Kzino/vorim-mcp-server

🔒 Security
0 Views
0 Installs

📇 ☁️ 🍎 🪟 🐧 - AI agent identity, trust, and audit trail infrastructure. 17 MCP tools: register agents with Ed25519 keypairs, check permissions (sub-5ms), emit tamper-evident audit events, verify trust scores (0-100), delegate credentials, and manage ephemeral agents. IETF Internet-Draft filed (draft-vorim-vaip-00). Works with LangChain, OpenAI, CrewAI, Stripe ACP, and 4 more frameworks. npx @vorim/mcp-server.

Quick Install

One-Click IDE Configuration
claude_desktop_config.json
{
  "mcpServers": {
    "kzino-vorim-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "kzino-vorim-mcp-server"
      ]
    }
  }
}
Or

Using an AI coding agent (Claude Code, Cursor, etc.)? Copy a ready-made prompt that tells it to fetch the setup instructions and install this server for you.

Documentation Overview

Vorim AI — MCP Server

npm version smithery badge MIT License

Give every AI agent its own cryptographic identity, scoped permissions, and a tamper-evident audit trail — directly from Claude Desktop, Cursor, or any MCP-compatible client.

What is Vorim AI?

Vorim AI is the identity and trust layer for autonomous AI agents. It gives each agent its own Ed25519 keypair, time-bounded scoped permissions, hash-linked audit events, and a publicly verifiable trust score — so when an agent does something, you can prove who acted, what they were allowed to do, and what happened.

The protocol underneath (VAIP) is open, MIT-licensed, and submitted to IETF as draft-nyantakyi-vaip-agent-identity-01.

This package is the MCP (Model Context Protocol) server that exposes 19 Vorim tools to any MCP-compatible AI client.

Works with Claude Desktop, Cursor, VS Code, and any other MCP client.

Quick Start

npm install -g @vorim/mcp-server

Or run directly with npx:

VORIM_API_KEY=agid_sk_live_... npx @vorim/mcp-server

Configuration

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "vorim": {
      "command": "npx",
      "args": ["@vorim/mcp-server"],
      "env": {
        "VORIM_API_KEY": "agid_sk_live_..."
      }
    }
  }
}

Cursor

Add to .cursor/mcp.json in your project root:

{
  "mcpServers": {
    "vorim": {
      "command": "npx",
      "args": ["@vorim/mcp-server"],
      "env": {
        "VORIM_API_KEY": "agid_sk_live_..."
      }
    }
  }
}

VS Code

Add to your VS Code MCP settings with the same format.

Get an API Key

  1. Sign up at vorim.ai (free, no credit card)
  2. Go to Settings > API Keys
  3. Create a key with agents:*, audit:*, trust:* scopes

Available Tools (19)

Health

ToolDescription
vorim_pingCheck API health and connectivity

Agent Identity

ToolDescription
vorim_register_agentRegister a new agent with Ed25519 cryptographic identity
vorim_register_ephemeralRegister a did:key ephemeral agent with TTL
vorim_get_agentGet agent details by ID
vorim_list_agentsList all agents with pagination and filtering
vorim_update_agentUpdate agent metadata (name, description, status)
vorim_revoke_agentPermanently revoke an agent

Permissions

ToolDescription
vorim_check_permissionCheck if agent has a permission scope (sub-5ms)
vorim_grant_permissionGrant a permission with optional expiry and rate limits
vorim_list_permissionsList all active permissions for an agent
vorim_revoke_permissionRevoke a specific permission scope

Credential Delegation

ToolDescription
vorim_delegate_credentialDelegate OAuth credentials to an agent
vorim_request_tokenAgent requests a short-lived access token
vorim_list_delegationsList active credential delegations

Audit

ToolDescription
vorim_emit_eventLog an audit event for an agent action
vorim_export_auditExport signed audit bundle with SHA-256 manifest

Trust

ToolDescription
vorim_verify_trustVerify agent trust score (public, no auth required)

Onboarding

ToolDescription
vorim_onboard_startStart device-authorization onboarding for a user with no API key; returns a user code and activation URL
vorim_onboard_checkCheck whether the user approved onboarding and retrieve the issued API key

Example Usage

Once configured, use natural language in Claude, Cursor, or any MCP client:

  • "Register an agent called invoice-processor with read and execute permissions"
  • "Check if agent agid_acme_a1b2 has permission to execute"
  • "Log a tool_call event for the agent: action=process_invoice, result=success"
  • "What's the trust score for agent agid_acme_a1b2?"
  • "Export the audit trail for the last 30 days"
  • "Delegate my GitHub OAuth token to this agent for 24 hours"
  • "Revoke agent agid_acme_a1b2"

Why Use Vorim AI

  • Cryptographic identity — Ed25519 keypairs for every agent. Not a shared service account.
  • Fine-grained permissions — 7 scopes with time bounds and rate limits, sub-5ms checks.
  • Tamper-evident audit trails — SHA-256 hash-linked events, signed export bundles for compliance.
  • Public trust scoring — anyone can verify any agent without auth (no shared secrets).
  • Open protocol — VAIP submitted to IETF, MIT-licensed, freely implementable.
  • Compliance-ready — EU AI Act, US Executive Order 14110, SOC 2, GDPR.

Environment Variables

VariableRequiredDefaultDescription
VORIM_API_KEYYesYour Vorim API key (agid_sk_live_...)
VORIM_BASE_URLNohttps://api.vorim.aiAPI base URL (override for self-hosted)

Links

License

MIT — see LICENSE for details.


Built by Vorim AI. Questions or feedback: kwame@vorim.ai.

Related MCP Servers

13bm/GhidraMCP

🐍 ☕ 🏠 - MCP server for integrating Ghidra with AI assistants. This plugin enables binary analysis, providing tools for function inspection, decompilation, memory exploration, and import/export analysis via the Model Context Protocol.

🔒 Security1 views
123Ergo/unphurl-mcp

📇 ☁️ - URL intelligence for AI agents. 13 tools for security signals and data quality: redirect behaviour, brand impersonation detection, domain age, SSL validation, parked detection, URL structural analysis, DNS enrichment.

🔒 Security0 views
82ch/MCP-Dandan

🐍 📇 🏠 🍎 🪟 🐧 - Real-time security framework for MCP servers that detects and blocks malicious AI agent behavior by analyzing tool call patterns and intent across multiple threat detection engines.

🔒 Security0 views
9hannahnine-jpg/arc-gate-mcp

🐍 - Runtime governance for MCP tool calls. Blocks prompt injection and capability abuse before tool results reach your agent.

🔒 Security0 views

Engagement

Views
0
Installs
0
Upvotes
0

Views and upvotes are unique per visitor network (hashed IP). Installs count copy actions.

Status

Health: Not checked yet

We have not completed a health check for this listing yet.

No check timestamp yet.

Unclaimed listing (imported or pending owner verification). Claim it →
★ Spotlight Slot

Feature Your MCP Server

Get maximum visibility for your server across our directory, search results, and detail pages.

Spotlight Your Server

Own this project?

This directory is pre-filled from public sources. Claim via GitHub README, site badge, or DNS TXT to get the verified badge and attach your website.

Claim this listing

Promote this listing

Optional paid placement. Free listings stay free forever.

Share & Embed

Add our SVG badge (dark/light directory styles) or embeddable widget to your site.