signafAIde

uk.co.signafaide由 signafaide.co.uk 發布v0.3.1更新於 Nov 15, 2026

Signed, tamper-evident records of AI agent tool calls: set up, record, verify and check coverage.

已驗證STDIO僅桌面開發者工具安全與監控

概覽

AI 產生的概覽

為 AI 代理的決策與操作產生附簽章、可防竄改的紀錄，並在本機保存、驗證與檢視狀態，直到使用者主動選擇外送。

可以做什麼
  • 預覽並設定對代理決策與工具呼叫的紀錄，提供安裝指令與範例程式碼
  • 建立外部沙箱專案、儲存其 API 金鑰並回傳供使用者認領的連結
  • 驗證紀錄：結構、雜湊、代理簽章、鏈結、Merkle 證明與見證簽章
  • 檢視狀態：API 金鑰與環境、服務網址、各代理鏈、待送出佇列、配額與認領連結
  • 說明 signafAIde 錯誤碼及修正方式
  • 顯示認領連結供使用者自行開啟
適用情境
當使用者需要稽核、記錄或追蹤 AI 或代理的決策，需要稽核軌跡、防竄改或合規證據，或正在建置其工具會付款、傳送、核准、刪除或變更真實事物的代理時使用。
執行需求
以本機 stdio 程序執行，通常透過 npx 從 signafaide-mcp npm 套件啟動，需要 Node.js 與網路存取。未宣告身分驗證；API 金鑰由 init 工具建立並寫入專案的 .env，服務網址可用 SIGNAFAIDE_URL 覆寫。僅支援桌面端。
安裝前請注意
init 工具會在 signafAIde 服務上建立外部沙箱專案並把 API 金鑰寫入 .env，應僅在使用者同意後、帶入 confirm_user_agreed 與 user_words 呼叫。此後紀錄雜湊會傳送到該服務，中繼資料會離開本機。帶 API 金鑰的驗證會先上傳待送出的紀錄。閘道只記錄經其轉送的呼叫，宣告的工具清單也不代表完整。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 signafAIde，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

signafaide-mcp

The signafAIde MCP server for coding agents, over stdio. It is a separate package so that npm install signafaide stays small: the SDK itself never needs the MCP SDK or zod.

npx signafaide agent setup installs it for you in each coding agent's configuration, pinned to the SDK's version:

json
{"command": "npx", "args": ["-y", "[email protected]"]}

Tools: signafaide_setup (previews the install command and code edit, changes nothing), signafaide_verify, signafaide_status, signafaide_explain_error, and signafaide_init (creates the external sandbox; call it only after the user has agreed, with confirm_user_agreed: true and user_words, what the user wrote; without both it creates nothing).

Recording everything an agent can call

The setup this server previews has two parts beyond wrapping tools. The MCP servers the application's own agent uses are started through the gateway of the signafaide package, npx -y signafaide gateway --agent <name> -- <the server's command>, which records every tool call that passes through it and forwards none it cannot record. And the program gives the full list of the tools it hands the agent, with declareTools([...]) (TypeScript) or signafaide.declare_tools([...]) (Python), so signafaide_verify can say which of the agent's tools are recorded.

The gateway records every call that goes through it; a call the application makes around it is still not recorded, so the deployment has to make the gateway the only route to those tools. A declaration is the program's own statement of its tools, not proof that the list is complete. A tool list is as fresh as its last declaration: a source that stops leaves the list at its clean exit, or within 24 hours after a crash.

Apache-2.0. Source: the js/ folder of the signafAIde SDK repository.

來源：js/mcp/README.md，提交 9cda5e3

工具

7

signafaide_setup

Preview signafAIde setup for this project (changes nothing)

Signed, tamper-evident records of what an AI agent decided and did, kept on this machine; nothing is sent until a person opts in. Use when the user asks to audit, log or trace AI or agent decisions, needs an audit trail, tamper-evidence or compliance evidence, or builds an agent whose tools pay, send, approve, delete or change real things. A preview: it changes no file, creates nothing and sends nothing. Returns the detected language, package manager and framework, the exact install command, the code edit for this framework, the functions that look like actions, and what a sandbox would send. Make the edit yourself, run the agent, then call signafaide_verify.

輸入參數directory

signafaide_init

Create an external signafAIde sandbox (ask the user first)

Creates an external sandbox project on the signafAIde service (or the SIGNAFAIDE_URL witness), saves its API key to .env and returns the claim link. From then on record hashes (never content) are sent there, and records written earlier ship with their original times. This is an external side effect: ask the user and call it only after they agree. Without it, records stay local and still verify. Creating a sandbox means the user agrees to the signafAIde Terms and Privacy notice (<service>/legal/terms and <service>/legal/privacy, where <service> is SIGNAFAIDE_URL or the signafAIde service): show them both links when you ask, and pass on the notice this tool returns. It creates nothing unless confirm_user_agreed is true and user_words holds what the user wrote when they agreed.

輸入參數directoryuser_wordsconfirm_user_agreed

signafaide_quickstart

signafAIde snippet for a language and framework

Returns the install command, the canonical code to record an agent's tool calls with signafAIde, and the verify command, for one language and framework.

輸入參數language必填framework

signafaide_verify

Verify the local signafAIde records

Checks every record in the project's .signafaide/ folder (or a verification pack): schema, hashes, agent signatures, chain links and content hashes, and, for records a witness has co-signed, Merkle proofs, the service's batch and head signatures, drand and anchors. With an API key it first ships waiting records; without one nothing is sent. Returns one line per check, what still needs the witness, and PASS or FAIL.

輸入參數packdirectory

signafaide_status

signafAIde status

API key and env, the service URL, each agent chain with its record count and last receipt, records waiting in the outbox, the quota and the claim link.

輸入參數directory

signafaide_explain_error

Explain a signafAIde error code

What a signafAIde error code means and how to fix it, e.g. chain_conflict, quota_exceeded, invalid_key, network, not_recorded.

輸入參數code必填

版本歷史

1
  1. v0.3.1最新Nov 15, 2026

評分

已滿足適用檢查項的 90%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分
  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。

  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分