HiveTrust

by srotzin · remote · no sign-in to list tools · v1.0.0 · published by GitHub user srotzin

KYA identity verification, trust scoring, and performance bonds for AI agents

Deletes · 1Changes · 12

Compare Registry entry

17 tools: 1 can delete or cancel things, 12 change things and 4 only read.

Scanned Oct 21, 2026

Deletes or cancels1Claude Code: deny: see these tools
Can't be undone0Claude Code: ask
Changes things12Claude Code: ask: see these tools
Only reads4Claude Code: allow: see these tools

11 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http hivetrust https://hivetrust.onrender.com/mcp

Findings

Matches of fixed checks, with the text they matched.

11 info

Infohivetrust_issue_credential
The description mentions "credential".
Matched text
description: "Issue a W3C-compatible verifiable credential to an agent. Credentials represent veri..."
What this check looks for
Infohivetrust_issue_credential
The input schema at properties.agent_id.description mentions "credential".
Matched text
inputSchema.properties.agent_id.description: "Agent UUID to issue the credential to"
What this check looks for
Infohivetrust_issue_credential
The input schema at properties.credential_type.description mentions "credential".
Matched text
inputSchema.properties.credential_type.description: "Type of verifiable credential"
What this check looks for
Infohivetrust_issue_credential
The input schema at properties.claims.description mentions "Credential".
Matched text
inputSchema.properties.claims.description: "Credential claims (key-value pairs specific to the..."
What this check looks for
Infohivetrust_verify_credential
The description mentions "credential".
Matched text
description: "Verify a previously issued verifiable credential. Checks signature validity, revocation..."
What this check looks for
Infohivetrust_verify_credential
The input schema at properties.credential_id.description mentions "credential".
Matched text
inputSchema.properties.credential_id.description: "UUID of the credential to verify"
What this check looks for

Show 5 more findings

Infohivetrust_revoke_credential
The description mentions "credential".
Matched text
description: "Revoke a verifiable credential. Records the revocation in the registry..."
What this check looks for
Infohivetrust_revoke_credential
The input schema at properties.credential_id.description mentions "credential".
Matched text
inputSchema.properties.credential_id.description: "UUID of the credential to revoke"
What this check looks for
Infohivetrust_revoke_credential
The input schema at properties.agent_id.description mentions "credential".
Matched text
inputSchema.properties.agent_id.description: "Agent UUID that owns the credential"
What this check looks for
Infohivetrust_file_dispute
The description mentions "credential".
Matched text
description: "...appeal against a trust score decision, credential revocation, or behavioral event. Initia..."
What this check looks for
Infohivetrust_file_dispute
The input schema at properties.target_type.enum[1] mentions "credential".
Matched text
inputSchema.properties.target_type.enum[1]: "credential"
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

17 tools

Deletes or cancels 1Removes, cancels or revokes something.Claude Code: deny

hivetrust_revoke_credentialRevoke a verifiable credential.3 findings
Why it is in this group
- The name "hivetrust_revoke_credential" says "revoke": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Findings
- Info
  The description mentions "credential".
  Matched text
  description: "Revoke a verifiable credential. Records the revocation in the registry..."
  What this check looks for
- Info
  The input schema at properties.credential_id.description mentions "credential".
  Matched text
  inputSchema.properties.credential_id.description: "UUID of the credential to revoke"
  What this check looks for
- Info
  The input schema at properties.agent_id.description mentions "credential".
  Matched text
  inputSchema.properties.agent_id.description: "Agent UUID that owns the credential"
  What this check looks for
Description, as the server wrote it
Revoke a verifiable credential. Records the revocation in the registry. Revoked credentials immediately fail verification checks.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false

Changes things 12Creates or changes something that can be changed back.Claude Code: ask

hivetrust_bind_insuranceBind (activate) an insurance policy for an agent.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Bind (activate) an insurance policy for an agent. Locks in the premium, creates the policy record, and deploys the escrow contract on Base L2.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
hivetrust_create_leaseCreate a Data Oracle Context Lease — "Sign Once, Settle Many".No findings
Why it is in this group
- The name "hivetrust_create_lease" says "create": a word for a change.
Description, as the server wrote it
Create a Data Oracle Context Lease — "Sign Once, Settle Many". Grants unlimited access to a data stream for a fixed period (24h/72h/168h). Returns a cryptographic lease token (SHA-256) for zero-friction verification. Available streams: construction_pricing, simpson_catalog, compliance_feeds, market_data, pheromone_signals.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
hivetrust_file_claimFile an insurance claim against an active policy.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
File an insurance claim against an active policy. Triggers claims adjudication workflow. Payouts are made in USDC via the Base L2 escrow contract.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
hivetrust_file_disputeFile a dispute or appeal against a trust score decision, credential revocation, or behavioral event.2 findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The description mentions "credential".
  Matched text
  description: "...appeal against a trust score decision, credential revocation, or behavioral event. Initia..."
  What this check looks for
- Info
  The input schema at properties.target_type.enum[1] mentions "credential".
  Matched text
  inputSchema.properties.target_type.enum[1]: "credential"
  What this check looks for
Description, as the server wrote it
File a dispute or appeal against a trust score decision, credential revocation, or behavioral event. Initiates the dispute resolution workflow.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
hivetrust_ingest_telemetryBulk ingest behavioral telemetry events for an agent.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Bulk ingest behavioral telemetry events for an agent. These events feed into the trust scoring engine. Supports transaction completions, SLA violations, dispute events, tool calls, and more.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
hivetrust_issue_credentialIssue a W3C-compatible verifiable credential to an agent.4 findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The description mentions "credential".
  Matched text
  description: "Issue a W3C-compatible verifiable credential to an agent. Credentials represent veri..."
  What this check looks for
- Info
  The input schema at properties.agent_id.description mentions "credential".
  Matched text
  inputSchema.properties.agent_id.description: "Agent UUID to issue the credential to"
  What this check looks for
- Info
  The input schema at properties.credential_type.description mentions "credential".
  Matched text
  inputSchema.properties.credential_type.description: "Type of verifiable credential"
  What this check looks for
- Info
  The input schema at properties.claims.description mentions "Credential".
  Matched text
  inputSchema.properties.claims.description: "Credential claims (key-value pairs specific to the..."
  What this check looks for
Description, as the server wrote it
Issue a W3C-compatible verifiable credential to an agent. Credentials represent verified claims such as identity verification, compliance certification, or domain expertise.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
hivetrust_register_agentRegister a new AI agent identity with HiveTrust KYA (Know Your Agent).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Register a new AI agent identity with HiveTrust KYA (Know Your Agent). Assigns a unique agent ID, anchors the public key, and initializes the trust score.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
hivetrust_stake_bondStake USDC to back an agent's reputation via HiveBond.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Stake USDC to back an agent's reputation via HiveBond. Creates a trust bond with a specified tier (bronze/silver/gold/platinum) and lock period. Phase 1: declared stake amount tracked in-memory; flat $0.25 registration fee via x402. Longer lock periods earn higher simulated yield (2–5% APY). Slashing is permanent — if an agent fails, stake is slashed and paid to injured parties.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
hivetrust_verify_agent_riskQuick risk assessment for payment processors and marketplace operators.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Quick risk assessment for payment processors and marketplace operators. Returns verdict (ALLOW/REVIEW/BLOCK), trust tier, and max transaction limit. This is the free public endpoint — no API key required.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
hivetrust_verify_bondQuick bond verification — check if an agent is bonded and at what tier.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Quick bond verification — check if an agent is bonded and at what tier. Returns bonded status, tier, staked amount, slash count, and max bounty access. This is the key integration point — other services call this to check bond status before assigning bounties. Free endpoint, no x402 payment required.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
hivetrust_verify_credentialVerify a previously issued verifiable credential.2 findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Info
  The description mentions "credential".
  Matched text
  description: "Verify a previously issued verifiable credential. Checks signature validity, revocation..."
  What this check looks for
- Info
  The input schema at properties.credential_id.description mentions "credential".
  Matched text
  inputSchema.properties.credential_id.description: "UUID of the credential to verify"
  What this check looks for
Description, as the server wrote it
Verify a previously issued verifiable credential. Checks signature validity, revocation status, and expiration.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
hivetrust_verify_identityVerify an agent's cryptographic identity by checking public key ownership and checksum integrity.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Verify an agent's cryptographic identity by checking public key ownership and checksum integrity. Returns a verification result with confidence score and reason codes.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true

Only reads 4Looks things up and changes nothing.Claude Code: allow

hivetrust_get_agentRetrieve a registered agent's full identity profile, including public key, checksum, trust tier, capabilities, and compliance status.No findings
Why it is in this group
- The name "hivetrust_get_agent" says "get": a word for reading.
Description, as the server wrote it
Retrieve a registered agent's full identity profile, including public key, checksum, trust tier, capabilities, and compliance status.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
hivetrust_get_insurance_quoteGet a dynamic insurance premium quote for an agent transaction.No findings
Why it is in this group
- The name "hivetrust_get_insurance_quote" says "get": a word for reading.
Description, as the server wrote it
Get a dynamic insurance premium quote for an agent transaction. Premium is calculated based on trust score, transaction value, and risk tier. HiveTrust takes a 1.5% spread on insured transactions.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: false
hivetrust_get_platform_statsRetrieve HiveTrust platform-wide statistics: total registered agents, verified count, average trust score, total insured value, active policies, claims filed, and more.No findings
Why it is in this group
- The name "hivetrust_get_platform_stats" says "get": a word for reading.
Description, as the server wrote it
Retrieve HiveTrust platform-wide statistics: total registered agents, verified count, average trust score, total insured value, active policies, claims filed, and more.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
hivetrust_get_trust_scoreRetrieve an agent's current multi-pillar trust score (0–1000 scale).No findings
Why it is in this group
- The name "hivetrust_get_trust_score" says "get": a word for reading.
Description, as the server wrote it
Retrieve an agent's current multi-pillar trust score (0–1000 scale). Returns composite score, tier, per-pillar breakdown (identity, behavior, fidelity, compliance, provenance), verdict, and max recommended transaction value.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http hivetrust https://hivetrust.onrender.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__hivetrust__hivetrust_get_agent",
      "mcp__hivetrust__hivetrust_get_trust_score",
      "mcp__hivetrust__hivetrust_get_insurance_quote",
      "mcp__hivetrust__hivetrust_get_platform_stats"
    ],
    "ask": [
      "mcp__hivetrust__hivetrust_register_agent",
      "mcp__hivetrust__hivetrust_verify_identity",
      "mcp__hivetrust__hivetrust_verify_agent_risk",
      "mcp__hivetrust__hivetrust_ingest_telemetry",
      "mcp__hivetrust__hivetrust_issue_credential",
      "mcp__hivetrust__hivetrust_verify_credential",
      "mcp__hivetrust__hivetrust_bind_insurance",
      "mcp__hivetrust__hivetrust_file_claim",
      "mcp__hivetrust__hivetrust_file_dispute",
      "mcp__hivetrust__hivetrust_create_lease",
      "mcp__hivetrust__hivetrust_stake_bond",
      "mcp__hivetrust__hivetrust_verify_bond"
    ],
    "deny": [
      "mcp__hivetrust__hivetrust_revoke_credential"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as hivetrust. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.srotzin/hivetrust/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

13 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 18:49 UTC.

For agents: Markdown · JSON · report this listing