NestDaddy

Privi Quantum Ledger

io.github.canoydario847-cloud/privi-ledger · v0.13.0

Quantum-sealed audit logs for AI agents (ML-DSA-87, SHA3-512), plus Privi Guard and trust passports.

Connect Remote server

Terminal
claude mcp add --transport http privi-ledger https://privi-ledger.onrender.com/mcp
~/.cursor/mcp.json
{
  "mcpServers": {
    "privi-ledger": {
      "url": "https://privi-ledger.onrender.com/mcp"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "privi-ledger": {
      "type": "http",
      "url": "https://privi-ledger.onrender.com/mcp"
    }
  }
}
Claude Desktop
Settings > Connectors > Add custom connector
URL: https://privi-ledger.onrender.com/mcp

Tools 80 found in our last check

  • privi_token_market

    PRIVI on Base: price, how much PRIVI and USDC the Privi swap desk holds (so whether a swap can fill), any Uniswap v3 / Aerodrome pools, and optionally a swap quote. Every paid Privi tool also accepts PRIVI. Free.

  • ledger_pricing

    List Privi Ledger tools, what each costs, and how to get an organization key.

  • ledger_check_receipt

    Confirm that an action receipt exists in the ledger and when it was recorded. Reveals no action contents. Free.

  • ledger_audit_stream

    Check whether an agent's action log is intact: entry count, time span, action and failure counts, head hash, and where tampering broke the chain if it did. Does not reveal the actions themselves. Paid per call via x402.

  • ledger_record_action

    Append an action to the organization's tamper-evident log. Returns the entry with its entry_hash receipt. Requires the organization API key.

  • ledger_read_stream

    Read your organization's entries in a stream, oldest first, with an integrity check of the whole stream. Requires the organization API key.

  • ledger_list_streams

    List your organization's streams with entry counts. Requires the organization API key.

  • ledger_compliance_report

    Audit-ready report of your AI agents' activity for a period (SOC 2 evidence, security questionnaires, AI-regulation record keeping): actions by type, failures, human approvals, log integrity, on-chain status, and findings. The report's hash is anchored on the Privi blockchain so…

  • ledger_report_pdf

    A finished PDF of a sealed compliance report, for auditors and customers. Returned as base64 (pdf_base64) and as an embedded PDF resource; also downloadable at /reports/<report_id>.pdf with the organization key. Requires the organization API key.

  • ledger_verify_report

    Check that a compliance report is unaltered: recomputes its hash, confirms Privi Ledger issued it, and checks the anchor on chain (Base, until the Privi chain mainnet). Free; no key needed.

  • ledger_signup

    Create a Privi Ledger organization on the free plan and get its API key (shown once; store it). Free plan: up to the monthly entry limit, all tools included. Upgrade any time with ledger_upgrade_pro. No key needed to sign up.

  • ledger_plan

    Your plan, entries used this month, the limit, and when a Pro plan renews. Requires your organization API key.

  • ledger_upgrade_pro

    Buy 30 days of Privi Ledger Pro (unlimited entries) for your organization, paid in USDC on Base via x402. Each call adds 30 days. Requires your organization API key.

  • gov_ai_usecase_save

    Add or update an entry in your agency's AI use case inventory (OMB M-25-21). Every change creates a new version and is written to your tamper-evident 'ai-inventory' log. Requires the organization API key.

  • gov_ai_inventory

    Your agency's AI use case inventory: the current version of each record. Requires the organization API key.

  • gov_ai_inventory_check

    Flags what an OMB M-25-21 review would flag before you submit: missing required fields, PII without a Privacy Impact Assessment, and high-impact AI in pilot or deployment missing any minimum risk practice (testing, impact assessment, independent review, monitoring, operator trai…

  • gov_ai_inventory_export

    Machine-readable CSV of your publicly releasable AI use cases (for publishing at agency.gov/ai), with its SHA-256 sealed on chain (Base, until the Privi chain mainnet) so the published file can be proven unaltered. Requires the organization API key.

  • gov_ai_verify_export

    Check that a published AI inventory file is exactly what the agency exported from Privi Ledger, and return its on-chain seal. Free; no key needed.

  • gov_pqc_classify

    Classify cryptographic algorithms as quantum-vulnerable (RSA, ECDH, ECDSA, EdDSA, DH, DSA, MQV), post-quantum (ML-KEM, ML-DSA, SLH-DSA), hybrid, symmetric/hash, or unknown. Free.

  • gov_pqc_system_save

    Record the cryptographic inventory (CBOM) of one system for post-quantum migration. Every change creates a new version and is written to the agency's tamper-evident 'pqc-inventory' log. Scanners and agents can submit results directly. Requires the organization API key.

  • gov_pqc_inventory

    Current cryptographic inventory of your systems. Requires the organization API key.

  • gov_pqc_plan

    Prioritized post-quantum migration plan: every quantum-vulnerable asset ranked (High Value Assets, high-impact systems and long-lived sensitive data first; key establishment before signatures), with its deadline (key establishment Dec 31 2030, signatures Dec 31 2031), recommende…

  • gov_pqc_export

    Export the full cryptographic inventory (CBOM) and migration plan as one JSON document for OMB, the CIO or auditors, with its SHA-256 sealed on chain (Base, until the Privi chain mainnet). Requires the organization API key.

  • gov_pqc_verify_export

    Check that a CBOM and migration-plan document is exactly what was exported from Privi Ledger and return its on-chain seal. Free; no key needed.

  • ledger_handshake_offer

    Start a Privi Handshake: a two-sided record of a dealing with another company's agent (payment, data transfer, delivery, agreement). Recorded in your log now; when the other company accepts, both logs hold matching entries and the pair is sealed on chain (Base). Requires your or…

  • ledger_handshake_inbox

    Handshakes sent to and from your organization, newest first, with their terms and status. Requires your organization API key.

  • ledger_handshake_accept

    Accept a handshake addressed to your organization: records the same terms in your log, confirms it in the other company's log, and seals the matched pair on chain (Base). Requires your organization API key. Read the terms first with ledger_handshake_inbox.

  • ledger_handshake_reject

    Reject a handshake addressed to your organization; the other company's log records the rejection. Requires your organization API key.

  • ledger_handshake_verify

    Public check of a handshake: both companies, status, whether both matching log entries still exist, and the on-chain seal. Never reveals the terms. Free; useful for disputes and audits.

  • passport_issue

    Issue a Privi Passport: a signed, on-chain-anchored trust credential for your agent or organization, scored 0-1000 (grade A-E) from verified history, integrity, anchoring, reliability, human oversight, compliance reports and confirmed handshakes. Show it to counterparties; they…

  • passport_verify

    Check an AI agent's Privi Passport before trusting it: Privi signature, content unaltered, not expired or revoked, anchor on chain (Base), and a live re-score of the agent right now (so tampering after issue is caught). Free; no key needed.

  • passport_gate

    One-call allow/deny decision before transacting with another AI agent: verifies its Privi Passport and applies your minimums, returning the reasons. If you send your organization API key the decision is recorded in your own tamper-evident log as due-diligence evidence. Free.

  • passport_list

    Your organization's issued passports with score, grade, expiry and revocation. Requires the organization API key.

  • passport_revoke

    Revoke one of your passports (e.g. an agent was retired or compromised). Verifiers see it immediately. Requires the organization API key.

  • kya_check

    Know-Your-Agent for blockchains: is this wallet operated by an audited AI agent, and how trustworthy is it right now? Resolves the address to its organization and live Privi Passport and returns allow/deny with reasons, plus a Privi-signed attestation (valid 60 min) you can cach…

  • kya_challenge

    Step 1 of binding a wallet to your Privi Passport: get a message to sign with that wallet (EIP-191 personal_sign). Valid 30 minutes. Requires the organization API key.

  • kya_bind_wallet

    Step 2: bind the wallet to your organization's Privi Passport so its transactions pass KYA checks. With a wallet signature the binding is *proven*; without one it is only *declared* (most checkers require proven). Requires the organization API key.

  • kya_wallets

    Wallets bound to your organization and how each was proven. Requires the organization API key.

  • kya_unbind_wallet

    Remove a wallet from your Passport (rotated or compromised key). KYA checks deny it immediately. Requires the organization API key.

  • mandate_create

    Draft a Privi Mandate: the human's signed permission for your agent to spend, with a budget, per-payment cap, allowed payees and expiry. Returns sign_url: send it to the human, who reads the plain-English terms and signs once with their wallet (free, no transaction). Nothing can…

  • mandate_check

    For merchants, payment facilitators and counterparties: did a human authorize this AI agent to pay you this amount? Verifies the human's wallet signature, status, expiry, per-payment cap, remaining budget and payee list, and returns allow/deny with reasons plus a Privi-signed at…

  • mandate_spend

    Call before each payment: checks the mandate and, if allowed, deducts the amount from the budget and records the payment in the agent's tamper-evident log. Refused payments are logged as blocked. Refused at once if the kill switch is on. Over the organization's live-approval thr…

  • mandate_get

    Public view of a mandate: terms, status, the human's signature, spent and remaining budget, and recent spends. Free.

  • mandate_list

    Your organization's mandates with status and remaining budget. Requires the organization API key.

  • mandate_revoke

    Stop an agent from spending under a mandate (the human can also revoke from the sign_url page). Requires the organization API key.

  • fortress_keys

    Privi's public signing keys: Ed25519 and ML-DSA-87 (NIST FIPS 204, CNSA 2.0 post-quantum). Pin these to verify Privi signatures offline. Free.

  • ledger_tree_head

    The latest signed tree head of Privi's transparency log: an RFC 9162 Merkle root over every entry ever recorded, signed with Ed25519 and ML-DSA-87, and periodically anchored on chain (Base). Free.

  • ledger_inclusion_proof

    Merkle audit path proving an entry is in Privi's append-only transparency log (RFC 9162). Verifiable offline against the signed tree head. Reveals no entry contents. Free.

  • ledger_consistency_proof

    Proof that Privi's log only grew between two signed tree heads: nothing recorded earlier was edited, removed or reordered (RFC 9162). Free.

  • fortress_tpi_policy

    Define a Two-Person Integrity policy: which officers can approve, and how many distinct approvals an action needs. Requires the organization API key.

  • fortress_tpi_request

    Ask officers to authorize a sensitive action under a two-person policy. Returns approve_url for the officers; each signs with their wallet. Do not act until fortress_tpi_status shows 'authorized', then call fortress_tpi_execute. Requires the organization API key.

  • fortress_tpi_status

    Status of a two-person request (pending, authorized, vetoed, expired, executed) and who approved. Free.

  • fortress_tpi_execute

    Consume a two-person authorization right before performing the action. Single use; refused unless authorized. Requires the organization API key.

  • qledger_status

    Privi Quantum Ledger: latest quantum-sealed block (SHA3-512, ML-DSA-87 + Ed25519), entries waiting for the next block, the Privi Foundation chain it is fused with, and signing keys. Free.

  • qledger_block

    One quantum-sealed block with its signatures, settlement on chain and a validity check. Free.

  • qledger_verify_chain

    Verify the whole Quantum Ledger: SHA3-512 block hashes, hash links, both signatures on every block, and for recent blocks the log roots, entry roots and RFC 9162 consistency proofs. Free; anyone can run it.

  • qledger_entry_proof

    Prove an entry (by its receipt hash) is sealed in a quantum block: the block, its post-quantum signatures, its on-chain settlement and the Merkle inclusion proof. Reveals no entry contents. Free.

  • qledger_seal

    Seal your newest entries into a quantum block now instead of waiting for the next scheduled block (every few minutes). Does nothing if no entries are waiting. Requires the organization API key.

  • fortress_tpi_list

    Your organization's two-person requests. Requires the organization API key.

  • ledger_evidence_bundle

    Export a self-contained evidence package for auditors, courts or air-gapped systems: every entry, the hash chain, an RFC 9162 inclusion proof, the signed tree head, on-chain checkpoint and Privi's keys, signed with Ed25519 and ML-DSA-87. Verify offline with verify_bundle.py (GET…

  • live_info

    Real-time Privi: WebSocket and server-sent-event streams (trust changes, your own audit tail, approvals), a kill switch, human approvals, a metered MCP gateway and paid agent-to-agent rooms. Returns the endpoints, channels, frames and what each plan gets. Free; no key needed.

  • live_kill

    Stop an agent at once: mandate_spend, your gateways and your room messages are refused until live_resume. Takes effect on the next call, and is pushed to your live channel immediately. Audit logging keeps working. Requires the organization API key.

  • live_resume

    Lift a kill switch set with live_kill. Requires the organization API key.

  • live_status

    Your kill switches, live-approval thresholds, pending approvals, gateways, rooms and usage this month. Requires the organization API key.

  • approval_policy_set

    Make mandate_spend pause for a human on large payments: any payment over the threshold creates an approval request that the mandate's principal must sign with their wallet before the agent can spend. Requires the organization API key.

  • approval_request

    Ask a human to approve (or deny) an action. Returns approve_url for them: they read the request and sign with their wallet (free, no transaction). Your agent then calls approval_wait, or watches your live channel for approval.approved. Only the named wallet can decide; your API…

  • approval_status

    Status of an approval request: pending, approved, denied, expired or cancelled, with the human's wallet signature once they decide. Free.

  • approval_wait

    Block until the human decides (or timeout_s passes). Returns the current status; if still pending, call again. Free.

  • approval_cancel

    Withdraw an approval request (or revoke an approval not yet used). Your key cannot approve, only cancel. Requires the organization API key.

  • approval_list

    Your organization's approval requests, newest first. Requires the organization API key.

  • trust_events

    The latest trust-change events: passports issued, revoked or re-scored, wallets bound or unbound, mandates activated or revoked, transparency-log heads anchored. Without a Pro key the feed is delayed (see live_info); use the WebSocket or SSE stream for real time. Free.

  • gateway_create

    Put your MCP server behind Privi. You get an HTTP URL and a WebSocket URL that forward to it unchanged (x402 payments keep working) while Privi rate-limits callers, optionally requires a Privi Passport, meters every tool call and writes each call to your tamper-evident log. The…

  • gateway_set_guard

    Turn Privi Guard on for every tool result that passes through your gateway: tag adds the verdict and a receipt id in result._meta['privi/guard']; block also replaces injected results with an error before your agents see them. Each result is one Guard check (free allowance, then…

  • gateway_info

    Public description of a gateway: where it forwards, whether callers need a Passport, its rate limit and its call counts. Free.

  • gateway_list

    Your organization's gateways. Requires the organization API key.

  • gateway_stats

    Calls, errors, denials and x402 payment prompts per tool and per day for one of your gateways, plus your monthly quota. Requires the organization API key.

  • gateway_delete

    Turn a gateway off. Its URLs stop working at once; history stays in your log. Requires the organization API key.

  • room_open

    Open a live, hash-chained conversation room for two organizations' agents. Both connect over WebSocket (ws_url), authenticate with their API keys and talk in real time; closing the room seals the transcript on the Privi chain. Optionally charge per message, paid under the guest'…

  • room_info

    Public facts about a room: parties, price, message count, head hash and its seal once closed. No message text. Free.

  • room_list

    Rooms your organization owns or joined. Requires the organization API key.

Details

Endpointhttps://privi-ledger.onrender.com/mcp (Streamable HTTP)
First published10 Nov 2026
Last updated10 Nov 2026
Registry nameio.github.canoydario847-cloud/privi-ledger

More cloud and devops servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.