Provenonce

io.github.jarekpiot由 GitHub 帳號 jarekpiot 發布v1.1.4更新於 Oct 28, 2026

Cryptographic identity, SIGIL naming, heartbeat, and passports for AI agents.

已驗證STDIO僅桌面安全與監控AI 與機器學習

概覽

AI 產生的概覽

為 AI 代理提供加密身分、SIGIL 等級、心跳存活證明與簽章護照,並可驗證其他代理的身分。

可以做什麼
  • 註冊代理並查看目前狀態、餘額與提示
  • 購買 SIGIL,提交單次或批次心跳(以 SOL 付款)
  • 取得簽章護照,計算或提交工作量證明
  • 驗證其他代理的身分,查詢代理的完整譜系
  • 在已註冊身分下衍生(spawn)子代理
適用情境
適合需要讓代理擁有可被第三方離線核驗的持久身分,或在信任對方代理前先做身分核驗的情境。若只是單純的工具呼叫、不涉及代理身分與來源證明,則沒有必要安裝。
執行需求
透過 npx 從 npm 套件 @provenonce/mcp 以 stdio 在本機執行,需要 Node.js。註冊會產生憑證並存放在使用者家目錄下的設定檔,也可透過 PROVENONCE_API_KEY 與 PROVENONCE_AGENT_HASH 環境變數提供。購買 SIGIL 與送出心跳需要 Solana 付款;選用的 PROVENONCE_SKILL_REF 用於合作分潤,PROVENONCE_REGISTRY_URL 可覆寫註冊中心位址。
安裝前請注意
註冊會產生 API 金鑰與代理雜湊並寫入本機設定檔;Windows 上不強制檔案權限,建議改用環境變數。購買 SIGIL 與心跳需支付 SOL 並提供交易簽章。註冊、SIGIL 與時間戳備忘錄在 Solana 上公開可見,代理紀錄會無限期保留,被撤銷的代理僅標記而不刪除。代理狀態存放在第三方託管的資料庫中。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Provenonce,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

@provenonce/mcp

Provenonce Skill — Give any AI agent cryptographic identity in under 60 seconds.

Add this skill to your agent and it gets:

  • A permanent cryptographic hash (identity)
  • A SIGIL (verified identity class + tier)
  • A signed Passport (verifiable offline by any third party)
  • Heartbeat (continuous liveness proof)
  • Beats proofs (evidence of computational work)
  • Lineage (full ancestry chain)

Quick Start

Claude Desktop / Claude Code

Add to ~/.claude/claude_desktop_config.json:

json
{  "mcpServers": {    "provenonce": {      "command": "npx",      "args": ["-y", "@provenonce/mcp"]    }  }}

That's it. On first use, your agent calls provenonce_register and gets a permanent identity.

With pre-existing credentials

json
{  "mcpServers": {    "provenonce": {      "command": "npx",      "args": ["-y", "@provenonce/mcp"],      "env": {        "PROVENONCE_API_KEY": "pvn_...",        "PROVENONCE_AGENT_HASH": "0x..."      }    }  }}

As a skill developer (earn rev share)

If you're a developer embedding this skill in your framework, include your partner ref token:

json
{  "env": {    "PROVENONCE_SKILL_REF": "your16hextoken"  }}

You earn 30% of every SIGIL purchased by agents you deploy. Register at POST /api/v1/skill/register.

The 11 Tools

ToolWhat it doesAuth needed
provenonce_registerAuto-register agent, get hash + API keyNone
provenonce_statusFull current state (SIGIL, balance, hints)Yes
provenonce_purchase_sigilBuy SIGIL, unlock heartbeat + passportYes + SOL tx
provenonce_heartbeatSubmit liveness proofYes + SOL tx
provenonce_batch_heartbeatHeartbeat multiple children in one callYes + SOL tx
provenonce_get_passportGet signed identity documentYes
provenonce_beats_proofCompute work proof, get receipt (for spawn/resync)None
provenonce_submit_beatsCompute VDF beats and credit lifetime beat countYes
provenonce_verify_agentCheck another agent's identityNone
provenonce_spawnSpawn a child agentYes
provenonce_get_lineageGet full ancestry chainNone

Usage Examples

Example 1: Register and check status

User prompt: "Register with Provenonce and show me my identity."

Expected behavior:

  • Agent calls provenonce_register with an optional name
  • Receives a permanent cryptographic hash (e.g. 0xabcd...) and API key
  • Credentials are saved to ~/.provenonce/config.json
  • Agent calls provenonce_status to display identity, balance, and next steps
  • Status response includes a _hint suggesting the agent purchase a SIGIL

Example 2: Verify another agent before trusting it

User prompt: "Check if agent 0xf7dad8f4...b6fd is legitimate."

Expected behavior:

  • Agent calls provenonce_verify_agent with the target hash
  • Returns the agent's SIGIL, identity class, tier, registration date, and liveness score
  • Agent reports whether the target has an active SIGIL and recent heartbeats
  • No authentication needed — this is a public verification endpoint

Example 3: Full lifecycle — SIGIL, heartbeat, and passport

User prompt: "Get me a SIGIL, send a heartbeat, and export my passport."

Expected behavior:

  • Agent calls provenonce_purchase_sigil without payment_tx to get fee instructions (amount in SOL + ops wallet address)
  • User sends the SOL payment and provides the transaction signature
  • Agent calls provenonce_purchase_sigil again with the payment_tx to complete the purchase
  • Agent calls provenonce_heartbeat (same payment flow) to prove liveness
  • Agent calls provenonce_get_passport to receive a cryptographically signed identity document
  • Passport can be verified offline by any third party using the Provenonce authority public key

Agent Flow

Day 1:  provenonce_register      → hash minted, credentials saved        provenonce_beats_proof   → works immediately, no SIGIL needed        provenonce_status        → { sigil: null, _hint: "Call provenonce_purchase_sigil..." }
Day 7:  provenonce_purchase_sigil → pay SOL, SIGIL issued        provenonce_heartbeat     → now unlocked        provenonce_get_passport  → signed identity doc, share with anyone        provenonce_verify_agent  → verify a counterparty before trusting them

Environment Variables

VariableDescriptionDefault
PROVENONCE_API_KEYAgent API key (pvn_...)Read from ~/.provenonce/config.json
PROVENONCE_AGENT_HASHAgent hash (0x...)Read from ~/.provenonce/config.json
PROVENONCE_SKILL_REFYour partner ref token (for rev share)None
PROVENONCE_REGISTRY_URLRegistry URL overridehttps://provenonce.io

Framework-Agnostic Usage

typescript
import { PROVENONCE_TOOLS } from '@provenonce/mcp/tools';
// OpenAIconst tools = PROVENONCE_TOOLS.map(t => ({ type: 'function', function: t }));
// LangChain / custom — use PROVENONCE_TOOLS for schema, implement handlers yourself

Credential Storage

Credentials are stored in ~/.provenonce/config.json with chmod 600 permissions (Unix).

On Windows, use environment variables (PROVENONCE_API_KEY + PROVENONCE_AGENT_HASH) — file permissions are not enforced.

Privacy Policy

Provenonce collects the minimum data necessary to provide cryptographic identity services:

  • Data collected: Agent name (optional), cryptographic hash (generated), API key, SIGIL metadata, heartbeat timestamps, and Solana transaction signatures for payments.
  • How data is used: To maintain the agent identity registry, verify agent liveness, and issue signed passports. No data is sold to third parties.
  • Storage: Agent state is stored in Supabase (PostgreSQL). Tamper-proof timestamps are anchored on the Solana blockchain as SPL Memo transactions.
  • Third-party sharing: On-chain memos (registration, SIGIL) are publicly visible on Solana. No other data is shared with third parties.
  • Retention: Agent records persist indefinitely as part of the provenance chain. Revoked agents are marked but not deleted.
  • Contact: [email protected]

Full privacy policy: provenonce.dev/legal/privacy

Support

What's Coming

  • provenonce_kyc — KYC / identity class upgrade
  • Auto-heartbeat timer (opt-in)
  • Python SDK (provenonce-py)

License

MIT — see LICENSE

Links

來源:README.md,提交 c24cac1

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包,因此其工具未知。

版本歷史

1
  1. v1.1.4最新Sep 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分