hive-mcp-sigr — Signed inference Guarantee Receipt (SiGR™)

A remote MCP server that signs the things AI agents do — runs, billing, SLA bonds, and model-panel verdicts — with ML-DSA-65 (NIST FIPS 204). Every receipt is returned as a self-contained envelope you can verify offline, with no secret and no callback to us.

Most of what an AI agent does today is unsigned. When a run goes wrong, reconstruction takes weeks because nobody has the exact, ordered state the model saw before it acted. SiGR signs that state at the moment of the call. The receipt is the record.

Patent Pending. Hive Civilization.

• Remote endpoint: https://hive-mcp-sigr.onrender.com/mcp

• Transport: Streamable-HTTP, JSON-RPC 2.0, MCP 2024-11-05

• Upstream signer: https://hive-typed-signer.onrender.com

• Signature scheme: ML-DSA-65 (NIST FIPS 204), ~7 ms per signature

• Pricing: Build tier (first 1M receipts) free. Verify is always free. Full ladder at thehiveryiq.com/sigr/

Tools

Each sign tool returns the full signed envelope (ok, product, patent_pending, envelope, timing_us). The envelope carries the public_key, payload_digest, and envelope_signature needed to verify it later with verify_receipt or directly against the signer.

Related MCP server: Witnessed

Endpoints (upstream signer)

Connect

Claude Desktop / MCP client (remote)

{
  "mcpServers": {
    "hive-sigr": {
      "type": "streamable-http",
      "url": "https://hive-mcp-sigr.onrender.com/mcp"
    }
  }
}

List tools

curl -s -X POST https://hive-mcp-sigr.onrender.com/mcp \
  -H 'Content-Type: application/json' \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'

Call sign_chain (flagship)

curl -s -X POST https://hive-mcp-sigr.onrender.com/mcp \
  -H 'Content-Type: application/json' \
  -d '{"jsonrpc":"2.0","id":2,"method":"tools/call","params":{"name":"sign_chain","arguments":{"run":{"run_id":"run-1","agent_ref":"research-agent-v2","steps":[{"step_id":"s1","kind":"plan","seq":0,"parents":[],"input":{"goal":"compare"},"output":{"plan":["a","b"]}},{"step_id":"s2","kind":"final","seq":1,"parents":["s1"],"input":{"r":"A"},"output":{"answer":"done"}}]}}}}'

Verify a receipt (free)

curl -s -X POST https://hive-mcp-sigr.onrender.com/mcp \
  -H 'Content-Type: application/json' \
  -d '{"jsonrpc":"2.0","id":3,"method":"tools/call","params":{"name":"verify_receipt","arguments":{"product":"chain","envelope":{ /* paste the envelope from sign_chain */ }}}}'

Run it yourself

npm install
node server.js
# -> [hive-mcp-sigr] v1.0.0 listening on :3000 -> https://hive-typed-signer.onrender.com

Environment:

Policy

Inbound only. Never takes custody of keys or funds. Signing only — your payload is signed and returned; we do not store it.

Settlement for paid tiers is USDC on Base. Verify is always free.

MIT © 2026 Steve Rotzin / Hive Civilization · thehiveryiq.com