HiveAttest

io.github.srotzin由 GitHub 账号 srotzin 发布v1.0.0更新于 Oct 24, 2026

Pre-action attestation perimeter for AI agents — 8 primitives, signed C18 receipt per call.

已验证Streamable HTTP可网页运行开发者工具安全与监控

概览

AI 生成的概览

HiveAttest 是一个远程 MCP 服务器，让助手用 Ed25519 签名和 Merkle 哈希为 AI 智能体的操作签发、验证并放行可验证的证明记录。

可以做什么
签发并验证行动前护照，检查签名、时效以及可选的输入哈希，并评估智能体能否通过闸门，每次允许或拒绝都附带签名回执。追加、验证保管链节点并生成 Merkle 包含证明，污点一旦标记便持续传播。在注册表中登记、校验带版本的货物类型，并获取带 Merkle 根的注册表快照用于版本固定。签发保证书、报告违约、按 ID 查询保证书，并对记录批次进行概率性二次抽检并返回签名抽检记录。构建审计窗口的排序 Merkle 树，证明并验证某事件不在窗口内，验证 SMSH-Stamp v1 回执，或返回各声明的层、规范与专利元数据。
适用场景
当你需要围绕 AI 智能体即将执行或已经执行的操作提供加密签名证据时使用：行动前授权、保管链记录、保证承诺、审计窗口的不存在性证明，或带回执的闸门决策。它适合对 HiveAttest 声明族进行评估和原型验证，而非生产环境的强制管控。
运行要求
需要远程 Streamable-HTTP 端点；使用托管连接无需本地运行时或安装包。README 另给出本地 Node.js 启动方式，通过环境变量设置后端基础地址和端口。未声明任何身份验证、API 密钥或请求头。需要能访问托管服务器及其后端的网络。
安装前请注意
README 称其为参考级实现，生产级加固被列为未来工作，因此不要依赖它做真正的强制管控。签名密钥在后端启动时生成，或由后端上的私钥环境变量加载。相关工具会签发、追加、登记和报告违约记录，会改变服务器端状态，且请求会经代理转发至第三方后端。

安装

在 SourceWeft 中

  1. 打开 控制台中的 HiveAttest，将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Web executable，通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体，或 SourceWeft 对话中。智能体会读取该服务器的安装指南，先向你展示发布者、端点和登录方式，经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/io.github.srotzin%2Fhive-mcp-attest/install.md，并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前，先告诉我它的发布者、端点和登录方式，等我确认。不要把 API 密钥写进命令或我会提交的文件；问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "hiveattest": {
      "type": "http",
      "url": "https://hive-mcp-attest.onrender.com/mcp"
    }
  }
}

README

[Hive Civilization · HiveAttest perimeter for autonomous agents]

hive-mcp-attest

HiveAttest perimeter for autonomous agents — C8/C12/C13/C15-C20

[Glama] [Status] [Release] [License]

https://hive-mcp-attest.onrender.com/mcp

Layer C — Reference Grade

This is the reference implementation of the HiveAttest claim family. Wire format is normative. Production-grade (Layer B) is a future hardened deployment.

Reference implementation of USPTO Provisional 64/055,601 — HiveAttest claims C8/C12/C13/C15-C20.

Inventor: Stephen A. Rotzin

What this is

hive-mcp-attest is a Model Context Protocol (MCP) server that exposes the complete HiveAttest perimeter as 19 tools, proxying to the live hivemorph backend.

  • Protocol: MCP 2024-11-05 over Streamable-HTTP / JSON-RPC 2.0
  • Transport: POST /mcp
  • Discovery: GET /.well-known/mcp.json
  • Health: GET /health
  • Backend: https://hivemorph.onrender.com
  • Crypto: Ed25519, RFC 8785 JCS, SHA-256 — real signatures, no mocks
  • Brand gold: #FFB800

Tools

ToolClaimDescription
attest_passport_issueC15Issue a Pre-Action Attestation Manifest (Ed25519 signed)
attest_passport_verifyC15Verify a passport manifest (signature + temporal + inputs hash)
attest_custody_appendC16Append a signed node to a custody chain (taint propagation)
attest_custody_verifyC16Verify hash linkage, signatures, and taint propagation
attest_custody_proofC16Get a Merkle inclusion proof for a custody node
attest_cargo_registerC17Register a versioned cargo type (definition_hash pinned)
attest_cargo_validateC17Validate a payload against a registered cargo schema
attest_cargo_snapshotC17Registry snapshot with Merkle root for version pinning
attest_warranty_issueC18Issue a signed warranty committing an agent to a claim
attest_warranty_breachC18Report a breach — signed breach record returned
attest_warranty_getC18Retrieve a warranty by ID
attest_gate_evaluateC19THE HEADLINE TOOL — Gate evaluation with signed C18 receipt
attest_inspect_sampleC20Probabilistic secondary inspection, signed inspection record
attest_smsh_verifyC8/C12Verify a SMSH-Stamp v1 receipt
attest_absence_buildC13Build a sorted Merkle tree for provable non-membership
attest_absence_proveC13Prove an event is absent from an audit window
attest_absence_verifyC13Verify a non-membership proof against a root
attest_meta—Return layer/spec/patent metadata for all claims

Endpoints

ToolBackend URL
attest_passport_issuePOST https://hivemorph.onrender.com/v1/attest/passport/issue
attest_passport_verifyPOST https://hivemorph.onrender.com/v1/attest/passport/verify
attest_custody_appendPOST https://hivemorph.onrender.com/v1/attest/custody/append
attest_custody_verifyPOST https://hivemorph.onrender.com/v1/attest/custody/verify
attest_custody_proofGET https://hivemorph.onrender.com/v1/attest/custody/{chain_id}/proof/{index}
attest_cargo_registerPOST https://hivemorph.onrender.com/v1/attest/cargo/register
attest_cargo_validatePOST https://hivemorph.onrender.com/v1/attest/cargo/validate
attest_cargo_snapshotGET https://hivemorph.onrender.com/v1/attest/cargo/snapshot
attest_warranty_issuePOST https://hivemorph.onrender.com/v1/attest/warranty/issue
attest_warranty_breachPOST https://hivemorph.onrender.com/v1/attest/warranty/breach
attest_warranty_getGET https://hivemorph.onrender.com/v1/attest/warranty/{id}
attest_gate_evaluatePOST https://hivemorph.onrender.com/v1/attest/gate/evaluate
attest_inspect_samplePOST https://hivemorph.onrender.com/v1/attest/inspect/sample
attest_smsh_verifyPOST https://hivemorph.onrender.com/v1/attest/smsh/verify
attest_absence_buildPOST https://hivemorph.onrender.com/v1/attest/absence/build
attest_absence_provePOST https://hivemorph.onrender.com/v1/attest/absence/prove
attest_absence_verifyPOST https://hivemorph.onrender.com/v1/attest/absence/verify
attest_meta(local — no backend call)

Connect (Claude Desktop)

Add to your claude_desktop_config.json:

json
{  "mcpServers": {    "hive-mcp-attest": {      "command": "node",      "args": ["/path/to/hive-mcp-attest/server.js"],      "env": {        "HIVE_BASE": "https://hivemorph.onrender.com"      }    }  }}

Or connect via Streamable-HTTP (MCP 2024-11-05):

json
{  "mcpServers": {    "hive-mcp-attest": {      "url": "https://hive-mcp-attest.onrender.com/mcp",      "transport": "streamable-http"    }  }}

Environment variables

VariableDefaultDescription
HIVE_BASEhttps://hivemorph.onrender.comBackend hivemorph URL
PORT3000Server port

Cryptographic guarantees

All attestation primitives use:

  • Ed25519 — signing key generated at backend startup (or loaded from HIVE_ATTEST_PRIVATE_KEY_B64URL)
  • RFC 8785 JCS — deterministic canonicalization for all signing operations
  • SHA-256 — payload hashing, Merkle tree nodes
  • No mocked signatures — every signature is a real 64-byte Ed25519 output

Patent

Reference implementation of USPTO Provisional 64/055,601 — HiveAttest claims C8/C12/C13/C15-C20.

Inventor: Stephen A. Rotzin. Filed May 2 2026.

Layer

Layer C — Reference Grade. Wire format is normative. Production-grade is Layer B.

Every tool description ends with: "Reference-grade implementation. Wire format normative; production-grade is Layer B."

License

MIT © 2026 Stephen A. Rotzin / Hive Civilization

来源：README.md，提交 a5557bc

工具

18

attest_passport_issue

Issue a Pre-Action Attestation Manifest (C15: hive-passport). Signs with Ed25519 over RFC 8785 JCS-canonical body. Reference-grade implementation. Wire format normative; production-grade is Layer B.

输入参数inputsaction_id必填agent_did必填intended_op必填ttl_secondstarget_resource必填

attest_passport_verify

Verify a Pre-Action Attestation Manifest (C15: hive-passport). Checks Ed25519 signature, temporal validity, and optionally observed inputs hash. Reference-grade implementation. Wire format normative; production-grade is Layer B.

输入参数manifest必填observed_inputs

attest_custody_append

Append a node to a custody chain (C16: hive-custody). Taint propagates: once tainted, always tainted. Reference-grade implementation. Wire format normative; production-grade is Layer B.

输入参数payloadchain_id必填agent_did必填taint_statustransform_id必填

attest_custody_verify

Verify a custody chain: hash linkage, Ed25519 signatures, and taint propagation (C16). Reference-grade implementation. Wire format normative; production-grade is Layer B.

输入参数nodes必填

attest_custody_proof

Retrieve a Merkle inclusion proof for a specific node in a custody chain (C16). Reference-grade implementation. Wire format normative; production-grade is Layer B.

输入参数index必填chain_id必填

attest_cargo_register

Register a versioned cargo type in the HiveAttest registry (C17: hive-cargo-taxonomy). Pins a definition hash for version-anchoring. Reference-grade implementation. Wire format normative; production-grade is Layer B.

输入参数id必填name必填schema必填version必填supersedessensitivity必填

attest_cargo_validate

Validate a payload against a registered cargo type schema (C17). Reference-grade implementation. Wire format normative; production-grade is Layer B.

输入参数payload必填version必填cargo_type_id必填

attest_cargo_snapshot

Get a registry snapshot with Merkle root for version pinning (C17). Reference-grade implementation. Wire format normative; production-grade is Layer B.

无需输入参数。

attest_warranty_issue

Issue an attestation warranty committing an agent to a claim (C18: hive-attestation-warranty). Signed with Ed25519. Reference-grade implementation. Wire format normative; production-grade is Layer B.

输入参数claim必填scopeaction_id必填agent_did必填expires_at

attest_warranty_breach

Report a warranty breach. Marks the warranty as breached and returns a signed breach record (C18). Reference-grade implementation. Wire format normative; production-grade is Layer B.

输入参数evidencewarranty_id必填breach_description必填

attest_warranty_get

Retrieve a warranty by ID (C18). Reference-grade implementation. Wire format normative; production-grade is Layer B.

输入参数warranty_id必填

attest_gate_evaluate

THE HEADLINE TOOL. Evaluate whether an agent may proceed through the HiveAttest gate (C19: hive-gate-enforcer). Verifies passport signature + expiry, cargo registry membership, and warranty status. Every response (allow OR deny) includes a signed C18-format receipt of the gate decision. Reference-grade implementation. Wire format normative; production-grade is Layer B.

输入参数contextcustody_rootwarranty_idscargo_manifestpassport_manifest必填

attest_inspect_sample

Probabilistic secondary inspection of a record batch (C20: hive-secondary-inspection). Returns a signed inspection record. Reference-grade implementation. Wire format normative; production-grade is Layer B.

输入参数seedrecords必填sample_id必填sample_rate

attest_smsh_verify

Verify a SMSH-Stamp v1 receipt (C8/C12: smsh-stamp-verifier). Validates schema, version, algorithm, timestamp, and Ed25519 signature. Reference-grade implementation. Wire format normative; production-grade is Layer B.

输入参数receipt必填pubkey_b64urlmax_age_seconds

attest_absence_build

Build a sorted Merkle tree for an audit window (enables cryptographic non-membership proofs, C13: prov-absence). Reference-grade implementation. Wire format normative; production-grade is Layer B.

输入参数events必填window_id必填

attest_absence_prove

Prove that a query event is NOT a member of a previously-built audit window (C13). Reference-grade implementation. Wire format normative; production-grade is Layer B.

输入参数query必填window_id必填

attest_absence_verify

Verify a non-membership proof against an expected Merkle root (C13). Reference-grade implementation. Wire format normative; production-grade is Layer B.

输入参数proof必填root_hex必填

attest_meta

Return HiveAttest layer/spec/patent metadata for all claims. Useful for agent introspection. Reference-grade implementation. Wire format normative; production-grade is Layer B.

无需输入参数。

版本历史

1
  1. v1.0.0最新Sep 16, 2026

评分

已满足适用检查项的 100%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分