hive-mcp-attest

HiveAttest perimeter for autonomous agents — C8/C12/C13/C15-C20

https://hive-mcp-attest.onrender.com/mcp

Layer C — Reference Grade

This is the reference implementation of the HiveAttest claim family. Wire format is normative. Production-grade (Layer B) is a future hardened deployment.

Reference implementation of USPTO Provisional 64/055,601 — HiveAttest claims C8/C12/C13/C15-C20.

Inventor: Stephen A. Rotzin

What this is

hive-mcp-attest is a Model Context Protocol (MCP) server that exposes the complete HiveAttest perimeter as 19 tools, proxying to the live hivemorph backend.

Protocol: MCP 2024-11-05 over Streamable-HTTP / JSON-RPC 2.0
Transport: POST /mcp
Discovery: GET /.well-known/mcp.json
Health: GET /health
Backend: https://hivemorph.onrender.com
Crypto: Ed25519, RFC 8785 JCS, SHA-256 — real signatures, no mocks
Brand gold: #FFB800

Tools

Tool	Claim	Description
`attest_passport_issue`	C15	Issue a Pre-Action Attestation Manifest (Ed25519 signed)
`attest_passport_verify`	C15	Verify a passport manifest (signature + temporal + inputs hash)
`attest_custody_append`	C16	Append a signed node to a custody chain (taint propagation)
`attest_custody_verify`	C16	Verify hash linkage, signatures, and taint propagation
`attest_custody_proof`	C16	Get a Merkle inclusion proof for a custody node
`attest_cargo_register`	C17	Register a versioned cargo type (definition_hash pinned)
`attest_cargo_validate`	C17	Validate a payload against a registered cargo schema
`attest_cargo_snapshot`	C17	Registry snapshot with Merkle root for version pinning
`attest_warranty_issue`	C18	Issue a signed warranty committing an agent to a claim
`attest_warranty_breach`	C18	Report a breach — signed breach record returned
`attest_warranty_get`	C18	Retrieve a warranty by ID
`attest_gate_evaluate`	C19	THE HEADLINE TOOL — Gate evaluation with signed C18 receipt
`attest_inspect_sample`	C20	Probabilistic secondary inspection, signed inspection record
`attest_smsh_verify`	C8/C12	Verify a SMSH-Stamp v1 receipt
`attest_absence_build`	C13	Build a sorted Merkle tree for provable non-membership
`attest_absence_prove`	C13	Prove an event is absent from an audit window
`attest_absence_verify`	C13	Verify a non-membership proof against a root
`attest_meta`	—	Return layer/spec/patent metadata for all claims

Endpoints

Tool	Backend URL
`attest_passport_issue`	`POST https://hivemorph.onrender.com/v1/attest/passport/issue`
`attest_passport_verify`	`POST https://hivemorph.onrender.com/v1/attest/passport/verify`
`attest_custody_append`	`POST https://hivemorph.onrender.com/v1/attest/custody/append`
`attest_custody_verify`	`POST https://hivemorph.onrender.com/v1/attest/custody/verify`
`attest_custody_proof`	`GET https://hivemorph.onrender.com/v1/attest/custody/{chain_id}/proof/{index}`
`attest_cargo_register`	`POST https://hivemorph.onrender.com/v1/attest/cargo/register`
`attest_cargo_validate`	`POST https://hivemorph.onrender.com/v1/attest/cargo/validate`
`attest_cargo_snapshot`	`GET https://hivemorph.onrender.com/v1/attest/cargo/snapshot`
`attest_warranty_issue`	`POST https://hivemorph.onrender.com/v1/attest/warranty/issue`
`attest_warranty_breach`	`POST https://hivemorph.onrender.com/v1/attest/warranty/breach`
`attest_warranty_get`	`GET https://hivemorph.onrender.com/v1/attest/warranty/{id}`
`attest_gate_evaluate`	`POST https://hivemorph.onrender.com/v1/attest/gate/evaluate`
`attest_inspect_sample`	`POST https://hivemorph.onrender.com/v1/attest/inspect/sample`
`attest_smsh_verify`	`POST https://hivemorph.onrender.com/v1/attest/smsh/verify`
`attest_absence_build`	`POST https://hivemorph.onrender.com/v1/attest/absence/build`
`attest_absence_prove`	`POST https://hivemorph.onrender.com/v1/attest/absence/prove`
`attest_absence_verify`	`POST https://hivemorph.onrender.com/v1/attest/absence/verify`
`attest_meta`	(local — no backend call)

Connect (Claude Desktop)

Add to your claude_desktop_config.json:

config.json

{
  "mcpServers": {
    "hive-mcp-attest": {
      "command": "node",
      "args": ["/path/to/hive-mcp-attest/server.js"],
      "env": {
        "HIVE_BASE": "https://hivemorph.onrender.com"
      }
    }
  }
}

Or connect via Streamable-HTTP (MCP 2024-11-05):

config.json

{
  "mcpServers": {
    "hive-mcp-attest": {
      "url": "https://hive-mcp-attest.onrender.com/mcp",
      "transport": "streamable-http"
    }
  }
}

Environment variables

Variable	Default	Description
`HIVE_BASE`	`https://hivemorph.onrender.com`	Backend hivemorph URL
`PORT`	`3000`	Server port

Cryptographic guarantees

All attestation primitives use:

Ed25519 — signing key generated at backend startup (or loaded from HIVE_ATTEST_PRIVATE_KEY_B64URL)
RFC 8785 JCS — deterministic canonicalization for all signing operations
SHA-256 — payload hashing, Merkle tree nodes
No mocked signatures — every signature is a real 64-byte Ed25519 output

Patent

Reference implementation of USPTO Provisional 64/055,601 — HiveAttest claims C8/C12/C13/C15-C20.

Inventor: Stephen A. Rotzin. Filed May 2 2026.

Layer

Layer C — Reference Grade. Wire format is normative. Production-grade is Layer B.

Every tool description ends with: "Reference-grade implementation. Wire format normative; production-grade is Layer B."

HiveAttest README