Skip to main content
Glama
Sign In
RCO Records

RCO Records

by allooloo
OverviewSchemaSourceRelated ServersDiscussionsAdmin
JavaScript
Remote

RCO Records — Record of Cleared Orders

RCO — the record of what the agent relied on. Every read, receipted.

Every answer the Allooloo record gives a regulated agent is receipted: one signed receipt per cleared read, chained to the one before, verifiable by anyone against a published key. The receipt is the agent's alibi.

Standard held by Allooloo Technologies Corp. · Open standard, MIT licence. — https://allooloo.ai

What is in this repository

Path

What

SPEC.md

Receipt v1 — the frozen spec — and the v0 history format

sdk/typescript/verify.ts

reference verify(), verifyChain(), carry() — WebCrypto only

sdk/python/rco_verify.py

reference verify(), verify_chain() — needs cryptography

sdk/go/verify.go

reference Verify() — standard library only

worker/, public/, wrangler.toml, schema.sql, rails/

the door as it runs (Cloudflare Worker + D1)

The spec and the reference verify() ship under MIT (LICENSE). Nothing else is licensed: the chain, the keys, the door and the Register are operated by Allooloo, not licensed.

Related MCP server: APEX PSI MCP Server

Verify a receipt

node sdk/typescript/cli.ts rco:4xvpzgxxmno5bfxxmv5h
python sdk/python/rco_verify.py rco:4xvpzgxxmno5bfxxmv5h

verify(receipt, jwks) is a pure function: recompute hash (and id for v1), check sig against kid. A receipt verifies forever without asking Allooloo anything.

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivityMaintained
ResponsivenessNo issues

Resources

Related MCP Connectors

Related MCP Servers

  • agent-receipts-mcp

    dhanushs1912-svg
    A
    license
    A
    quality
    C
    maintenance
    Provides tools to issue, verify, and export cryptographically signed receipts for AI agent actions, enabling tamper-proof audit trails for compliance with regulations like the EU AI Act.
    4
    53 npm
    1
    MIT

  • APEX PSI MCP Server

    kawal393
    A
    license
    A
    quality
    B
    maintenance
    Append-only evidence receipts for AI records: seal, verify, cite, chain-check, anchor status. A seal proves a record existed at a time, not that its contents are true. Five tools over stdio with npx -y apex-psi-mcp — no account, no key, verification free forever.
    5
    316 npm
    1
    MIT

  • pcrzero-mcp

    Scytalex-LLC
    A
    license
    Not graded
    quality
    B
    maintenance
    Issue and verify signed receipts for agent actions, enabling durable, independently checkable proof of policy decisions. Supports offline verification via get_keyset and verify_receipt tools without an account.
    0
    Inno Setup

  • agenticrail-mcp

    MSMD-RUA
    A
    license
    Not graded
    quality
    B
    maintenance
    Provides tools to evaluate an AI agent's step before execution, returning signed ALLOW/DENY receipts, and to verify receipt chain integrity.
    Apache 2.0