Provenonce

io.github.jarekpiot由 GitHub 账号 jarekpiot 发布v1.1.4更新于 Oct 28, 2026

Cryptographic identity, SIGIL naming, heartbeat, and passports for AI agents.

已验证STDIO仅桌面安全与监控AI 与机器学习

概览

AI 生成的概览

为 AI 代理提供加密身份、SIGIL 等级、心跳存活证明和签名护照,并可验证其他代理的身份。

可以做什么
  • 注册代理并查看当前状态、余额与提示
  • 购买 SIGIL,提交单个或批量心跳(以 SOL 支付)
  • 获取签名护照,计算或提交工作量证明
  • 验证其他代理的身份,查询代理的完整谱系
  • 在已注册身份下派生(spawn)子代理
适用场景
适合需要让代理拥有可被第三方离线核验的持久身份,或在信任对方代理前先做身份核验的场景。若只是普通工具调用、不涉及代理身份与来源证明,则没有必要安装。
运行要求
通过 npx 从 npm 包 @provenonce/mcp 以 stdio 在本地运行,需要 Node.js。注册会生成凭据并保存在用户主目录下的配置文件中,也可通过 PROVENONCE_API_KEY 与 PROVENONCE_AGENT_HASH 环境变量提供。购买 SIGIL 和发送心跳需要 Solana 付款;可选的 PROVENONCE_SKILL_REF 用于合作分成,PROVENONCE_REGISTRY_URL 可覆盖注册中心地址。
安装前请注意
注册会生成 API 密钥与代理哈希并写入本地配置文件;Windows 上不强制文件权限,建议改用环境变量。购买 SIGIL 和心跳需支付 SOL 并提供交易签名。注册、SIGIL 与时间戳备忘录在 Solana 上公开可见,代理记录会无限期保留,被撤销的代理仅做标记而不删除。代理状态存放在第三方托管数据库中。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Provenonce,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only,通过 STDIO。 STDIO 服务会启动本地进程,因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

@provenonce/mcp

Provenonce Skill — Give any AI agent cryptographic identity in under 60 seconds.

Add this skill to your agent and it gets:

  • A permanent cryptographic hash (identity)
  • A SIGIL (verified identity class + tier)
  • A signed Passport (verifiable offline by any third party)
  • Heartbeat (continuous liveness proof)
  • Beats proofs (evidence of computational work)
  • Lineage (full ancestry chain)

Quick Start

Claude Desktop / Claude Code

Add to ~/.claude/claude_desktop_config.json:

json
{  "mcpServers": {    "provenonce": {      "command": "npx",      "args": ["-y", "@provenonce/mcp"]    }  }}

That's it. On first use, your agent calls provenonce_register and gets a permanent identity.

With pre-existing credentials

json
{  "mcpServers": {    "provenonce": {      "command": "npx",      "args": ["-y", "@provenonce/mcp"],      "env": {        "PROVENONCE_API_KEY": "pvn_...",        "PROVENONCE_AGENT_HASH": "0x..."      }    }  }}

As a skill developer (earn rev share)

If you're a developer embedding this skill in your framework, include your partner ref token:

json
{  "env": {    "PROVENONCE_SKILL_REF": "your16hextoken"  }}

You earn 30% of every SIGIL purchased by agents you deploy. Register at POST /api/v1/skill/register.

The 11 Tools

ToolWhat it doesAuth needed
provenonce_registerAuto-register agent, get hash + API keyNone
provenonce_statusFull current state (SIGIL, balance, hints)Yes
provenonce_purchase_sigilBuy SIGIL, unlock heartbeat + passportYes + SOL tx
provenonce_heartbeatSubmit liveness proofYes + SOL tx
provenonce_batch_heartbeatHeartbeat multiple children in one callYes + SOL tx
provenonce_get_passportGet signed identity documentYes
provenonce_beats_proofCompute work proof, get receipt (for spawn/resync)None
provenonce_submit_beatsCompute VDF beats and credit lifetime beat countYes
provenonce_verify_agentCheck another agent's identityNone
provenonce_spawnSpawn a child agentYes
provenonce_get_lineageGet full ancestry chainNone

Usage Examples

Example 1: Register and check status

User prompt: "Register with Provenonce and show me my identity."

Expected behavior:

  • Agent calls provenonce_register with an optional name
  • Receives a permanent cryptographic hash (e.g. 0xabcd...) and API key
  • Credentials are saved to ~/.provenonce/config.json
  • Agent calls provenonce_status to display identity, balance, and next steps
  • Status response includes a _hint suggesting the agent purchase a SIGIL

Example 2: Verify another agent before trusting it

User prompt: "Check if agent 0xf7dad8f4...b6fd is legitimate."

Expected behavior:

  • Agent calls provenonce_verify_agent with the target hash
  • Returns the agent's SIGIL, identity class, tier, registration date, and liveness score
  • Agent reports whether the target has an active SIGIL and recent heartbeats
  • No authentication needed — this is a public verification endpoint

Example 3: Full lifecycle — SIGIL, heartbeat, and passport

User prompt: "Get me a SIGIL, send a heartbeat, and export my passport."

Expected behavior:

  • Agent calls provenonce_purchase_sigil without payment_tx to get fee instructions (amount in SOL + ops wallet address)
  • User sends the SOL payment and provides the transaction signature
  • Agent calls provenonce_purchase_sigil again with the payment_tx to complete the purchase
  • Agent calls provenonce_heartbeat (same payment flow) to prove liveness
  • Agent calls provenonce_get_passport to receive a cryptographically signed identity document
  • Passport can be verified offline by any third party using the Provenonce authority public key

Agent Flow

Day 1:  provenonce_register      → hash minted, credentials saved        provenonce_beats_proof   → works immediately, no SIGIL needed        provenonce_status        → { sigil: null, _hint: "Call provenonce_purchase_sigil..." }
Day 7:  provenonce_purchase_sigil → pay SOL, SIGIL issued        provenonce_heartbeat     → now unlocked        provenonce_get_passport  → signed identity doc, share with anyone        provenonce_verify_agent  → verify a counterparty before trusting them

Environment Variables

VariableDescriptionDefault
PROVENONCE_API_KEYAgent API key (pvn_...)Read from ~/.provenonce/config.json
PROVENONCE_AGENT_HASHAgent hash (0x...)Read from ~/.provenonce/config.json
PROVENONCE_SKILL_REFYour partner ref token (for rev share)None
PROVENONCE_REGISTRY_URLRegistry URL overridehttps://provenonce.io

Framework-Agnostic Usage

typescript
import { PROVENONCE_TOOLS } from '@provenonce/mcp/tools';
// OpenAIconst tools = PROVENONCE_TOOLS.map(t => ({ type: 'function', function: t }));
// LangChain / custom — use PROVENONCE_TOOLS for schema, implement handlers yourself

Credential Storage

Credentials are stored in ~/.provenonce/config.json with chmod 600 permissions (Unix).

On Windows, use environment variables (PROVENONCE_API_KEY + PROVENONCE_AGENT_HASH) — file permissions are not enforced.

Privacy Policy

Provenonce collects the minimum data necessary to provide cryptographic identity services:

  • Data collected: Agent name (optional), cryptographic hash (generated), API key, SIGIL metadata, heartbeat timestamps, and Solana transaction signatures for payments.
  • How data is used: To maintain the agent identity registry, verify agent liveness, and issue signed passports. No data is sold to third parties.
  • Storage: Agent state is stored in Supabase (PostgreSQL). Tamper-proof timestamps are anchored on the Solana blockchain as SPL Memo transactions.
  • Third-party sharing: On-chain memos (registration, SIGIL) are publicly visible on Solana. No other data is shared with third parties.
  • Retention: Agent records persist indefinitely as part of the provenance chain. Revoked agents are marked but not deleted.
  • Contact: [email protected]

Full privacy policy: provenonce.dev/legal/privacy

Support

What's Coming

  • provenonce_kyc — KYC / identity class upgrade
  • Auto-heartbeat timer (opt-in)
  • Python SDK (provenonce-py)

License

MIT — see LICENSE

Links

来源:README.md,提交 c24cac1

工具

0
SourceWeft 尚未在沙箱中启动过该软件包,因此其工具未知。

版本历史

1
  1. v1.1.4最新Sep 16, 2026

评分

已满足适用检查项的 50%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手;SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头,或保持端点能够响应探测,以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list,或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分