Skip to main content
Glama
srotzin

hive-mcp-spire

by srotzin
OverviewSchemaRelated ServersScoreDiscussions
JavaScript
Remote

hive-mcp-spire — SPIRE Attestation (AFiR) MCP Server

A record a party keeps about itself is not evidence; it is a claim. SPIRE issues an independent, tamper-evident, offline-verifiable attestation of what an AI agent actually did.

SPIRE is the attestation surface of the AFiR Protection Program from Hive Civilization. Every attestation is signed with ML-DSA-65 (NIST FIPS 204) — a post-quantum signature — by the Hive typed signer, and is verifiable offline with the returned envelope. No secret is needed to verify; anyone can check an attestation against the published public key.

Patent Pending. MIT licensed. Build tier (first 1M attestations) free; verify is always free.

Tools

Tool

What it seals

Pass

sign_mint

Constitutional agent-instance mint (Atom 1) — instance binding, granted authority, custody terms. No-self-attest custody, decaying authority, non-transferable binding.

mint: {instance_id, agent_ref, authority, granted_at, decay, custodian_ref}

sign_trajectory

Agent trajectory (Atom 2) — ordered causal edges, with a trajectory root distinct from the content root. Proves the path the agent took, not just its outputs.

trajectory: {run_id, agent_ref, edges:[{from, to, seq, cause}]}

sign_coherence

Coherence attestation (Atom 3, lead claim) — aggregate trajectory-drift. Attests coherence (stayed within mandate), not correctness; supports verifier-side correctness-refusal.

coherence: {run_id, agent_ref, drift_score, window, mandate_ref}

verify_attestation

Verify any signed SPIRE attestation offline. Returns {valid, reasons[], scheme, ...}. Always free.

attestation: the full object returned by any sign tool (carries envelope + fragments_canon)

get_pubkey

The ML-DSA-65 (FIPS 204) public key + issuer DID + spec, for offline verification. Free.

—

Each sign tool returns a signed afir.attestation object (the ML-DSA-65 envelope plus its canonical fragments_canon). Hand that whole object to verify_attestation (or to any offline ML-DSA-65 verifier with the published key) to independently confirm it.

Related MCP server: Cryptair MCP Server

Endpoints

Method

Path

Purpose

GET

/health

Liveness

GET

/

Service descriptor + atom map

POST

/mcp

MCP JSON-RPC 2.0 (initialize, tools/list, tools/call, ping)

GET

/.well-known/mcp.json

MCP discovery manifest

GET

/.well-known/agent.json

A2A agent card

Transport: Streamable-HTTP. Protocol: MCP 2024-11-05. Inbound only — the server never holds custody; it relays typed fragments to the Hive signer and returns the signed envelope.

Upstream signer: https://hive-typed-signer.onrender.com (override with HIVE_SIGNER_URL).

Connect

Hosted (recommended): point your MCP client at

https://hive-mcp-spire.onrender.com/mcp

Smithery: smithery.ai/new?repo=srotzin/hive-mcp-spire

Local:

git clone https://github.com/srotzin/hive-mcp-spire.git
cd hive-mcp-spire
npm install
node server.js     # listens on :3000

Quick check:

curl -s http://localhost:3000/health
curl -s -X POST http://localhost:3000/mcp -H 'Content-Type: application/json' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Environment

Var

Default

Purpose

PORT

3000

Listen port

ENABLE

true

Set false for a dormant health-only instance

HIVE_SIGNER_URL

https://hive-typed-signer.onrender.com

Upstream typed signer

Why this exists

Self-reported logs are a claim. When an AI agent acts — mints an instance, takes a path, stays within a mandate — the counterparty needs proof that does not depend on trusting the actor's own records. SPIRE binds the exact state into a post-quantum signature that anyone can verify offline, forever, without phoning home.

Part of the Hive Civilization agent economy. © 2026 Steve Rotzin / Hive Civilization. MIT.

This server cannot be installed

A
license - permissive license
-
quality - not tested
B
maintenance

How are these scores calculated?

Maintenance

–Maintainers
–Response time
0dRelease cycle
2Releases (12mo)
Commit activity

Resources

Related MCP Servers

  • PiQrypt MCP Server

    PiQrypt
    A
    license
    A
    quality
    A
    maintenance
    Enables AI agents to sign decisions with post-quantum cryptographic proofs and maintain secure audit trails for compliance. It provides tools for stamping events, verifying chain integrity, and exporting audit data across industries like finance and healthcare.
    Last updated
    4
    110
    MIT

  • Cryptair MCP Server

    Syronius
    A
    license
    A
    quality
    D
    maintenance
    Enables AI agents to certify documents, prove agreements, and verify counterparty claims with on-chain receipts on Hedera Hashgraph. Provides tools for document certification, two-party attestation, and agent registration with zero-config setup.
    Last updated
    6
    77
    MIT

  • Mark Reynolds

    m-reynaldo35
    A
    license
    -
    quality
    B
    maintenance
    Post-quantum document anchoring for AI agents. Anchor any SHA-256 hash to Algorand mainnet with ML-DSA-65 (NIST FIPS-204) signatures and receive a self-contained proof bundle verifiable offline — decades from now, without trusting any vendor.
    Last updated
    6
    MIT

  • hive-mcp-sigr

    srotzin
    A
    license
    -
    quality
    B
    maintenance
    Enables AI agents to sign and verify actions with ML-DSA-65 digital signatures, providing tamper-proof receipts that can be verified offline without any secrets.
    Last updated
    MIT

View all related MCP servers

Related MCP Connectors

View all MCP Connectors

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/srotzin/hive-mcp-spire'

If you have feedback or need assistance with the MCP directory API, please join our Discord server