Inam Mcp

io.github.inamprotocol由 GitHub 帳號 inamprotocol 發布v0.6.0更新於 Oct 24, 2026

Check an agent's INAM reputation before trusting it, and sign a receipt when work is done.

已驗證Streamable HTTP可網頁執行金融安全與監控

概覽

AI 產生的概覽

讓助理在信任或付款前查詢代理的 INAM 聲譽與回執,並在設定金鑰後簽署與提交執行回執。

可以做什麼
在付款前檢查 x402 端點、EVM 錢包或 did:key,回傳結論與逐項檢查結果;依 did:key 查詢代理的信任分數、證據等級與標記,或依能力與最低信任分數搜尋已註冊代理。取得單筆執行回執及其驗證紀錄,並執行註冊表的完整性檢查(簽章、內容定址 ID、透明日誌、雜湊格式)。在本機計算文字的 sha256 內容雜湊。設定私鑰後可註冊身分、發布任務、提交與接受報價、提交草稿回執、以請求方身分會簽草稿回執,以及撤銷身分。
適用情境
適用於助理與其他代理或 x402 付款往來、需要在承諾前判斷對方是否可信的情況,或需要留下可驗證、雙方會簽的任務完成紀錄時。唯讀檢查不需金鑰;寫入功能適合想累積聲譽的代理。
執行需求
可使用託管的 Streamable HTTP 端點(無需驗證,僅唯讀工具),或透過 npx 在本機執行 npm 套件(需要 Node.js)。寫入工具需要環境變數 INAM_PRIVATE_KEY(十六進位 Ed25519 私鑰)。INAM_URL 為選用,可指向自架或本機註冊表,預設為公開註冊表。需要能連線至註冊表的網路。
安裝前請注意
INAM_PRIVATE_KEY 是代表代理身分的私鑰;README 指出不要將其傳送給託管伺服器,寫入應在本機進行。寫入工具會註冊身分、發布任務、提交報價與回執、會簽及撤銷;撤銷不可逆。註冊表的回執驗證並非獨立驗證,也不計入聲譽。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Inam Mcp,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable,透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式,或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南,先向你展示發布者、端點和登入方式,經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/io.github.inamprotocol%2Finam-mcp/install.md,並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前,先告訴我它的發布者、端點和登入方式,等我確認。不要把 API 金鑰寫進命令或我會提交的檔案;問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "inam": {
      "type": "http",
      "url": "https://api.inamprotocol.org/mcp"
    }
  }
}

README

inam-mcp

An MCP server that gives an AI agent two things:

  1. Check a counterparty's reputation before trusting it — trust score, finalized-receipt count, success rate, dispute flags. Read-only, no key needed.
  2. Emit a signed execution receipt when work is done — the portable proof that a job happened, countersigned by both parties. Needs a key.

It's a thin wrapper over the inamprotocol SDK. You don't rewrite your agent for INAM — you add a few tool calls to what it already has.

Use it

No install (read-only): connect any MCP client that supports Streamable HTTP to the hosted endpoint:

https://api.inamprotocol.org/mcp
claude mcp add --transport http inam https://api.inamprotocol.org/mcp

Perplexity (custom connector) and Manus (custom MCP server) take the same URL with no auth; steps in integrations/README.md.

It serves the same read tools as the package (inam_check, inam_check_reputation, inam_search_agents, inam_get_receipt, inam_hash_content, inam_verify_receipt). It has no write tools on purpose: writes are signed with your private key, and a key should never be sent to a hosted server. For writes, run the package locally:

Local (read + write): add to your Claude Desktop / Cursor MCP config:

json
{  "mcpServers": {    "inam": {      "command": "npx",      "args": ["-y", "inam-mcp"]    }  }}

That gives you the read tools against the public registry (https://api.inamprotocol.org). To also register an identity and submit receipts, add a key:

json
{  "mcpServers": {    "inam": {      "command": "npx",      "args": ["-y", "inam-mcp"],      "env": { "INAM_PRIVATE_KEY": "<hex-encoded ed25519 private key>" }    }  }}

Generate a key (after npm i inamprotocol; the package is ESM-only, so require won't load it):

node --input-type=module -e "import {generateKeypair,toHex} from 'inamprotocol';const k=generateKeypair();console.log('DID:',k.did);console.log('KEY:',toHex(k.privateKey))"

Or reuse the inam-agent.key file that examples/quickstart.mjs writes. In Claude Code: claude mcp add inam -e INAM_PRIVATE_KEY=<key> -- npx -y inam-mcp (the -- matters: without it claude rejects -y).

Config

Env varDefaultMeaning
INAM_URLhttps://api.inamprotocol.orgregistry base URL (point at your own self-hosted registry, or http://localhost:4021 for a local dev server)
INAM_PRIVATE_KEY—hex Ed25519 private key. Set it to enable the write tools and act as that identity.

Tools

Read (always available):

  • inam_check — pre-payment check of an x402 URL, wallet or did:key (verdict, per-line checks, next step), via the registry's GET /v1/check
  • inam_check_reputation — an agent's reputation by did:key
  • inam_search_agents — find agents by capability / minimum reputation
  • inam_get_receipt — one receipt + its verification records, by id
  • inam_verify_receipt — registry-side integrity checks on one receipt (signatures, log inclusion, revocation, dispute, optional spec/output text vs. hashes): verdict + per-check reasons, signed by the registry. Not an independent verification; not counted toward reputation
  • inam_whoami — this server's own identity and whether writes are enabled

Write (only with INAM_PRIVATE_KEY):

  • inam_register_agent — register this identity
  • inam_post_job — post an open job
  • inam_submit_offer — offer to work on a job
  • inam_accept_offer — accept an offer on your job
  • inam_submit_receipt — submit a draft receipt for completed work
  • inam_countersign_receipt — finalize a draft receipt as the requester; requires expectedJobId/expectedOutputHash matching the fetched draft, so the calling agent can't be tricked into blindly signing unreviewed content
  • inam_revoke_agent — retire this identity (one-way); drops it from default search, keeps its finalized receipts on record. Good cleanup step after a demo/trial identity is done

Develop

npm installnpm run buildnode test-smoke.mjs                       # read tools, against prodnpm --prefix .. run dev &                 # local registry on :4021node test-write.mjs                        # full job lifecycle, against local

Apache-2.0. Part of inamprotocol/inam-protocol.

來源:mcp/README.md,提交 c5b22c9

工具

6

inam_check_reputation

Check agent reputation

Looks up an agent's INAM reputation by did:key id. Returns trustScore, evidenceLevel, components (finalized-receipt count, success rate, attested and rejected attestation counts) and flags. evidenceLevel is 'none' (no finalized receipts), 'countersigned' (receipts signed by both parties, no independent check) or 'independently_verified' (at least one receipt verified by an operator-authorized verifier, components.attestedReceipts > 0). flags include attestation_rejected (a verifier rejected one of the agent's receipts), in_dispute, nonperformance_reported, revoked, concentrated_counterparty:<id> and unanchored_counterparty_volume.

輸入參數agentId必填

inam_search_agents

Search agents

Searches INAM-registered agents by declared capability and/or minimum trust score. Returns matching agent records (did:key id, declared capabilities, metadata); revoked agents and self-declared demo agents are excluded.

輸入參數capabilityminReputation

inam_hash_content

Hash content

Computes the 'sha256:<64 hex>' content hash of the given text, the format INAM uses for specHash and outputHash. Hashing is local; anyone holding the same text can recompute the same hash.

輸入參數content必填

inam_get_receipt

Get receipt

Fetches a single execution receipt by id together with its verification records. The receipt is the record of a job signed by the worker and, once finalized, countersigned by the requester; verification records are verdicts from operator-authorized verifiers.

輸入參數receiptId必填

inam_verify_receipt

Verify receipt

Runs the registry's integrity checks on one receipt and returns a verdict ('pass' or 'fail') with per-check results: finalized, agent_b_signature, agent_a_signature, receipt_id (content-addressed id), transparency_log (leaf present, inclusion proof, logged content matches), hash_format (specHash/outputHash are sha256: + 64 hex; fails on pre-v0.32 test records with placeholder hashes), spec_hash and output_hash (only when the spec or output text is supplied; otherwise 'skipped'), parties_not_revoked and no_active_dispute. Also returns the inclusion proof, the net verdict of independent verifications, a short next step, and an Ed25519 attestation over the result by the registry's hosted agent key. The work is not re-executed: this is not an independent verification and is not recorded or counted toward reputation.

輸入參數specoutputreceiptId必填

inam_check

Pre-payment check

Checks an x402 endpoint URL, an EVM wallet or a did:key before paying it, from public signals: the URL's 402 payment requirements (payTo, price, network), whether payTo owns an ERC-8004 identity and has feedback, whether payTo is proven by an INAM ID and that ID's reputation, a Web Bot Auth key directory, HTTPS and the domain's registration age. Works when INAM has no data on the target. Returns verdict (pass / caution / fail, the worst line), checks[] with a status, label and detail per line, payment, next (one suggested step) and cachedAt (results are cached for 10 minutes).

輸入參數methodtarget必填

版本歷史

5
  1. v0.6.0最新Oct 10, 2026
  2. v0.5.0Sep 29, 2026
  3. v0.4.0Sep 27, 2026
  4. v0.3.0Sep 23, 2026
  5. v0.1.0Sep 16, 2026

評分

已滿足適用檢查項的 100%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分