# Agent Audit Trail MCP Server

Immutable audit logging for AI agents with hash-chained event logs, integrity verification, and EU AI Act compliance reporting.

## Why This Matters

The **EU AI Act** (effective August 2026) requires high-risk AI systems to maintain detailed logs of their operations. Article 12 mandates automatic recording of events for the entire lifecycle of high-risk AI systems.

This MCP server provides:

- **Tamper-proof logging** — Each event includes the SHA-256 hash of the previous entry, forming an unbreakable chain
- **Integrity verification** — Detect if any log entries have been modified, deleted, or reordered
- **Compliance reports** — Export audit trails in JSON or human-readable format for regulators
- **Cross-agent search** — Search events across all agents by keyword, type, or agent ID
- **Statistics** — Event rates, error rates, and action frequency analysis

## How Hash Chain Integrity Works

```
Entry 1: { data, prev_hash: "000...000", hash: "abc123..." }
Entry 2: { data, prev_hash: "abc123...", hash: "def456..." }
Entry 3: { data, prev_hash: "def456...", hash: "ghi789..." }
```

If any entry is modified, its hash changes, breaking the chain for all subsequent entries. The `verify_integrity` tool detects this immediately.

## Installation

```bash
pip install agent-audit-trail-mcp
```

## Configuration

Add to your MCP client config (e.g. Claude Desktop):

```json
{
  "mcpServers": {
    "audit-trail": {
      "command": "audit-trail-server"
    }
  }
}
```

Or with uvx (no install needed):

```json
{
  "mcpServers": {
    "audit-trail": {
      "command": "uvx",
      "args": ["agent-audit-trail-mcp"]
    }
  }
}
```

## Tools

| Tool | Description |
|------|-------------|
| `log_event` | Log an immutable audit event with timestamp and hash chain |
| `get_trail` | Retrieve audit trail for an agent (newest first) |
| `verify_integrity` | Verify the hash chain is intact (no tampering) |
| `export_report` | Export audit trail as compliance report (JSON or text) |
| `search_events` | Search across all audit events by keyword |
| `get_statistics` | Get audit statistics (events/day, error rate, top actions) |

## Data Storage

Audit logs are stored in `~/.agent-audit-trail/` as append-only JSONL files (one per agent). Each line is a JSON object with:

- `timestamp` — ISO 8601 UTC timestamp
- `agent_id` — Which agent performed the action
- `event_type` — Category (decision, action, error, access, data_processing)
- `action` — What was done
- `details` — Full description
- `outcome` — Result of the action
- `prev_hash` — SHA-256 hash of the previous entry
- `hash` — SHA-256 hash of this entry


---

## More MCP Servers by AiAgentKarl

| Category | Servers |
|----------|---------|
| 🔗 Blockchain | [Solana](https://github.com/AiAgentKarl/solana-mcp-server) |
| 🌍 Data | [Weather](https://github.com/AiAgentKarl/weather-mcp-server) · [Germany](https://github.com/AiAgentKarl/germany-mcp-server) · [Agriculture](https://github.com/AiAgentKarl/agriculture-mcp-server) · [Space](https://github.com/AiAgentKarl/space-mcp-server) · [Aviation](https://github.com/AiAgentKarl/aviation-mcp-server) · [EU Companies](https://github.com/AiAgentKarl/eu-company-mcp-server) |
| 🔒 Security | [Cybersecurity](https://github.com/AiAgentKarl/cybersecurity-mcp-server) · [Policy Gateway](https://github.com/AiAgentKarl/agent-policy-gateway-mcp) · [Audit Trail](https://github.com/AiAgentKarl/agent-audit-trail-mcp) |
| 🤖 Agent Infra | [Memory](https://github.com/AiAgentKarl/agent-memory-mcp-server) · [Directory](https://github.com/AiAgentKarl/agent-directory-mcp-server) · [Hub](https://github.com/AiAgentKarl/mcp-appstore-server) · [Reputation](https://github.com/AiAgentKarl/agent-reputation-mcp-server) |
| 🔬 Research | [Academic](https://github.com/AiAgentKarl/crossref-academic-mcp-server) · [LLM Benchmark](https://github.com/AiAgentKarl/llm-benchmark-mcp-server) · [Legal](https://github.com/AiAgentKarl/legal-court-mcp-server) |

[→ Full catalog (40+ servers)](https://github.com/AiAgentKarl)

## License

MIT