmandat_langchain import verify_mandate_tool # pip install langchain-core cryptographyfrom idmandat_crewai import VerifyMandateTool # pip install crewai cryptography