Agent Trust Stack MCP Server

MCP (Model Context Protocol) server exposing the Agent Trust Stack tools so any MCP-compatible AI agent can use them natively.

Provides Chain of Consciousness (CoC) provenance logging and Agent Rating Protocol (ARP) reputation scoring — the two operational protocols from the 7-protocol Agent Trust Stack.

Tools

Resources

Installation

pip install agent-trust-stack-mcp

For proper OpenTimestamps .ots file format (optional):

pip install agent-trust-stack-mcp[ots]

Configuration

Add to your MCP client config (Claude Code, Cursor, etc.):

{
  "mcpServers": {
    "agent-trust-stack": {
      "command": "agent-trust-stack-mcp",
      "args": []
    }
  }
}

Environment Variables

Custom data directories

{
  "mcpServers": {
    "agent-trust-stack": {
      "command": "agent-trust-stack-mcp",
      "args": [],
      "env": {
        "COC_CHAIN_DIR": "/path/to/my/chain",
        "ARP_RATINGS_DIR": "/path/to/my/ratings"
      }
    }
  }
}

Usage Examples

Once connected, any MCP-compatible agent can call these tools directly:

Start a provenance chain

→ coc_init(agent="my-agent")
← { "status": "chain_initialized", "sequence": 0, "entry_hash": "a1b2c3..." }

Log activity

→ coc_add(event_type="learn", data="Processed 500 documents from dataset X", agent="my-agent")
← { "status": "entry_added", "sequence": 1, "entry_hash": "d4e5f6..." }

Verify chain integrity

→ coc_verify()
← { "is_valid": true, "entry_count": 42, "agents": {"my-agent": 42} }

Rate another agent

→ arp_rate(rater="agent-a", ratee="agent-b", score=0.8, context="Delivered accurate research")
← { "status": "rating_recorded", "rater_hash": "7f8a9b...", "score": 0.8 }

Check reputation

→ arp_check(agent_id="agent-b")
← { "rating_count": 5, "average_score": 0.72, "unique_raters": 3 }

Running Directly

# stdio mode (default — for MCP client connections)
agent-trust-stack-mcp

# Or via Python module
python -m agent_trust_stack_mcp

How It Works

Chain of Consciousness (CoC): An append-only JSONL file where each entry contains a SHA-256 hash linking it to the previous entry, creating a tamper-evident log. Any modification to earlier entries breaks the hash chain, making tampering detectable. Optional external anchoring via OpenTimestamps (Bitcoin) and RFC 3161 TSA provides independent timestamp proof.

Agent Rating Protocol (ARP): Agents rate each other on a -1.0 to 1.0 scale after interactions. Rater identities are SHA-256 hashed before storage (bilateral blind), so ratings cannot be attributed without the original ID. Reputation is the aggregate of all received ratings.

Registry Listings

• Smithery — agent-trust-stack
• Glama — agent-trust-stack
• mcp.so — agent-trust-stack
• MCP Servers — agent-trust-stack

Part of the Agent Trust Stack

This MCP server exposes tools from the Agent Trust Stack — seven interlocking protocols for autonomous AI agent trust infrastructure:

1. Chain of Consciousness — Provenance logging (this server)
2. Agent Rating Protocol — Reputation scoring (this server)
3. Agent Service Agreements — Machine-readable contracts
4. Agent Justice Protocol — Dispute resolution
5. Agent Lifecycle Protocol — Birth, migration, retirement
6. Agent Matchmaking — Capability discovery
7. Context Window Economics — Token resource management

Full stack: pip install agent-trust-stack

Security

VAM-SEC v1.0 — All CoC and ARP operations are local file I/O. No credentials are required or stored. No network calls are made except during optional coc_anchor (OTS calendar servers + freeTSA.org). No API keys needed.

License

Apache-2.0 — Copyright (c) 2026 AB Support LLC