Skip to main content
Glama
arults

ActSeal MCP

ActSeal MCP

stdio MCP server for ActSeal — Ed25519-signed receipts for agent actions.

Tool

Purpose

issue_receipt

POST /v1/receipt — action + inputs_hash + outputs_hash (+ optional policy_id, idempotency_key)

verify_receipt

GET /v1/verify/:id — public verify

Honesty: best-effort signed log. Not legal evidence, not SOC2, not custody, not e-sign. Free 100 receipts/API-key/UTC-day; Starter $19/mo in USDC/USDT/ETH at https://actseal.xyz/pay.

Env

Var

Required

Example

ACTSEAL_BASE

yes*

https://actseal.xyz

ACTSEAL_API_KEY

yes*

free key via https://actseal.xyz/get-key

* Legacy ACTIONRECEIPT_BASE / ACTIONRECEIPT_API_KEY still accepted.

Related MCP server: actionproof

Run

pnpm install
export ACTSEAL_BASE=https://actseal.xyz
export ACTSEAL_API_KEY=as_…
pnpm start

Cursor / Claude Desktop

{
  "mcpServers": {
    "actseal": {
      "command": "npx",
      "args": ["--yes", "tsx", "/ABSOLUTE/PATH/actseal-mcp/src/index.ts"],
      "env": {
        "ACTSEAL_BASE": "https://actseal.xyz",
        "ACTSEAL_API_KEY": "YOUR_KEY"
      }
    }
  }
}

Docker / Glama

docker build -t actseal-mcp .
docker run -i --rm \
  -e ACTSEAL_BASE=https://actseal.xyz \
  -e ACTSEAL_API_KEY=YOUR_KEY \
  actseal-mcp

Glama listing: https://glama.ai/mcp/servers/arults/actseal-mcp (after submit + score). glama.json lists maintainer arults.

Available Tools

2 tools
issue_receiptIssue ActSealA

Issue an Ed25519-signed ActSeal receipt for a tool action. Pass SHA-256 hex hashes of inputs/outputs — never raw secrets. Optional Idempotency-Key. Free tier only; x402 not live.

NameRequiredDescriptionDefault
actionYesShort action name, e.g. tools.web_search
policy_idNoOptional policy / run id label
inputs_hashYesSHA-256 of canonical inputs JSON
outputs_hashYesSHA-256 of canonical outputs JSON
idempotency_keyNoOptional Idempotency-Key (24h TTL on server)

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only say readOnlyHint=false and openWorldHint=true; the description adds that the receipt is Ed25519-signed, that billing is free-tier-only with x402 not yet live, and that an Idempotency-Key is supported. It stops short of describing auth requirements or what the signed receipt contains, but contributes meaningful context beyond the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three short sentences, front-loaded with the core action, then the key call constraint, then availability. No filler and nothing buried.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 5-param mutation tool with no output schema, the definition covers the critical do-not-do (raw secrets), idempotency, and availability. The remaining gap is that it never indicates what comes back from issuing — a receipt id/object — which would help an agent chain into verify_receipt.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is already 100%, so the baseline is 3; the description earns a bump by adding the safety-critical semantic that hashes must be of canonical inputs/outputs and never raw secrets, which is guidance the schema's pattern alone doesn't convey.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: 'Issue an Ed25519-signed ActSeal receipt for a tool action.' The issue-vs-verify split against the sibling verify_receipt is obvious from the verb, but the description never names or contrasts the sibling explicitly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

'Pass SHA-256 hex hashes of inputs/outputs — never raw secrets' gives a real usage constraint, and 'Free tier only; x402 not live' signals availability. However, it doesn't say when to reach for this versus verify_receipt, nor any prerequisite/auth conditions for calling it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

verify_receiptVerify ActSealA
Read-only

Verify a receipt by id (public). Returns valid/invalid, receipt payload, and issuer public key.

NameRequiredDescriptionDefault
idYesReceipt id from issue_receipt

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint and openWorldHint, so the description's added value is disclosing the response contents (valid/invalid, receipt payload, issuer public key) and the public/no-auth access condition. It stops short of explaining what an invalid verdict implies or how verification is performed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short sentences with zero filler; the operation and its access scope come first, followed by the expected outputs.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-parameter read-only tool with no output schema, the description covers the operation, access model, and return contents. It could say more about the shape or meaning of the payload field, but an agent has enough to call it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and already documents the id pattern and its origin in issue_receipt. The description only restates 'by id' without adding format or constraint detail beyond the schema, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource (verify a receipt by id), and 'verify' contrasts naturally with the sibling issue_receipt. It does not explicitly name the sibling or spell out the boundary, so it falls short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

'(public)' implies no authentication is needed, which is useful context, but there is no explicit statement of when to use this versus issue_receipt or any other verification path. Usage is inferable rather than stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 2 tool updatesv0.1.0
    • First observedissue_receipt
    • First observedverify_receipt

TDQS

A4.1/5.0

Scored across 2 tools

Disambiguation5/5

issue_receipt and verify_receipt have clearly opposite, non-overlapping purposes (creation vs. validation), and the descriptions reinforce the distinction. An agent can select between them with no ambiguity.

Naming Consistency5/5

Both tools follow the same snake_case verb_noun pattern (issue_receipt, verify_receipt). The naming is fully predictable and symmetric.

Tool Count4/5

Two tools is thin for a general-purpose server, but for the narrow domain of issuing and verifying signed receipts the pair is reasonably scoped. It sits just under the typical comfortable range rather than being an extreme mismatch.

Completeness4/5

The core lifecycle (issue then verify) is fully covered with no dead ends for the primary workflow. Minor gaps exist, such as listing receipts or revoking/invalidating one, which agents would have to work around.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to sign and verify actions with ML-DSA-65 digital signatures, providing tamper-proof receipts that can be verified offline without any secrets.
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Gives AI agents verifiable, tamper-evident receipts for their actions — attest_action signs a cryptographic receipt for what the agent did (email sent, payment made, form filed), verify_receipt checks it offline, get_identity returns the agent's did:key. Sign locally, verify anywhere, zero backend.
    3
    29 npm
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Provides tools to issue, verify, and export cryptographically signed receipts for AI agent actions, enabling tamper-proof audit trails for compliance with regulations like the EU AI Act.
    4
    35 npm
    1
    MIT
  • F
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to validate deliverables (JSON, ZIP, PDF, DOCX) against signed contracts, generating verifiable receipts with Ed25519 signatures.
    -