Kevros MCP Server

Runtime intelligence for autonomous AI agents. Verify actions against policy, record hash-chained provenance, and bind intents cryptographically.

Quick Start

No installation required. Connect directly to the hosted server:

https://governance.taskhawktech.com/mcp/

Claude Desktop / Claude Code

Add to your MCP settings:

{
  "mcpServers": {
    "kevros": {
      "url": "https://governance.taskhawktech.com/mcp/"
    }
  }
}

Python SDK

pip install kevros

Get an API key first (free, 1,000 calls/month):

curl -X POST https://governance.taskhawktech.com/signup \
  -H "Content-Type: application/json" \
  -d '{"agent_id": "my-agent"}'
# Returns: {"api_key": "kvrs_...", "tier": "free", "monthly_limit": 1000}

from kevros import KevrosClient

client = KevrosClient(api_key="kvrs_...")  # from signup above
result = client.verify(action="deploy", context={"target": "production"})
print(result)  # {'decision': 'ALLOW', 'release_token': '...', 'epoch': 42}

Tools (9)

Tool	Description	Price
`governance_verify`	Verify an action against policy	$0.01
`governance_attest`	Record hash-chained provenance	$0.02
`governance_bind`	Bind intent to command cryptographically	$0.02
`governance_verify_outcome`	Verify measured outcome against intent	Free
`governance_bundle`	Generate compliance evidence bundle	$0.05
`governance_health`	Health check	Free
`kevros_status`	API key status and usage	Free
`governance_check_peer`	Check peer agent reputation	Free
`governance_verify_token`	Verify a release token independently	Free

Resources (2)

kevros://agent-card - A2A agent discovery card
kevros://trust-status - Identity and trust status

Prompts (2)

verify-before-act - Pre-flight governance check template
governance-audit - Compliance audit bundle generator

Payment

Three payment protocols supported on all paid endpoints:

L402 (Lightning) - 15 sats per governance call (~$0.01)
x402 (USDC on Base) - $0.01 per call, 13 chain options
MPP (Stripe/Tempo) - Card, bank, or stablecoin

Free tier: 1,000 calls/month. Sign up at POST /signup with your agent ID. No credit card required.

Security

Post-quantum signatures: ML-DSA-87 (FIPS 204) + SLH-DSA-SHA2-256f (FIPS 205)
Hash-chained provenance ledger (append-only, independently verifiable)
OFAC sanctions screening on every on-chain payment
Fail-closed enforcement (deny on verification failure)
Formally verified: 1.94 billion states, 12 safety invariants, zero violations (TLA+)

License

MIT

kevros-mcp