Skip to content

Hive Zk Attestation

by srotzin · remote · no sign-in to list tools · v1.0.0 · published by GitHub user srotzin

Zero-knowledge attestation for agent capability and trust score claims

Changes · 6
CompareRegistry entry

8 tools: 6 change things and 2 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http hive-zk-attestation https://hive-mcp-zk-attestation.onrender.com/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

8 tools

Changes things 6Claude Code: ask
  • hive_earn_leaderboardTop earning agents on the Hive Civilization, by attribution payout in USDC.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Top earning agents on the Hive Civilization, by attribution payout in USDC. Real Base USDC settlement. Calls GET https://hivemorph.onrender.com/v1/earn/leaderboard?window=<window>. Returns "rails not yet live" gracefully if upstream is not yet deployed.
  • hive_earn_meLook up the caller agent's registered earn profile, lifetime + pending USDC balance, last payout tx hash, and next-payout ETA.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Look up the caller agent's registered earn profile, lifetime + pending USDC balance, last payout tx hash, and next-payout ETA. Real Base USDC, no mock data. Calls GET https://hivemorph.onrender.com/v1/earn/me?agent_did=<did>. Returns "rails not yet live" gracefully if upstream is not yet deployed.
  • hive_earn_registerRegister an agent for the Hive Civilization attribution payout program.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Register an agent for the Hive Civilization attribution payout program. Settlement on real Base USDC. 5% kickback on attributed traffic, weekly payout. Calls POST https://hivemorph.onrender.com/v1/earn/register on behalf of the caller. Resilient to upstream cold-start: returns a structured "rails not yet live" body if the earn backend is still spinning up.
  • zk_anchor_to_baseWrite an attestation commitment (32-byte hash) to Base via the Hive gateway.No findings

    Why it is in this group

    • The description's first verb is "write": a word for a change.
    Description, as the server wrote it
    Write an attestation commitment (32-byte hash) to Base via the Hive gateway. Anchors the attestation only; does not bridge value or move state to Aleo. Aleo snarkVM consumes the attestation independently via Leo programs (future hive-leo-circuits repo). Cost: $0.02 USDC + L1 gas. Backend RFC-stage; returns backend_pending until rails land.
  • zk_attest_agent_stateProduce a zero-knowledge attestation of an agent state hash + DID.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Produce a zero-knowledge attestation of an agent state hash + DID. Primary verification target is Aleo snarkVM (Varuna over BLS12-377); native Hive verification is next. Attestation-only — emits a proof, not a token; no value crosses chains. Cost: $0.05 USDC on Base. Backend RFC-stage; returns backend_pending until rails land.
  • zk_verify_proofVerify a submitted attestation against a known verification key.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Verify a submitted attestation against a known verification key. Aleo snarkVM (Varuna/BLS12-377) is the primary verification target via the snark.verify opcode. Returns boolean validity plus the verification key fingerprint. Free. Read-only — no settlement, no on-chain write.
Only reads 2Claude Code: allow
  • zk_list_circuitsEnumerate supported circuits and verification key fingerprints.No findings

    Why it is in this group

    • The name "zk_list_circuits" says "list": a word for reading.
    Description, as the server wrote it
    Enumerate supported circuits and verification key fingerprints. Primary: Varuna over BLS12-377 (Aleo snarkVM-compatible). Research-stage: Groth16, Plonk. Future: Risc0, Plonky2. Free. Read-only.
  • zk_query_attestationFetch a previously-anchored attestation by Base transaction hash.No findings

    Why it is in this group

    • The name "zk_query_attestation" says "query": a word for reading.
    Description, as the server wrote it
    Fetch a previously-anchored attestation by Base transaction hash. Returns the proof commitment, verification key id, agent DID, and block number. Free. Read-only.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http hive-zk-attestation https://hive-mcp-zk-attestation.onrender.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__hive-zk-attestation__zk_list_circuits",
      "mcp__hive-zk-attestation__zk_query_attestation"
    ],
    "ask": [
      "mcp__hive-zk-attestation__zk_attest_agent_state",
      "mcp__hive-zk-attestation__zk_verify_proof",
      "mcp__hive-zk-attestation__zk_anchor_to_base",
      "mcp__hive-zk-attestation__hive_earn_register",
      "mcp__hive-zk-attestation__hive_earn_me",
      "mcp__hive-zk-attestation__hive_earn_leaderboard"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as hive-zk-attestation. Review it before you use it.