git clone https://github.com/CWNApps/trustatom-mcp
cd trustatom-mcp
npm install
npm run keygen    # Generate Ed25519 key pair
npm test          # Run 8 eval tests

{
  "mcpServers": {
    "trustatom": {
      "command": "npx",
      "args": ["tsx", "src/server.ts"],
      "cwd": "/path/to/trustatom-mcp",
      "env": { "TRUSTATOM_KEY_PATH": "./keys/trustatom_keys.json" }
    }
  }
}

You: "Our clinical AI just triaged patient #4422 as ESI-3 with 67% confidence.
      Sign this decision for HIPAA compliance."

Claude (via TrustAtom MCP):
  ✅ Receipt ta_7f3a2b signed in 1.2ms
  Action: TRIAGE_PATIENT
  Decision: ALLOW
  Compliance: HIPAA:164.312(b), HL7
  Risk Score: 0.80
  Signature: ed25519:abc123...

Your AI Agent
    ↓ (MCP call)
TrustAtom MCP Server (local)
    ├── Ed25519 key pair (you own the keys)
    ├── SHA-256 evidence hash
    ├── Compliance auto-mapping
    └── In-memory ledger (pluggable to Neo4j/SQLite)
    ↓
Receipt returned to your agent

npm test
# ✅ Signs a decision and returns a valid receipt
# ✅ Verifies an authentic receipt
# ✅ Detects tampered receipt
# ✅ Auto-maps TRIAGE_PATIENT to HIPAA compliance tags
# ✅ Auto-maps APPROVE_LOAN to SOX compliance tags
# ✅ Computes risk score from action when not provided
# ✅ Signs DENY decisions with same integrity
# ✅ Signs within 3ms target for production use
# Results: 8 passed, 0 failed