Kevros MCP Server

Runtime intelligence for autonomous AI agents. Verify actions against policy, record hash-chained provenance, and bind intents cryptographically.

Quick Start

No installation required. Connect directly to the hosted server:

https://governance.taskhawktech.com/mcp/

Claude Desktop / Claude Code

Add to your MCP settings:

{
  "mcpServers": {
    "kevros": {
      "url": "https://governance.taskhawktech.com/mcp/"
    }
  }
}

Python SDK

pip install kevros

Get an API key first (free, 1,000 calls/month):

curl -X POST https://governance.taskhawktech.com/signup \
  -H "Content-Type: application/json" \
  -d '{"agent_id": "my-agent"}'
# Returns: {"api_key": "kvrs_...", "tier": "free", "monthly_limit": 1000}

from kevros import KevrosClient

client = KevrosClient(api_key="kvrs_...")  # from signup above
result = client.verify(action="deploy", context={"target": "production"})
print(result)  # {'decision': 'ALLOW', 'release_token': '...', 'epoch': 42}

Tools (9)

Resources (2)

• kevros://agent-card - A2A agent discovery card

• kevros://trust-status - Identity and trust status

Prompts (2)

• verify-before-act - Pre-flight governance check template

• governance-audit - Compliance audit bundle generator

Payment

Three payment protocols supported on all paid endpoints:

• L402 (Lightning) - 15 sats per governance call (~$0.01)

• x402 (USDC on Base) - $0.01 per call, 13 chain options

• MPP (Stripe/Tempo) - Card, bank, or stablecoin

Free tier: 1,000 calls/month. Sign up at POST /signup with your agent ID. No credit card required.

Security

• Post-quantum signatures: ML-DSA-87 (FIPS 204) + SLH-DSA-SHA2-256f (FIPS 205)

• Hash-chained provenance ledger (append-only, independently verifiable)

• OFAC sanctions screening on every on-chain payment

• Fail-closed enforcement (deny on verification failure)

• Formally verified: 1.94 billion states, 12 safety invariants, zero violations (TLA+)

License

MIT