Aga Mcp Server

Created By
attestedintelligence3 months ago
Cryptographic runtime governance for AI agents. 20 tools. Sealed policy artifacts, continuous measurement, tamper-evident proof. Ed25519 + SHA-256.
Overview

@attested-intelligence/aga-mcp-server v2.0.0

MCP Badge

MCP server implementing the Attested Governance Artifact (AGA) protocol - cryptographic compliance enforcement for autonomous AI systems.

What It Does

This server acts as a Portal (zero-trust Policy Enforcement Point) for AI agents. Every tool call is attested, measured against a sealed cryptographic reference, and logged to a tamper-evident continuity chain with signed receipts.

20 tools, 4 resources, 3 prompts, 159 tests

20 MCP Tools

#ToolNIST/Patent RefDescription
1aga_server_info-Server identity, keys, portal state, framework alignment
2aga_init_chainClaim 3aInitialize continuity chain with genesis event
3aga_create_artifactClaims 1a-1dAttest subject, generate sealed Policy Artifact
4aga_measure_subjectClaims 1e-1gMeasure subject, compare to sealed ref, generate receipt
5aga_verify_artifactClaim 10Verify artifact signature against issuer key
6aga_start_monitoringNIST-2025-0035Start/restart behavioral monitoring with baseline
7aga_get_portal_state-Current portal enforcement state and TTL
8aga_trigger_measurementClaims 1e-1gTrigger measurement with specific type
9aga_generate_receiptV3 PromiseGenerate signed measurement receipt manually
10aga_export_bundleClaim 9Package artifact + receipts + Merkle proofs
11aga_verify_bundleSection J4-step offline bundle verification
12aga_disclose_claimClaim 2Privacy-preserving disclosure with auto-substitution
13aga_get_chainClaim 3cGet chain events with optional integrity verification
14aga_quarantine_statusClaim 5Quarantine state and forensic capture status
15aga_revoke_artifactNCCoE 3bMid-session artifact revocation
16aga_set_verification_tier-Set verification tier (BRONZE/SILVER/GOLD)
17aga_demonstrate_lifecycleAllFull lifecycle: attest, measure, checkpoint, verify
18aga_measure_behaviorNIST-2025-0035Behavioral drift detection (tool patterns)
19aga_delegate_to_subagentNCCoEConstrained sub-agent delegation (scope only diminishes)
20aga_rotate_keysClaim 3Key rotation with chain event

4 Resources

ResourceURIDescription
Protocol Specaga://specification/protocol-v2Full protocol specification with SPIFFE alignment
Sample Bundleaga://resources/sample-bundleSample evidence bundle documentation
Crypto Primitivesaga://resources/crypto-primitivesCryptographic primitives documentation
Patent Claimsaga://resources/patent-claims20 patent claims mapped to tools

3 Prompts

PromptDescription
nccoe-demo4-phase NCCoE lab demo with behavioral drift
governance-reportSession governance summary report
drift-analysisDrift event analysis and remediation

CoSAI MCP Security Threat Coverage

The AGA MCP Server addresses all 12 threat categories identified in the CoSAI MCP Security whitepaper (Coalition for Secure AI / OASIS, January 2026).

CoSAI CategoryThreat DomainAGA Governance Mechanism
T1: Improper AuthenticationIdentity & AccessEd25519 artifact signatures, pinned issuer keys, TTL re-attestation, key rotation chain events
T2: Missing Access ControlIdentity & AccessPortal as mandatory enforcement boundary, sealed constraints, delegation with scope diminishment
T3: Input Validation FailuresInput HandlingRuntime measurement against sealed reference, behavioral drift detection
T4: Data/Control Boundary FailuresInput HandlingBehavioral baseline (permitted tools, forbidden sequences, rate limits), phantom execution forensics
T5: Inadequate Data ProtectionData & CodeSalted commitments, privacy-preserving disclosure with substitution, inference risk prevention
T6: Missing Integrity ControlsData & CodeContent-addressable hash binding, 10 measurement embodiments, continuous runtime verification
T7: Session/Transport SecurityNetwork & TransportTTL-based artifact expiration, fail-closed on expiry, mid-session revocation, Ed25519 signed receipts
T8: Network Isolation FailuresNetwork & TransportTwo-process architecture, agent holds no credentials, NETWORK_ISOLATE enforcement action
T9: Trust Boundary FailuresTrust & DesignEnforcement pre-committed by human authorities in sealed artifact, not delegated to LLM
T10: Resource ManagementTrust & DesignPer-tool rate limits in behavioral baseline, configurable measurement cadence (10ms to 3600s)
T11: Supply Chain FailuresOperationalContent-addressable hashing at attestation, runtime hash comparison blocks modified components
T12: Insufficient ObservabilityOperationalSigned receipts, tamper-evident continuity chain, Merkle anchoring, offline evidence bundles

Full mapping details available via the aga://specification resource.

Quick Start

npm install && npm run build && npm test

Connect to Claude Desktop

Add to %APPDATA%\Claude\claude_desktop_config.json:

{
  "mcpServers": {
    "aga": { "command": "node", "args": ["C:/Users/neuro/AIH/aga-mcp-server/dist/index.js"] }
  }
}

Architecture

MCP Client (Claude Desktop)
    │ JSON-RPC over stdio
src/server.ts - 20 tools + 4 resources + 3 prompts
    ├── src/tools/          20 individual tool handlers
    ├── src/core/           Protocol logic (artifact, chain, portal, etc.)
    ├── src/crypto/         Ed25519 + SHA-256 + Merkle + canonical JSON
    ├── src/middleware/     Zero-trust governance PEP
    ├── src/storage/        In-memory + optional SQLite
    ├── src/resources/      Protocol docs + patent claims
    └── src/prompts/        Demo + report + analysis prompts

Test Coverage

SuiteTestsWhat
Crypto33SHA-256, Ed25519, Merkle, salt, canonical, keys
Core56Artifact, chain, portal, governance, behavioral, delegation, privacy, revocation, fail-closed
Tools25All 20 tool handlers
Integration38Bundle tamper, lifecycle, performance, NCCoE demo, crucible compatibility
Total159

License

MIT - Attested Intelligence Holdings LLC

Server Config

{
  "mcpServers": {
    "aga": {
      "command": "npx",
      "args": [
        "-y",
        "@attested-intelligence/aga-mcp-server"
      ]
    }
  }
}
Project Info
Created At
3 months ago
Updated At
3 months ago
Author Name
attestedintelligence
Star
-
Language
-
License
-
Category

Recommend Servers

View All
Mnemom

14 hours ago
//beforeyouship — LLM Cost Modeling From Your Editor
@Indiegoing

Query realistic LLM cost models without leaving your editor. beforeyouship models the **true monthly cost** of an LLM app architecture — retries, prompt caching, batch discounts, infra overhead, and 3×/10× growth — across GPT-5.x, Claude, Gemini, DeepSeek, and more. Not a token calculator: a planning tool for the design phase, before you commit to a stack. **No API key needed to try it** — demo mode covers the six free-tier models. A Pro key from [beforeyouship.dev](https://beforeyouship.dev) unlocks the full 18-model catalog. ## What you can ask - "How much will a RAG chatbot cost at 10,000 requests/day?" - "Compare Claude Haiku vs Gemini Flash pricing for my workload" - "What's the cheapest model for a multi-step agent at scale?" - "Show me current per-token prices for Anthropic models" ## Tools ### `estimate_cost` Full cost model for an architecture at a given usage level. Returns Naive / Realistic / Worst Case monthly cost per model, 3×/10× growth scenarios, and an opinionated recommendation with reasoning. ### `get_model_prices` Current per-1M-token pricing — input, output, cached input, batch — with context windows and staleness metadata. ### `list_archetypes` Seven preset architecture patterns (simple chatbot, chatbot with history, RAG pipeline, multi-model router, coding assistant, document processor, multi-step agent) used as starting points for estimates. ## Setup **Claude Code:** ​```bash claude mcp add --transport http beforeyouship https://beforeyouship.dev/api/mcp ​``` **Cursor / other clients** — add a remote server: ​```json { "mcpServers": { "beforeyouship": { "type": "streamable-http", "url": "https://beforeyouship.dev/api/mcp" } } } ​``` Add an `Authorization: Bearer bys_...` header with a Pro key for the full catalog. ## Try it > Estimate the monthly cost of a RAG pipeline at 10,000 requests/day

13 hours ago
Docwand

13 hours ago