@truthlocks/maip-mcp-server

Machine Agent Identity Protocol (MAIP) server for the Model Context Protocol. Gives AI agents cryptographic identity, trust scores, kill switches, and auditable action receipts — directly from Claude, ChatGPT, or any MCP-compatible client.

Quick Start (10 seconds)

npm install @truthlocks/maip-mcp-server

No account? Register instantly:

# From any MCP client, call the truthlocks_register tool:
truthlocks_register { "email": "[email protected]" }
# → Returns your API key immediately. Free tier: 100 attestations/month.

Or register via CLI:

npx @truthlock/protect register --email [email protected]

Configuration

Add to your MCP client config (e.g., claude_desktop_config.json):

{
  "mcpServers": {
    "truthlocks": {
      "command": "npx",
      "args": ["@truthlocks/maip-mcp-server"],
      "env": {
        "TRUTHLOCKS_API_KEY": "tl_test_your_key_here",
        "TRUTHLOCKS_API_URL": "https://sandbox-api.truthlocks.com"
      }
    }
  }
}

Available Tools

Identity & Trust

| Tool | Description | |------|-------------| | truthlocks_register | Register for a free developer account (email only) | | agent_register | Register an AI agent identity with cryptographic keys | | agent_get | Get agent details and trust score | | agent_suspend | Suspend a rogue agent immediately | | agent_kill | Emergency kill switch — revokes all agent permissions | | trust_score_compute | Compute real-time trust score for an agent |

Attestations & Receipts

| Tool | Description | |------|-------------| | attestation_mint | Create a signed attestation (proof of authorship/action) | | attestation_verify | Verify an attestation's cryptographic proof | | attestation_revoke | Revoke a previously issued attestation | | receipt_create | Create an action receipt (auditable AI operation log) | | receipt_verify | Verify a receipt's integrity |

Sessions & Scopes

| Tool | Description | |------|-------------| | session_create | Start a bounded agent session with scoped permissions | | session_terminate | End an active session | | scope_list | List available permission scopes | | tool_register | Register a tool that agents can invoke | | tool_invoke | Invoke a registered tool with audit trail |

Compliance & Observability

| Tool | Description | |------|-------------| | compliance_check | Run compliance check against policies | | guardrail_check | Check if an action violates guardrails | | event_create | Log an observability event |

Supported Algorithms

All cryptographic operations support 10 signing algorithms:

| Algorithm | Type | Best For | |-----------|------|----------| | Ed25519 | EdDSA | Default. Fastest, smallest signatures | | ES256 | ECDSA P-256 | Web standard, WebCrypto compatible | | ES384 | ECDSA P-384 | Government/CNSA Suite | | ES512 | ECDSA P-521 | Maximum ECDSA security | | RS256 | RSA 3072-bit | Legacy PKI interop | | RS384 | RSA SHA-384 | Higher security RSA | | RS512 | RSA SHA-512 | Maximum RSA | | PS256 | RSA-PSS | Modern RSA (NIST recommended) | | PS384 | RSA-PSS SHA-384 | Higher security PSS | | PS512 | RSA-PSS SHA-512 | Maximum PSS |

Free Tier

Register with just an email — no credit card, no website visit:

• 100 attestations/month
• 1,000 verifications/month
• 3 API keys
• Full sandbox access

When you hit limits, upgrade at console.truthlocks.com.

Environment

| Variable | Default | Description | |----------|---------|-------------| | TRUTHLOCKS_API_KEY | — | Your API key (tl_test_* for sandbox, tl_live_* for production) | | TRUTHLOCKS_API_URL | https://sandbox-api.truthlocks.com | API base URL |

Links

• Documentation
• API Reference
• MAIP Specification
• Console
• GitHub

License

MIT