Record AI decisions to a tamper-evident audit ledger from any MCP-compatible agent.
Connect Runs on your machine
claude mcp add audit-ledger-mcp -e AUDIT_API_URL=<AUDIT_API_URL> -e AUDIT_WRITE_KEY=<AUDIT_WRITE_KEY> -e AUDIT_READ_KEY=<AUDIT_READ_KEY> -e AUDIT_TIMEOUT_MS=<AUDIT_TIMEOUT_MS> -e AUDIT_RETRY_ATTEMPTS=<AUDIT_RETRY_ATTEMPTS> -e AUDIT_HMAC_KEY=<AUDIT_HMAC_KEY> -- npx -y [email protected]{
"mcpServers": {
"audit-ledger-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"AUDIT_API_URL": "<AUDIT_API_URL>",
"AUDIT_WRITE_KEY": "<AUDIT_WRITE_KEY>",
"AUDIT_READ_KEY": "<AUDIT_READ_KEY>",
"AUDIT_TIMEOUT_MS": "<AUDIT_TIMEOUT_MS>",
"AUDIT_RETRY_ATTEMPTS": "<AUDIT_RETRY_ATTEMPTS>",
"AUDIT_HMAC_KEY": "<AUDIT_HMAC_KEY>"
}
}
}
}{
"mcpServers": {
"audit-ledger-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"AUDIT_API_URL": "<AUDIT_API_URL>",
"AUDIT_WRITE_KEY": "<AUDIT_WRITE_KEY>",
"AUDIT_READ_KEY": "<AUDIT_READ_KEY>",
"AUDIT_TIMEOUT_MS": "<AUDIT_TIMEOUT_MS>",
"AUDIT_RETRY_ATTEMPTS": "<AUDIT_RETRY_ATTEMPTS>",
"AUDIT_HMAC_KEY": "<AUDIT_HMAC_KEY>"
}
}
}
}{
"servers": {
"audit-ledger-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"AUDIT_API_URL": "<AUDIT_API_URL>",
"AUDIT_WRITE_KEY": "<AUDIT_WRITE_KEY>",
"AUDIT_READ_KEY": "<AUDIT_READ_KEY>",
"AUDIT_TIMEOUT_MS": "<AUDIT_TIMEOUT_MS>",
"AUDIT_RETRY_ATTEMPTS": "<AUDIT_RETRY_ATTEMPTS>",
"AUDIT_HMAC_KEY": "<AUDIT_HMAC_KEY>"
}
}
}
}Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
AUDIT_API_URLOptional | Your deployed audit-ledger API endpoint (e.g. https://<api-id>.execute-api.<region>.amazonaws.com/prod). Leave unset to run in sandbox mode against the public shared tenant. |
AUDIT_WRITE_KEYOptional, secret | Tenant write key for your deployed ledger. Required if AUDIT_API_URL is set and you want to call record_decision. |
AUDIT_READ_KEYOptional, secret | Tenant read key for your deployed ledger. Required if AUDIT_API_URL is set and you want to call verify_decision or list_decisions. |
AUDIT_TIMEOUT_MSOptional | HTTP timeout in milliseconds. Defaults to 5000. |
AUDIT_RETRY_ATTEMPTSOptional | Number of retry attempts on transient failures. Defaults to 3. |
AUDIT_HMAC_KEYOptional, secret | Tenant secret used to HMAC-SHA256 PII and prompts locally before sending. Generate once per tenant (e.g. node -e "console.log(require('crypto').randomBytes(32).toString('hex'))") and keep it in your environment. The key never leaves your process. If unset, the MCP falls back to plain SHA-256 for ba… |
Details
| Package | [email protected] (NPM, stdio) |
| First published | 5 Jun 2026 |
| Last updated | 5 Jun 2026 |
| Registry name | io.github.shahidh68/audit-ledger-mcp |
More ai and media servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.