@mcpverify/core

Cryptographic verification primitives for MCP tool definitions.

What it does

Core building blocks for verifying that MCP tools haven't been tampered with. Zero MCP SDK dependency — pure crypto, verification, and registry logic.

Features

• Ed25519 signing — generate keypairs, sign and verify tool schemas
• Post-quantum cryptography — ML-DSA-65/87 hybrid signatures (Ed25519 + ML-DSA)
• Schema registry — local commitment store for pinning tool definitions
• Audit chain — hash-chained, tamper-evident event log
• Registry client — HTTP client for the remote MCP Verify registry API
• On-chain anchoring — anchor schema commitments to Base L2

Install

npm install @mcpverify/core

Quick start

import {
  generateKeyPair,
  signSchema,
  verifySchema,
  hashSchema,
  SchemaRegistry,
  AuditChain,
} from "@mcpverify/core";

// Generate an Ed25519 keypair
const keys = generateKeyPair();

// Sign a set of tool definitions
const tools = [{ name: "read_file", description: "Read a file", inputSchema: { type: "object" } }];
const hash = hashSchema(tools);
const signature = signSchema(hash, keys.privateKey);

// Verify the signature
const valid = verifySchema(hash, signature, keys.publicKey);

// Post-quantum (hybrid) keygen
import { generatePQCKeyPair, pqcSignSchema, pqcVerifySchema } from "@mcpverify/core";

const pqcKeys = await generatePQCKeyPair("hybrid-65");
const pqcSig = pqcSignSchema(hash, pqcKeys);
const pqcValid = pqcVerifySchema(hash, pqcSig);

API

| Export | Description | |--------|-------------| | generateKeyPair() | Ed25519 keypair generation | | hashSchema() / hashTool() | Canonical hashing of tool definitions | | signSchema() / verifySchema() | Ed25519 sign/verify | | generatePQCKeyPair() | ML-DSA or hybrid keypair generation | | pqcSignSchema() / pqcVerifySchema() | Post-quantum sign/verify | | SchemaRegistry | Local commitment store (pin, verify, diff) | | AuditChain | Hash-chained tamper-evident event log | | RegistryClient | HTTP client for remote registry API | | OnChainAnchor | Base L2 on-chain anchoring |

Trust Levels

This package implements primitives for Trust Levels 1-5:

• L1 Identity — Ed25519/ML-DSA key registration
• L2 Schema Verified — tool schemas match signed commitments
• L3 Policy Attested — publisher-signed fallback
• L4 Audit Anchored — tamper-evident hash chain + on-chain anchoring
• L5 Execution Verified — state commits, deployment binding

Learn more

mcpcerts.com

License

MIT