HiveAttest

io.github.srotzin由 GitHub 帳號 srotzin 發布v1.0.0更新於 Oct 24, 2026

Pre-action attestation perimeter for AI agents — 8 primitives, signed C18 receipt per call.

已驗證Streamable HTTP可網頁執行開發者工具安全與監控

概覽

AI 產生的概覽

HiveAttest 是一個遠端 MCP 伺服器，讓助理以 Ed25519 簽章與 Merkle 雜湊為 AI 代理的動作簽發、驗證並放行可驗證的證明紀錄。

可以做什麼
簽發並驗證行動前護照，檢查簽章、時效與可選的輸入雜湊，並評估代理能否通過閘門，每次允許或拒絕都附上簽章回執。附加、驗證保管鏈節點並產生 Merkle 包含證明，汙染一旦標記便持續傳播。在登錄表中登記、驗證帶版本的貨物類型，並取得帶 Merkle 根的登錄表快照以固定版本。簽發保證書、回報違約、依 ID 查詢保證書，並對紀錄批次進行機率性二次抽檢並回傳簽章抽檢紀錄。建立稽核視窗的排序 Merkle 樹，證明並驗證某事件不在視窗內，驗證 SMSH-Stamp v1 回執，或回傳各聲明的層級、規格與專利中介資料。
適用情境
當你需要圍繞 AI 代理即將執行或已經執行的動作提供加密簽章證據時使用：行動前授權、保管鏈紀錄、保證承諾、稽核視窗的不存在性證明，或帶回執的閘門決策。它適合對 HiveAttest 聲明族進行評估與原型驗證，而非生產環境的強制管控。
執行需求
需要遠端 Streamable-HTTP 端點；使用託管連線不需本機執行環境或安裝套件。README 另提供本機 Node.js 啟動方式，透過環境變數設定後端基礎位址與連接埠。未宣告任何身分驗證、API 金鑰或請求標頭。需要能存取託管伺服器及其後端的網路。
安裝前請注意
README 稱其為參考級實作，生產級強化列為未來工作，因此不要依賴它做真正的強制管控。簽章金鑰在後端啟動時產生，或由後端上的私鑰環境變數載入。相關工具會簽發、附加、登記與回報違約紀錄，會改變伺服器端狀態，且請求會經代理轉送至第三方後端。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 HiveAttest，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable，透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式，或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南，先向你展示發布者、端點和登入方式，經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/io.github.srotzin%2Fhive-mcp-attest/install.md，並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前，先告訴我它的發布者、端點和登入方式，等我確認。不要把 API 金鑰寫進命令或我會提交的檔案；問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "hiveattest": {
      "type": "http",
      "url": "https://hive-mcp-attest.onrender.com/mcp"
    }
  }
}

README

[Hive Civilization · HiveAttest perimeter for autonomous agents]

hive-mcp-attest

HiveAttest perimeter for autonomous agents — C8/C12/C13/C15-C20

[Glama] [Status] [Release] [License]

https://hive-mcp-attest.onrender.com/mcp

Layer C — Reference Grade

This is the reference implementation of the HiveAttest claim family. Wire format is normative. Production-grade (Layer B) is a future hardened deployment.

Reference implementation of USPTO Provisional 64/055,601 — HiveAttest claims C8/C12/C13/C15-C20.

Inventor: Stephen A. Rotzin

What this is

hive-mcp-attest is a Model Context Protocol (MCP) server that exposes the complete HiveAttest perimeter as 19 tools, proxying to the live hivemorph backend.

  • Protocol: MCP 2024-11-05 over Streamable-HTTP / JSON-RPC 2.0
  • Transport: POST /mcp
  • Discovery: GET /.well-known/mcp.json
  • Health: GET /health
  • Backend: https://hivemorph.onrender.com
  • Crypto: Ed25519, RFC 8785 JCS, SHA-256 — real signatures, no mocks
  • Brand gold: #FFB800

Tools

ToolClaimDescription
attest_passport_issueC15Issue a Pre-Action Attestation Manifest (Ed25519 signed)
attest_passport_verifyC15Verify a passport manifest (signature + temporal + inputs hash)
attest_custody_appendC16Append a signed node to a custody chain (taint propagation)
attest_custody_verifyC16Verify hash linkage, signatures, and taint propagation
attest_custody_proofC16Get a Merkle inclusion proof for a custody node
attest_cargo_registerC17Register a versioned cargo type (definition_hash pinned)
attest_cargo_validateC17Validate a payload against a registered cargo schema
attest_cargo_snapshotC17Registry snapshot with Merkle root for version pinning
attest_warranty_issueC18Issue a signed warranty committing an agent to a claim
attest_warranty_breachC18Report a breach — signed breach record returned
attest_warranty_getC18Retrieve a warranty by ID
attest_gate_evaluateC19THE HEADLINE TOOL — Gate evaluation with signed C18 receipt
attest_inspect_sampleC20Probabilistic secondary inspection, signed inspection record
attest_smsh_verifyC8/C12Verify a SMSH-Stamp v1 receipt
attest_absence_buildC13Build a sorted Merkle tree for provable non-membership
attest_absence_proveC13Prove an event is absent from an audit window
attest_absence_verifyC13Verify a non-membership proof against a root
attest_meta—Return layer/spec/patent metadata for all claims

Endpoints

ToolBackend URL
attest_passport_issuePOST https://hivemorph.onrender.com/v1/attest/passport/issue
attest_passport_verifyPOST https://hivemorph.onrender.com/v1/attest/passport/verify
attest_custody_appendPOST https://hivemorph.onrender.com/v1/attest/custody/append
attest_custody_verifyPOST https://hivemorph.onrender.com/v1/attest/custody/verify
attest_custody_proofGET https://hivemorph.onrender.com/v1/attest/custody/{chain_id}/proof/{index}
attest_cargo_registerPOST https://hivemorph.onrender.com/v1/attest/cargo/register
attest_cargo_validatePOST https://hivemorph.onrender.com/v1/attest/cargo/validate
attest_cargo_snapshotGET https://hivemorph.onrender.com/v1/attest/cargo/snapshot
attest_warranty_issuePOST https://hivemorph.onrender.com/v1/attest/warranty/issue
attest_warranty_breachPOST https://hivemorph.onrender.com/v1/attest/warranty/breach
attest_warranty_getGET https://hivemorph.onrender.com/v1/attest/warranty/{id}
attest_gate_evaluatePOST https://hivemorph.onrender.com/v1/attest/gate/evaluate
attest_inspect_samplePOST https://hivemorph.onrender.com/v1/attest/inspect/sample
attest_smsh_verifyPOST https://hivemorph.onrender.com/v1/attest/smsh/verify
attest_absence_buildPOST https://hivemorph.onrender.com/v1/attest/absence/build
attest_absence_provePOST https://hivemorph.onrender.com/v1/attest/absence/prove
attest_absence_verifyPOST https://hivemorph.onrender.com/v1/attest/absence/verify
attest_meta(local — no backend call)

Connect (Claude Desktop)

Add to your claude_desktop_config.json:

json
{  "mcpServers": {    "hive-mcp-attest": {      "command": "node",      "args": ["/path/to/hive-mcp-attest/server.js"],      "env": {        "HIVE_BASE": "https://hivemorph.onrender.com"      }    }  }}

Or connect via Streamable-HTTP (MCP 2024-11-05):

json
{  "mcpServers": {    "hive-mcp-attest": {      "url": "https://hive-mcp-attest.onrender.com/mcp",      "transport": "streamable-http"    }  }}

Environment variables

VariableDefaultDescription
HIVE_BASEhttps://hivemorph.onrender.comBackend hivemorph URL
PORT3000Server port

Cryptographic guarantees

All attestation primitives use:

  • Ed25519 — signing key generated at backend startup (or loaded from HIVE_ATTEST_PRIVATE_KEY_B64URL)
  • RFC 8785 JCS — deterministic canonicalization for all signing operations
  • SHA-256 — payload hashing, Merkle tree nodes
  • No mocked signatures — every signature is a real 64-byte Ed25519 output

Patent

Reference implementation of USPTO Provisional 64/055,601 — HiveAttest claims C8/C12/C13/C15-C20.

Inventor: Stephen A. Rotzin. Filed May 2 2026.

Layer

Layer C — Reference Grade. Wire format is normative. Production-grade is Layer B.

Every tool description ends with: "Reference-grade implementation. Wire format normative; production-grade is Layer B."

License

MIT © 2026 Stephen A. Rotzin / Hive Civilization

來源：README.md，提交 a5557bc

工具

18

attest_passport_issue

Issue a Pre-Action Attestation Manifest (C15: hive-passport). Signs with Ed25519 over RFC 8785 JCS-canonical body. Reference-grade implementation. Wire format normative; production-grade is Layer B.

輸入參數inputsaction_id必填agent_did必填intended_op必填ttl_secondstarget_resource必填

attest_passport_verify

Verify a Pre-Action Attestation Manifest (C15: hive-passport). Checks Ed25519 signature, temporal validity, and optionally observed inputs hash. Reference-grade implementation. Wire format normative; production-grade is Layer B.

輸入參數manifest必填observed_inputs

attest_custody_append

Append a node to a custody chain (C16: hive-custody). Taint propagates: once tainted, always tainted. Reference-grade implementation. Wire format normative; production-grade is Layer B.

輸入參數payloadchain_id必填agent_did必填taint_statustransform_id必填

attest_custody_verify

Verify a custody chain: hash linkage, Ed25519 signatures, and taint propagation (C16). Reference-grade implementation. Wire format normative; production-grade is Layer B.

輸入參數nodes必填

attest_custody_proof

Retrieve a Merkle inclusion proof for a specific node in a custody chain (C16). Reference-grade implementation. Wire format normative; production-grade is Layer B.

輸入參數index必填chain_id必填

attest_cargo_register

Register a versioned cargo type in the HiveAttest registry (C17: hive-cargo-taxonomy). Pins a definition hash for version-anchoring. Reference-grade implementation. Wire format normative; production-grade is Layer B.

輸入參數id必填name必填schema必填version必填supersedessensitivity必填

attest_cargo_validate

Validate a payload against a registered cargo type schema (C17). Reference-grade implementation. Wire format normative; production-grade is Layer B.

輸入參數payload必填version必填cargo_type_id必填

attest_cargo_snapshot

Get a registry snapshot with Merkle root for version pinning (C17). Reference-grade implementation. Wire format normative; production-grade is Layer B.

無需輸入參數。

attest_warranty_issue

Issue an attestation warranty committing an agent to a claim (C18: hive-attestation-warranty). Signed with Ed25519. Reference-grade implementation. Wire format normative; production-grade is Layer B.

輸入參數claim必填scopeaction_id必填agent_did必填expires_at

attest_warranty_breach

Report a warranty breach. Marks the warranty as breached and returns a signed breach record (C18). Reference-grade implementation. Wire format normative; production-grade is Layer B.

輸入參數evidencewarranty_id必填breach_description必填

attest_warranty_get

Retrieve a warranty by ID (C18). Reference-grade implementation. Wire format normative; production-grade is Layer B.

輸入參數warranty_id必填

attest_gate_evaluate

THE HEADLINE TOOL. Evaluate whether an agent may proceed through the HiveAttest gate (C19: hive-gate-enforcer). Verifies passport signature + expiry, cargo registry membership, and warranty status. Every response (allow OR deny) includes a signed C18-format receipt of the gate decision. Reference-grade implementation. Wire format normative; production-grade is Layer B.

輸入參數contextcustody_rootwarranty_idscargo_manifestpassport_manifest必填

attest_inspect_sample

Probabilistic secondary inspection of a record batch (C20: hive-secondary-inspection). Returns a signed inspection record. Reference-grade implementation. Wire format normative; production-grade is Layer B.

輸入參數seedrecords必填sample_id必填sample_rate

attest_smsh_verify

Verify a SMSH-Stamp v1 receipt (C8/C12: smsh-stamp-verifier). Validates schema, version, algorithm, timestamp, and Ed25519 signature. Reference-grade implementation. Wire format normative; production-grade is Layer B.

輸入參數receipt必填pubkey_b64urlmax_age_seconds

attest_absence_build

Build a sorted Merkle tree for an audit window (enables cryptographic non-membership proofs, C13: prov-absence). Reference-grade implementation. Wire format normative; production-grade is Layer B.

輸入參數events必填window_id必填

attest_absence_prove

Prove that a query event is NOT a member of a previously-built audit window (C13). Reference-grade implementation. Wire format normative; production-grade is Layer B.

輸入參數query必填window_id必填

attest_absence_verify

Verify a non-membership proof against an expected Merkle root (C13). Reference-grade implementation. Wire format normative; production-grade is Layer B.

輸入參數proof必填root_hex必填

attest_meta

Return HiveAttest layer/spec/patent metadata for all claims. Useful for agent introspection. Reference-grade implementation. Wire format normative; production-grade is Layer B.

無需輸入參數。

版本歷史

1
  1. v1.0.0最新Sep 16, 2026

評分

已滿足適用檢查項的 100%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分