How do I use hive-mcp-sigr?

1. Click on "Install Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@hive-mcp-sigr Sign the latest agent run for audit record" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

hive-mcp-sigr

by srotzin

Overview Schema Related Servers Score Discussions

JavaScript

Remote

hive-mcp-sigr: Signed inference Guarantee Receipt (SiGR™)

A remote MCP server that signs the things AI agents do (runs, billing, SLA bonds, and model-panel verdicts) with ML-DSA-65 (NIST FIPS 204). Every receipt is returned as a self-contained envelope you can verify offline, with no secret and no callback to us.

Most of what an AI agent does today is unsigned. When a run goes wrong, reconstruction takes weeks because nobody has the exact, ordered state the model saw before it acted. SiGR signs that state at the moment of the call. The receipt is the record.

Patent Pending. Hive Civilization.

Remote endpoint: https://hive-mcp-sigr.onrender.com/mcp
Transport: Streamable-HTTP, JSON-RPC 2.0, MCP 2024-11-05
Upstream signer: https://hive-typed-signer.onrender.com
Signature scheme: ML-DSA-65 (NIST FIPS 204), ~7 ms per signature
Pricing: Build tier (first 1M receipts) free. Verify is always free. Full ladder at thehiveryiq.com/sigr/

Tools

This tool set is reconciled against the live upstream signer (GET / on HIVE_SIGNER_URL): every tool below maps 1:1 to a route that actually exists upstream. No tool advertises a capability the upstream doesn't support.

Tool	What it signs	Docket	Required input
`sign_chain`	A multi-step agent run, each step sealed to its causal parents with a `causal_root` (flagship)	HC-2026-006	`run`
`sign_bill`	An inference cost / billing receipt (tokens, backend, prices)	HC-2026-004	`request`
`sign_bond`	An SLA performance bond (latency ceiling, uptime floor, penalty)	HC-2026-005	`terms`
`sign_consensus`	A model-panel verdict (member digests, scores, method)	HC-2026-007	`panel`, `method`, `members`
`sign_mir`	Model-Identity & Relineage: binds served-model lineage across steps, detects substitution (asserts identity only)	HC-2026-023	`mir`
`sign_gca`	Grounding-Claim Attestation: per-claim receipt proving a claim was supported by cited evidence (proves support, not truth)	HC-2026-024	`grounding_claims`
`sign_gitm`	Ghost-in-the-Machine cross-signal anomaly flag (asserts a provenance anomaly only, not misbehavior)	HC-2026-025	`gitm` or `mir_receipt`
`sign_cachesign`	AFiR KV Cache Signing: signs vLLM prefix cache entries at write time	HC-2026-026	`cache`
`sign_manifest`	AFiR Model Manifest: TEE-less streaming model attestation	HC-2026-027	`manifest`
`verify_receipt`	Verifies any SiGR envelope offline (always free)	(none)	`product`, `envelope`
`upstream_gate`	Refuses an action unless every required upstream pre-effect receipt (PBS, Refusal Ledger, Howler, Perimeter Bond, Diurnal Bond, Egress Bond, Forensic Rail) verifies fresh	HC-2026-016..022	`required[]`
`get_upstream_catalog`	Returns the full USAP catalog: fifteen upstream receipt types, routes, TTLs, body shapes (free)	(none)	(none)
`get_pubkey`	Returns the ML-DSA-65 public key + issuer metadata	(none)	(none)

Each sign tool returns the full signed envelope (ok, product, patent_pending, envelope, timing_us). The envelope carries the public_key, payload_digest, and envelope_signature needed to verify it later with verify_receipt or directly against the signer.

Tool <-> upstream route map (audit trail)

Tool	Upstream route	Verified live
`sign_chain`	`POST /sigr/chain`	400 on empty body (route exists)
`sign_bill`	`POST /sigr/bill`	400 on empty body (route exists)
`sign_bond`	`POST /sigr/bond`	400 on empty body (route exists)
`sign_consensus`	`POST /sigr/consensus`	400 on empty body (route exists)
`sign_mir`	`POST /sigr/mir`	400 on empty body (route exists)
`sign_gca`	`POST /sigr/gca`	400 on empty body (route exists)
`sign_gitm`	`POST /sigr/gitm`	400 on empty body (route exists)
`sign_cachesign`	`POST /sigr/cachesign`	400 on empty body (route exists)
`sign_manifest`	`POST /sigr/manifest`	400 on empty body (route exists)
`verify_receipt`	`POST /sigr/{product}/verify`	route family exists for all products above
`upstream_gate`	`POST /sigr/upstream/gate`	400 on empty body (route exists)
`get_upstream_catalog`	`GET /sigr/upstream`	200, returns full catalog
`get_pubkey`	`GET /pubkey`	200

Previously this README and server advertised a narrower or looser tool set that didn't match the live upstream (for example, missing mir and upstream/gate, which are real upstream routes). This has been corrected: every advertised tool is backed by a real route, and every real product-family route on the upstream signer is now exposed as a tool.

Related MCP server: Witnessed

Endpoints (upstream signer)

Endpoint	Method	Purpose
`/sigr/chain`	POST	Sign an agent run
`/sigr/bill`	POST	Sign a billing receipt
`/sigr/bond`	POST	Sign an SLA bond
`/sigr/consensus`	POST	Sign a panel verdict
`/sigr/mir`	POST	Sign a model-identity and relineage receipt
`/sigr/gca`	POST	Sign a grounding-claim attestation
`/sigr/gitm`	POST	Sign a cross-signal anomaly flag
`/sigr/cachesign`	POST	Sign a KV-cache write receipt
`/sigr/manifest`	POST	Sign a streaming model manifest
`/sigr/upstream`	GET	USAP pre-effect catalog (free)
`/sigr/upstream/gate`	POST	Gate an action on required pre-effect receipts
`/sigr/{product}/verify`	POST	Verify an envelope (free)
`/pubkey`	GET	ML-DSA-65 public key

Connect

Claude Desktop / MCP client (remote)

{
  "mcpServers": {
    "hive-sigr": {
      "type": "streamable-http",
      "url": "https://hive-mcp-sigr.onrender.com/mcp"
    }
  }
}

List tools

curl -s -X POST https://hive-mcp-sigr.onrender.com/mcp \
  -H 'Content-Type: application/json' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Call `sign_chain` (flagship)

curl -s -X POST https://hive-mcp-sigr.onrender.com/mcp \
  -H 'Content-Type: application/json' \
  -d '{"jsonrpc":"2.0","id":2,"method":"tools/call","params":{"name":"sign_chain","arguments":{"run":{"run_id":"run-1","agent_ref":"research-agent-v2","steps":[{"step_id":"s1","kind":"plan","seq":0,"parents":[],"input":{"goal":"compare"},"output":{"plan":["a","b"]}},{"step_id":"s2","kind":"final","seq":1,"parents":["s1"],"input":{"r":"A"},"output":{"answer":"done"}}]}}}}'

Verify a receipt (free)

curl -s -X POST https://hive-mcp-sigr.onrender.com/mcp \
  -H 'Content-Type: application/json' \
  -d '{"jsonrpc":"2.0","id":3,"method":"tools/call","params":{"name":"verify_receipt","arguments":{"product":"chain","envelope":{ /* paste the envelope from sign_chain */ }}}}'

Run it yourself

npm install
node server.js
# -> [hive-mcp-sigr] v1.0.0 listening on :3000, upstream https://hive-typed-signer.onrender.com

Environment:

Var	Default	Notes
`PORT`	`3000`	HTTP port
`ENABLE`	`true`	Set `false` to run health-only
`HIVE_SIGNER_URL`	`https://hive-typed-signer.onrender.com`	Upstream signer base

Policy

Inbound only. Never takes custody of keys or funds. Signing only: your payload is signed and returned; we do not store it.

Settlement for paid tiers is USDC on Base. Verify is always free.

This server cannot be installed

license - permissive license

quality - not tested

maintenance

How are these scores calculated?

Maintenance

–Maintainers

–Response time

–Release cycle

1Releases (12mo)

Commit activity

Resources

GitHub Repository

Need Help?

Related Servers

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

Agent Identity Protocol (AIP)
Autonomous Agents Security
faalantir
A
license
-
quality
D
maintenance
Provides cryptographic identity and signing capabilities for AI agents, enabling them to create persistent identities, sign actions with private keys, and allow external systems to verify the authenticity and provenance of agent-initiated operations.
Updated 9 months ago (2025-11-30 23:51 UTC)
4
MIT
Witnessed
Security Autonomous Agents
medtekki
A
license
-
quality
B
maintenance
Verifiable action receipts for AI agents — agents sign claims locally, an independent witness countersigns and timestamps, anyone can verify offline.
Updated 2 months ago (2026-06-09 21:25 UTC)
14
MIT
hive-mcp-spire
srotzin
A
license
-
quality
A
maintenance
Provides tools to sign and verify post-quantum attestations of AI agent actions (mint, trajectory, coherence) using ML-DSA-65 signatures, with offline verification always free.
Updated 14 days ago (2026-08-04 20:51 UTC)
MIT
garlofficial
Security Blockchain Agent Orchestration
Garl-Protocol
A
license
-
quality
C
maintenance
Cryptographic verification for AI agent actions — ECDSA-secp256k1 signed Action Receipts anchored on Base, multi-dimensional trust vectors, capability tokens, and offline-verifiable on-chain proof. 29 tools.
Updated 15 days ago (2026-08-03 21:19 UTC)
3
Apache 2.0

View all related MCP servers

Related MCP Connectors

Trust Gate
Post-quantum, tamper-evident receipts for agent actions. Ed25519 + ML-DSA-65, offline verify.
mcp
Issue signed receipts for AI agent actions; verify any receipt offline - free, no account.
HiveAttest
Pre-action attestation perimeter for AI agents — 8 primitives, signed C18 receipt per call.

View all MCP Connectors

Latest Blog Posts

Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)
By Om-Shree-0709 on July 25, 2026.
mcp
Agent Identity
OAuth 2.1
Your AI Chatbot Just Exposed Your CEO's Salary to an Intern
By Om-Shree-0709 on July 2, 2026.
Agent Identity
MCP Security
OAuth Delegation
Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)
By Om-Shree-0709 on June 30, 2026.
Agentic Ai
Prompt Injection
WebAssembly

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/srotzin/hive-mcp-sigr'

If you have feedback or need assistance with the MCP directory API, please join our Discord server