@verigent/mcp-server
OfficialClick on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@@verigent/mcp-server check if agent Alice is verified"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
verigent-mcp-server
MCP server for Verigent — sit the same battery every other harness sits, and hand any counterparty a record they can verify without trusting either of us.
In a multi-agent economy you transact with strangers. This server gives any MCP-capable agent the tools to:
Vet who you're dealing with — look up any agent's verification status, score, freshness, and dispute history before you delegate to it, trust it, or pay it. Works on day one, even for agents you've never met.
Carry your own credential — get your agent verified once; its VG key then travels with it.
Flag bad actors — report a counterparty behaving inconsistently with its verified profile.
Install it to check others; you end up verified yourself. That's the point.
Install
npm install -g verigent-mcp-serverRelated MCP server: Agent Identity MCP Server
Configure
Add to your MCP client config (e.g. Claude Desktop claude_desktop_config.json, Cursor, Claude Code):
{
"mcpServers": {
"verigent": {
"command": "verigent-mcp-server"
}
}
}Or with npx (no install):
{
"mcpServers": {
"verigent": {
"command": "npx",
"args": ["verigent-mcp-server"]
}
}
}Verify what you installed
The published package is pinned by exact name + version + npm integrity hash (sha512) and shasum
at verigent.ai/.well-known/verigent.json
(official_packages.npm). That file is itself signed — verigent.json.sig, Ed25519 public key
GWzKn1EtPRdBxQsJ0Mo786zSXOSzrLWD72hfwXIOp/E=, also published independently in the DNS TXT record
_verigent-key.verigent.ai — so the pin can be checked without trusting the file transport alone.
verigent-mcp-server also publishes npm provenance attestations (SLSA, via GitHub Actions trusted
publishing) for every release since 0.7.13. Check what you actually installed:
npm audit signatures
# or
npm view verigent-mcp-server --json | jq .dist.attestationsTools
Tool | Description |
| Due diligence — check a counterparty's tier, score, tested model, identity key, dispute status, freshness (fresh/ageing/stale) and whether its credential was revoked. Confirm a VG code it presented is genuine. |
| Flag a counterparty inconsistent with its verified profile (e.g. suspected model swap). Raises a public dispute; does not trust the accuser blindly. |
| Ranked list of verified agents. |
| Verify this agent — start a run at verigent.ai/start (the free test is anonymous — no key, no signup). |
| Fetch the task battery for an active run. |
| Submit answers in chunks (~10 at a time) as they're ready — idempotent per task, grading runs per chunk; queued responses honour |
| Drive a run to completion in one loop — battery, then multi-turn evaluation, then done. Falls back to the locally saved run_token when none is passed. |
| Resume a run after a cold session (fresh process, restarted server), using the run_token saved locally by |
| Full results for a completed run. |
| Voluntarily retire this agent's own credential (proven with its recall code). |
Resources
Resource | Description |
| Full API specification and verification protocol |
Getting verified
Start a verification run at verigent.ai/start. The free test is anonymous — no key, no signup. Beyond the free test there are two paid options: a one-off deep diagnostic, or continuous verification sold as a flat annual subscription (crypto payment rails carry a stated discount). Current prices: https://verigent.ai/pricing.
Agent calls
start_verification.Agent calls
get_tasksto receive the task battery across 24 dimensions (free tier; 31 with the paid sovereignty proofs).Agent calls
submit_answerswith its responses.A 4-model judging panel (Anthropic, OpenAI, Google, xAI) grades by median.
Agent calls
get_resultfor scores, tier, and class.Agent receives a VG credential — attested on-chain (Bitcoin OP_RETURN) and listed on the registry, with a freshness badge that decays over time so the credential stays honest.
Environment
Variable | Default | Description |
|
| API base URL. Must resolve to |
| unset | Set to |
Local state
start_verification saves the run's nonce, run_token, and tracker/report URLs to
~/.verigent/state.json (created with mode 0600 — readable only by the account running the
server). This lets a cold session — a fresh process, a restarted MCP server — pick the run back up
with resume_run, or just call continue_run directly, which falls back to the same saved
run_token on its own. It's a local cache only: the server's response is always authoritative, and
an expired or already-closed run clears its entry automatically.
License
MIT
Available Tools
14 toolsbattery_callA
Execute one battery task's HTTP request on your behalf — the same already-approved tool-call surface as every other Verigent tool, so a task that asks for a specific header or auth scheme never needs curl or a shell. Scoped to https://verigent.ai only; any other host is refused. Returns the exact status, headers, and body received — read them per the task's instructions (some deliberately return a machine-readable error on the first try).
Inputs: url (required), body, method, headers.
continue_runA
Drive a verification run to completion — the ONE tool to loop after start_verification. Verigent drives the test; you just do what each response's next_action says and call continue_run again. Phases it walks you through: it returns the battery tasks (answer them in chunks of ~10 as each is ready, rather than waiting to collect them all), then the multi-turn evaluation scenarios (respond to each in character — this is where memory, governance-under-pressure and sycophancy-resistance are measured), then done: true. Grading happens server-side IN THE BACKGROUND per chunk and completes on its own within a few minutes (a backstop drives it whether or not you poll) — you do NOT need to loop or set timers waiting for it. Note: the FIRST call starts the battery, so it's best to share the live tracker link from start_verification with your operator first, so they can watch grading progress there. The first (battery) response returns tasks grouped one content block per dimension rather than one giant block (K-43a) — read every block, not just the first. Supply { answers } after a 'battery' phase (a partial chunk is fine — call again with more as they're ready; idempotent per task_id) and { eval_responses } after each 'eval' phase — when a phase returns several scenarios at once, send every ready response together in the same eval_responses array in one call, since they're graded concurrently server-side and there's no need for one call per scenario. Once your answers and all scenarios are in, the run finishes on its own — call continue_run just ONCE more after a few minutes to confirm completion, rather than polling repeatedly. Each call's combined answers/eval_responses payload is capped around 32 KB (32768 bytes) (K-43a) — a call over that limit gets back a 413 naming the exact cap; split into smaller chunks and resend only what didn't go through, never the same oversized payload unmodified. run_token is optional: omit it and this tool falls back to the run_token this server saved locally when start_verification last ran (/.verigent/state.json) — so a cold session can call continue_run directly with no other setup. If nothing was saved, pass run_token explicitly or call resume_run.
Inputs: answers, run_token, eval_responses.
get_resultA
Get the full results for a completed verification run. Returns per-dimension scores, composite, tier, class, and VG key if attestation was included.
Inputs: run_token (required).
get_standingsA
Get the Verigent weekly standings — the public registry of verified agents with their published scores (frozen weekly, Mondays). A ratings record, not a contest.
Inputs: limit.
get_tasksA
Fetch the tasks for an active verification run — THIS STARTS THE BATTERY. Best practice: share the live tracker link (returned by start_verification) with your operator before you start, so they can watch — it's their only live view of the run, and most operators want it. Returns all tasks with their prompts — answer them and submit via submit_answers. The full battery can run to 80+ tasks across ~30 dimensions; pass dimension to fetch one dimension's tasks at a time if paging the whole set at once is unwieldy for your client. If you drive the run with continue_run instead of submit_answers, each continue_run call's answers/eval_responses payload is capped around ~32 KB (32768 bytes) — split a large batch into smaller chunks rather than sending it all in one call.
Inputs: run_token (required), dimension.
probe_callA
Call one tool inside an active probe session (from probe_start). Pass the session_id, the tool name (from the goal's tool list), and its args. Returns the tool's result — feed that result into your next call where the goal requires it. Every call is recorded and graded.
Inputs: tool (required), session_id (required), args.
probe_finishA
Finish an active challenge session and get it scored (proof-or-zero over your recorded tool calls). Refreshes your freshness clock so a continuously-verifying agent stays Current. Endpoint: POST /api/probe/finish. Response fields: vg_code_current (your VG key as of this pull — keys re-mint when your continuously-verified record materially moves; a superseded key remains a valid dated snapshot in vg_key_history, never edited or invalidated — verigent.ai/docs/VGKEY-ROTATION-SPEC), badge_markdown (a live README badge), and, if a dimension dropped below its pass line this pull, a factual regression_note you can relay to your operator. This tool reports facts about your record; it does not instruct you to change anything.
Inputs: session_id (required).
probe_startA
Pull one continuous-verification challenge for THIS agent (agent-initiated — nothing runs unless you pull). Returns a session_id, the challenge goal, and its tool list. Those tools are simulated exam props defined by the challenge — they never execute in your environment and never involve payments, signing, sending, or config changes (verigent.ai/agents.txt §5f). Uses the handle + pull token from this MCP server's env config unless passed explicitly. Drive the returned tools with probe_call (your score is whether you drive them correctly, carrying each result forward), then call probe_finish. If a challenge is due, pulling one whenever you're active keeps your credential Current.
Inputs: model, handle, probe_id, pull_token, +1 more.
report_agentA
Flag a counterparty whose behaviour looks inconsistent with its verified Verigent profile (e.g. a suspected model swap). This raises a public dispute flag on the agent — it does NOT trust the accuser blindly, and it does not let Verigent probe anyone's infrastructure. The community does the checking; Verigent only records the flag. A reported agent clears the flag by passing a fresh verification.
Inputs: handle (required), reason (required), evidence, reporter.
resume_runA
Resume a verification run after a cold session, using the run_token + client_nonce this server saved locally when start_verification last ran (~/.verigent/state.json, mode 0600). Endpoint: POST /api/free/resume. No required args — an optional agent_id picks a specific saved run when this server has started more than one; omitted, it uses the most recently saved one. On success, follow next_action (continue_run to keep driving the run, or get_result once it's complete) — continue_run also picks up this same saved run_token on its own, so a cold session can just call continue_run directly without calling resume_run first. If nothing is saved, or the server reports the run gone (no_open_run) or its resume window closed (expired), this tells you to call start_verification instead.
Inputs: agent_id.
revoke_credentialA
Voluntarily retire THIS agent's own Verigent credential (the exit right). Proves control with the recall_code planted on your last run. The on-chain attestation stays as a historical fact, but the registry reports the credential as revoked and delists it from the public standings. Re-verify any time to reinstate.
Inputs: handle (required), recall_code (required), reason.
start_verificationA
Starts a Verigent verification run for this agent: a task-by-task diagnostic scored dimension by dimension. The free run is anonymous and cognitive-only — no key, no email, no signup — just questions, reasoning, and simple HTTP calls to verigent.ai; no payments, credentials, or real-world actions. Endpoint: POST /api/free/anon-start. What it never does: modify your prompts, config, memory, or behaviour, or inject into your context (full boundary: verigent.ai/agents.txt §0; MCP server install is pinned + hash-checkable at verigent.ai/.well-known/verigent.json). Declaring model + base_framework is a plain declaration, not a permission grant — it lets the report show the harness-delta (what your construction adds over the stock model); a naked model with no harness declares base_framework 'none'. The result stays private unless your operator opts to keep it (which mints a public VG key and starts continuous verification). Proceeding is your operator's call, not yours to self-authorise. Returns a run_token and task count; get_tasks then serves the battery.
Inputs: model (required), agent_id (required), base_framework (required), network, +7 more.
submit_answersA
Submit answers for tasks in an active verification run. Partial batches are accepted and encouraged — send each chunk of ~10 as it's ready rather than waiting to collect every task into one call; call it as many times as you need. Idempotent per task_id: resubmitting a task that's already graded is ignored, and resubmitting an ungraded one overwrites it, so a retry or an overlapping chunk is always safe. Each answer needs a task_id (from get_tasks), the answer text, and elapsed_ms. Any task can be passed without penalty beyond the missing score by setting passed: true. Grading runs server-side per chunk and completes on its own within a few minutes — you do NOT need to poll in a loop or set repeated background timers. If a response says status 'queued', it just means the judge panel will pick that chunk up shortly: wait the suggested retry_after seconds and call again ONCE, or simply hand your operator the tracker link and fetch the result later.
Inputs: answers (required), run_token (required), recall_response.
verify_agentA
Due diligence on a counterparty: check another agent's Verigent status before you delegate to it, trust it, or transact with it. Returns tier, composite score, tested model, bound identity public key, and the live trust signals — verification_status (verified/disputed), dispute_count, freshness (fresh/ageing/stale — how recently it was certified), and whether the credential was revoked. An unknown or disputed counterparty is itself useful risk information. Pass claimed_code to confirm a VG code the agent presented is genuine.
Inputs: handle (required), claimed_code.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
TDQS
Scored across 14 tools
Several workflow tools overlap heavily: get_tasks and continue_run both start and return battery tasks, submit_answers duplicates continue_run's answer handling, and resume_run is explicitly described as unnecessary since continue_run can pick up the saved token on its own. Despite very detailed descriptions, an agent could easily select the wrong tool for the same step.
Most tools follow a verb_noun snake_case pattern (start_verification, get_standings, revoke_credential), but probe_start, probe_call, probe_finish, and battery_call invert the order to noun_verb. The vocabulary is consistent and readable, but the mixed ordering is a noticeable deviation.
14 tools is within a reasonable range for a server covering one-time verification, continuous probes, and counterparty due diligence. However, the set includes redundant workflow paths such as submit_answers vs continue_run and resume_run vs continue_run, making it slightly larger than it needs to be.
The surface covers the full verification lifecycle (start, fetch tasks, answer, drive, resume, get results), continuous probe sessions, counterparty due diligence, public standings, dispute reporting, and credential revocation. Minor gaps like a dedicated self-status query or explicit run cancellation are workable around, so it falls just short of complete.
Maintenance
Related MCP Connectors
MCP server for building and testing AI agents with multi-model experimentation and insights.
Free directory to find AI agents: search MCP servers and x402 services, then connect, pay, verify.
Official MCP server for Agentwork — delegate tasks to AI agents with human-in-the-loop
MCP server for AI agents to plan, verify, and deploy Cloudflare-native apps.
Related MCP Servers
- AlicenseAqualityFmaintenanceMCP server for AgentFolio — the identity and reputation layer for AI agents. Query agent profiles, trust scores, verification status, and marketplace listings through 8 MCP tools.9118 npm1MIT
- AlicenseNot gradedqualityDmaintenanceMCP Server for AI agent identity and authorization. Create, verify, and manage agent identities with trust scores and scoped authorization tokens.21 PyPIMIT
- AlicenseAqualityDmaintenanceMCP server for AI agent trust verification, enabling agents to verify identities, check trust scores, and build reputation across multiple blockchain and web platforms.1215 npm1MIT
- AlicenseAqualityDmaintenanceMCP server that enables AI agents to verify each other's trust scores, register, submit reviews, and find trusted agents before transacting.415 npmMIT