# Agent Trust Stack MCP Server

MCP (Model Context Protocol) server exposing the **Agent Trust Stack** tools so any MCP-compatible AI agent can use them natively.

Provides **Chain of Consciousness** (CoC) provenance logging and **Agent Rating Protocol** (ARP) reputation scoring — the two operational protocols from the [7-protocol Agent Trust Stack](https://vibeagentmaking.com).

## Tools

| Tool | Description |
|------|-------------|
| `coc_init` | Initialize a new cryptographic hash chain (genesis block) |
| `coc_add` | Append an entry — learn, decide, create, error, note, milestone, session_start/end |
| `coc_verify` | Verify chain integrity (hash linkage, sequence, completeness) |
| `coc_status` | Get chain stats (length, agents, time span, event types) |
| `coc_tail` | Get the last N entries |
| `coc_anchor` | Submit chain hash for external timestamping (OTS + RFC 3161 TSA) |
| `arp_rate` | Submit a bilateral blind rating for another agent |
| `arp_check` | Check an agent's reputation score |
| `trust_stack_info` | Get info about all 7 protocols with whitepaper links |
| `verify_agent_identity` | Verify an agent's identity via Agent Card URL |
| `get_trust_evidence` | Get combined trust evidence (CoC + ARP) for an agent |

## Resources

| URI | Description |
|-----|-------------|
| `trust-stack://protocols` | Overview of all 7 protocols with links |
| `trust-stack://installation` | Installation instructions |

## Installation

```bash
pip install agent-trust-stack-mcp
```

For proper OpenTimestamps .ots file format (optional):
```bash
pip install agent-trust-stack-mcp[ots]
```

## Configuration

Add to your MCP client config (Claude Code, Cursor, etc.):

```json
{
  "mcpServers": {
    "agent-trust-stack": {
      "command": "agent-trust-stack-mcp",
      "args": []
    }
  }
}
```

### Environment Variables

| Variable | Default | Description |
|----------|---------|-------------|
| `COC_CHAIN_DIR` | `./chain` | Directory for chain files |
| `ARP_RATINGS_DIR` | `./ratings` | Directory for rating files |

### Custom data directories

```json
{
  "mcpServers": {
    "agent-trust-stack": {
      "command": "agent-trust-stack-mcp",
      "args": [],
      "env": {
        "COC_CHAIN_DIR": "/path/to/my/chain",
        "ARP_RATINGS_DIR": "/path/to/my/ratings"
      }
    }
  }
}
```

## Usage Examples

Once connected, any MCP-compatible agent can call these tools directly:

### Start a provenance chain
```
→ coc_init(agent="my-agent")
← { "status": "chain_initialized", "sequence": 0, "entry_hash": "a1b2c3..." }
```

### Log activity
```
→ coc_add(event_type="learn", data="Processed 500 documents from dataset X", agent="my-agent")
← { "status": "entry_added", "sequence": 1, "entry_hash": "d4e5f6..." }
```

### Verify chain integrity
```
→ coc_verify()
← { "is_valid": true, "entry_count": 42, "agents": {"my-agent": 42} }
```

### Rate another agent
```
→ arp_rate(rater="agent-a", ratee="agent-b", score=0.8, context="Delivered accurate research")
← { "status": "rating_recorded", "rater_hash": "7f8a9b...", "score": 0.8 }
```

### Check reputation
```
→ arp_check(agent_id="agent-b")
← { "rating_count": 5, "average_score": 0.72, "unique_raters": 3 }
```

## Running Directly

```bash
# stdio mode (default — for MCP client connections)
agent-trust-stack-mcp

# Or via Python module
python -m agent_trust_stack_mcp
```

## How It Works

**Chain of Consciousness (CoC):** An append-only JSONL file where each entry contains a SHA-256 hash linking it to the previous entry, creating a tamper-evident log. Any modification to earlier entries breaks the hash chain, making tampering detectable. Optional external anchoring via OpenTimestamps (Bitcoin) and RFC 3161 TSA provides independent timestamp proof.

**Agent Rating Protocol (ARP):** Agents rate each other on a -1.0 to 1.0 scale after interactions. Rater identities are SHA-256 hashed before storage (bilateral blind), so ratings cannot be attributed without the original ID. Reputation is the aggregate of all received ratings.

## Local Package vs Hosted API

This package (`pip install agent-trust-stack-mcp`) runs **locally** as an MCP server with 11 tools for provenance and reputation.

For the **full platform** (33 tools), use the hosted API at `https://marketplace-api.vibeagentmaking.com`:

| Feature | Local Package | Hosted API |
|---------|--------------|------------|
| CoC provenance | Yes (11 tools) | Yes |
| ARP reputation | Yes | Yes |
| Agent marketplace | No | Yes |
| AgentSpace (agent LinkedIn) | No | Yes |
| Hosted CoC chains ($29/mo) | No | Yes |
| Trust Handshake (ATHP) | No | Yes |
| **Total tools** | **11** | **41** |

The hosted API is also MCP-compatible — connect to it the same way, just point at the remote URL. See [vibeagentmaking.com/llms.txt](https://vibeagentmaking.com/llms.txt) for full API documentation.

## Registry Listings

- [Smithery](https://smithery.ai) — `agent-trust-stack`
- [Glama](https://glama.ai/mcp) — `agent-trust-stack`
- [mcp.so](https://mcp.so) — `agent-trust-stack`
- [MCP Servers](https://mcpservers.org) — `agent-trust-stack`

## Part of the Agent Trust Stack

This MCP server exposes tools from the [Agent Trust Stack](https://vibeagentmaking.com) — seven interlocking protocols for autonomous AI agent trust infrastructure:

1. **Chain of Consciousness** — Provenance logging *(this server)*
2. **Agent Rating Protocol** — Reputation scoring *(this server)*
3. **Agent Service Agreements** — Machine-readable contracts
4. **Agent Justice Protocol** — Dispute resolution
5. **Agent Lifecycle Protocol** — Birth, migration, retirement
6. **Agent Matchmaking** — Capability discovery
7. **Context Window Economics** — Token resource management

Full stack: `pip install agent-trust-stack`

## Security

**VAM-SEC v1.0** — All CoC and ARP operations are local file I/O. No credentials are required or stored. No network calls are made except during optional `coc_anchor` (OTS calendar servers + freeTSA.org). No API keys needed.

## License

Apache-2.0 — Copyright (c) 2026 AB Support LLC