signafAIde

uk.co.signafaide由 signafaide.co.uk 发布v0.3.1更新于 Nov 15, 2026

Signed, tamper-evident records of AI agent tool calls: set up, record, verify and check coverage.

已验证STDIO仅桌面开发者工具安全与监控

概览

AI 生成的概览

为 AI 智能体的决策与操作生成带签名、防篡改的记录，并在本地保存、校验和查看状态，直到用户主动选择外发。

可以做什么
  • 预览并配置对智能体决策与工具调用的记录，给出安装命令和示例代码
  • 创建外部沙箱项目、保存其 API 密钥并返回供用户认领的链接
  • 校验记录：结构、哈希、智能体签名、链式链接、Merkle 证明与见证签名
  • 查看状态：API 密钥与环境、服务地址、各智能体链、待发送队列、配额与认领链接
  • 解释 signafAIde 错误码及修复方法
  • 显示认领链接供用户自行打开
适用场景
当用户需要审计、记录或追踪 AI 或智能体的决策，需要审计轨迹、防篡改或合规证据，或正在构建其工具会付款、发送、审批、删除或更改真实事物的智能体时使用。
运行要求
以本地 stdio 进程运行，通常通过 npx 从 signafaide-mcp npm 包启动，需要 Node.js 和网络访问。未声明身份验证；API 密钥由 init 工具创建并写入项目的 .env，服务地址可用 SIGNAFAIDE_URL 覆盖。仅支持桌面端。
安装前请注意
init 工具会在 signafAIde 服务上创建外部沙箱项目并把 API 密钥写入 .env，应仅在用户同意后、携带 confirm_user_agreed 与 user_words 调用。此后记录哈希会发送到该服务，元数据会离开本机。带 API 密钥的校验会先上传待发送记录。网关只记录经其转发的调用，声明的工具清单也不代表完整。

安装

在 SourceWeft 中

  1. 打开 控制台中的 signafAIde，将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only，通过 STDIO。 STDIO 服务会启动本地进程，因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

signafaide-mcp

The signafAIde MCP server for coding agents, over stdio. It is a separate package so that npm install signafaide stays small: the SDK itself never needs the MCP SDK or zod.

npx signafaide agent setup installs it for you in each coding agent's configuration, pinned to the SDK's version:

json
{"command": "npx", "args": ["-y", "[email protected]"]}

Tools: signafaide_setup (previews the install command and code edit, changes nothing), signafaide_verify, signafaide_status, signafaide_explain_error, and signafaide_init (creates the external sandbox; call it only after the user has agreed, with confirm_user_agreed: true and user_words, what the user wrote; without both it creates nothing).

Recording everything an agent can call

The setup this server previews has two parts beyond wrapping tools. The MCP servers the application's own agent uses are started through the gateway of the signafaide package, npx -y signafaide gateway --agent <name> -- <the server's command>, which records every tool call that passes through it and forwards none it cannot record. And the program gives the full list of the tools it hands the agent, with declareTools([...]) (TypeScript) or signafaide.declare_tools([...]) (Python), so signafaide_verify can say which of the agent's tools are recorded.

The gateway records every call that goes through it; a call the application makes around it is still not recorded, so the deployment has to make the gateway the only route to those tools. A declaration is the program's own statement of its tools, not proof that the list is complete. A tool list is as fresh as its last declaration: a source that stops leaves the list at its clean exit, or within 24 hours after a crash.

Apache-2.0. Source: the js/ folder of the signafAIde SDK repository.

来源：js/mcp/README.md，提交 9cda5e3

工具

7

signafaide_setup

Preview signafAIde setup for this project (changes nothing)

Signed, tamper-evident records of what an AI agent decided and did, kept on this machine; nothing is sent until a person opts in. Use when the user asks to audit, log or trace AI or agent decisions, needs an audit trail, tamper-evidence or compliance evidence, or builds an agent whose tools pay, send, approve, delete or change real things. A preview: it changes no file, creates nothing and sends nothing. Returns the detected language, package manager and framework, the exact install command, the code edit for this framework, the functions that look like actions, and what a sandbox would send. Make the edit yourself, run the agent, then call signafaide_verify.

输入参数directory

signafaide_init

Create an external signafAIde sandbox (ask the user first)

Creates an external sandbox project on the signafAIde service (or the SIGNAFAIDE_URL witness), saves its API key to .env and returns the claim link. From then on record hashes (never content) are sent there, and records written earlier ship with their original times. This is an external side effect: ask the user and call it only after they agree. Without it, records stay local and still verify. Creating a sandbox means the user agrees to the signafAIde Terms and Privacy notice (<service>/legal/terms and <service>/legal/privacy, where <service> is SIGNAFAIDE_URL or the signafAIde service): show them both links when you ask, and pass on the notice this tool returns. It creates nothing unless confirm_user_agreed is true and user_words holds what the user wrote when they agreed.

输入参数directoryuser_wordsconfirm_user_agreed

signafaide_quickstart

signafAIde snippet for a language and framework

Returns the install command, the canonical code to record an agent's tool calls with signafAIde, and the verify command, for one language and framework.

输入参数language必填framework

signafaide_verify

Verify the local signafAIde records

Checks every record in the project's .signafaide/ folder (or a verification pack): schema, hashes, agent signatures, chain links and content hashes, and, for records a witness has co-signed, Merkle proofs, the service's batch and head signatures, drand and anchors. With an API key it first ships waiting records; without one nothing is sent. Returns one line per check, what still needs the witness, and PASS or FAIL.

输入参数packdirectory

signafaide_status

signafAIde status

API key and env, the service URL, each agent chain with its record count and last receipt, records waiting in the outbox, the quota and the claim link.

输入参数directory

signafaide_explain_error

Explain a signafAIde error code

What a signafAIde error code means and how to fix it, e.g. chain_conflict, quota_exceeded, invalid_key, network, not_recorded.

输入参数code必填

版本历史

1
  1. v0.3.1最新Nov 15, 2026

评分

已满足适用检查项的 90%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分
  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头，或保持端点能够响应探测，以便判定其认证方式。

  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分