Agent Audit Trail MCP Server

Immutable audit logging for AI agents with hash-chained event logs, integrity verification, and EU AI Act compliance reporting.

Why This Matters

The EU AI Act (effective August 2026) requires high-risk AI systems to maintain detailed logs of their operations. Article 12 mandates automatic recording of events for the entire lifecycle of high-risk AI systems.

This MCP server provides:

• Tamper-proof logging — Each event includes the SHA-256 hash of the previous entry, forming an unbreakable chain

• Integrity verification — Detect if any log entries have been modified, deleted, or reordered

• Compliance reports — Export audit trails in JSON or human-readable format for regulators

• Cross-agent search — Search events across all agents by keyword, type, or agent ID

• Statistics — Event rates, error rates, and action frequency analysis

How Hash Chain Integrity Works

Entry 1: { data, prev_hash: "000...000", hash: "abc123..." }
Entry 2: { data, prev_hash: "abc123...", hash: "def456..." }
Entry 3: { data, prev_hash: "def456...", hash: "ghi789..." }

If any entry is modified, its hash changes, breaking the chain for all subsequent entries. The verify_integrity tool detects this immediately.

Installation

pip install agent-audit-trail-mcp

Configuration

Add to your MCP client config (e.g. Claude Desktop):

{
  "mcpServers": {
    "audit-trail": {
      "command": "audit-trail-server"
    }
  }
}

Or with uvx (no install needed):

{
  "mcpServers": {
    "audit-trail": {
      "command": "uvx",
      "args": ["agent-audit-trail-mcp"]
    }
  }
}

Tools

Data Storage

Audit logs are stored in ~/.agent-audit-trail/ as append-only JSONL files (one per agent). Each line is a JSON object with:

• timestamp — ISO 8601 UTC timestamp

• agent_id — Which agent performed the action

• event_type — Category (decision, action, error, access, data_processing)

• action — What was done

• details — Full description

• outcome — Result of the action

• prev_hash — SHA-256 hash of the previous entry

• hash — SHA-256 hash of this entry

More MCP Servers by AiAgentKarl

→ Full catalog (40+ servers)

License

MIT