agent-custody MCP
An MCP gateway that checks every agent tool call against a signed grant and policy, forwards or denies it, and issues a signed receipt. It provides a tamper-evident Merkle log and offline verification capabilities to ensure auditability and provenance of AI agent actions.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Verify agent tool calls against signed grants
- Generate signed receipts for audit trails
- Enforce Cedar policies before tool execution
- Verify receipts offline using public keys
Source and maintenance
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
@agent-custody/receipts 0.13.0
{
"version": "0.13.0",
"transport": "stdio",
"identifier": "@agent-custody/receipts",
"runtimeHint": "npx",
"registryType": "npm",
"registryBaseUrl": "https://registry.npmjs.org",
"packageArguments": [
{
"type": "positional",
"value": "gateway",
"valueHint": "command",
"description": "Run the MCP gateway in front of your upstream tools"
},
{
"name": "--config",
"type": "named",
"format": "filepath",
"isRequired": true,
"description": "Path to gateway.json: the upstream MCP or REST tools, the signed grant, the Cedar policy, the gateway key, and the log"
}
]
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"agent-custody-mcp": {
"command": "npx",
"args": [
"-y",
"@agent-custody/receipts@0.13.0",
"gateway"
]
}
}
}Cline
{
"mcpServers": {
"agent-custody-mcp": {
"command": "npx",
"args": [
"-y",
"@agent-custody/receipts@0.13.0",
"gateway"
]
}
}
}VS Code
{
"servers": {
"agent-custody-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@agent-custody/receipts@0.13.0",
"gateway"
]
}
}
}Claude Desktop
{
"mcpServers": {
"agent-custody-mcp": {
"command": "npx",
"args": [
"-y",
"@agent-custody/receipts@0.13.0",
"gateway"
]
}
}
}Let your agent find its tools
Find servers like agent-custody MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.