Kevros — Agentic Identity Trust
Agentic identity trust: precision decisioning, cryptographic release tokens, hash-chained proof
我該用這個嗎
品質與安全性
發現項目(3)
- LOW在 verify-outcome 中
- LOW在 check-peer 中
- LOW在 verify-token 中
根據工具定義與協定合規性的自動化分析。
上下文成本
這是每次將伺服器的工具載入模型上下文時所消耗的約略 token 數量。數量越高,可用於其他工作的注意力就越少。
安裝
一鍵安裝
將以下內容加入你的 `claude_desktop_config.json` 檔案:
{
"mcpServers": {
"kevros": {
"url": "https://governance.taskhawktech.com/mcp/"
}
}
}遠端端點
https://governance.taskhawktech.com/mcp/streamable-http它能做什麼
工具清單
工具(9)
⚪verify(action_type, action_payload, agent_id, policy_context, template_id, ...)
Verify an action against policy bounds before executing it. Returns ALLOW (proceed), CONSTRAIN (proceed with modified values; emitted on the wire as the legacy value CLAMP - both refer to the same verdict, CONSTRAIN is the public name), or DENY (stop). Every verification is recorded in a hash-chained provenance ledger. Cost: $0.01 per call.
輸入結構描述
{
"type": "object",
"properties": {
"action_type": {
"description": "Category of action to verify (e.g. 'deploy', 'trade', 'send_email')",
"type": "string"
},
"action_payload": {
"additionalProperties": true,
"description": "Action parameters to verify against policy bounds",
"type": "object"
},
"agent_id": {
"description": "Unique identifier of the agent requesting verification",
"type": "string"
},
"policy_context": {
"anyOf": [
{
"additionalProperties": true,
"type": "object"
},
{
"type": "null"
}
],
"default": null,
"description": "Optional policy overrides such as max_values or forbidden_keys"
},
"template_id": {
"anyOf": [
{
"type": "string"
},
{
"type": "null"
}
],
"default": null,
"description": "Named policy template (e.g. 'robotics-arm', 'financial-transaction'). Merged with policy_context."
},
"idempotency_key": {
"anyOf": [
{
"type": "string"
},
{
"type": "null"
}
],
"default": null,
"description": "Optional key for idempotent retries - same key returns cached result"
}
},
"required": [
"action_type",
"action_payload",
"agent_id"
],
"additionalProperties": false
}輸出結構描述
{
"type": "object",
"properties": {
"result": {
"type": "string"
}
},
"required": [
"result"
],
"x-fastmcp-wrap-result": true
}🟡attest(agent_id, action_description, action_payload, context)
Create a hash-chained provenance record for an action you've taken. Each attestation extends the append-only evidence chain. The hash can be independently verified by any third party. Cost: $0.02 per call.
輸入結構描述
{
"type": "object",
"properties": {
"agent_id": {
"description": "Unique identifier of the attesting agent",
"type": "string"
},
"action_description": {
"description": "Human-readable description of the action taken",
"type": "string"
},
"action_payload": {
"additionalProperties": true,
"description": "Structured data describing the action (hashed into provenance)",
"type": "object"
},
"context": {
"anyOf": [
{
"additionalProperties": true,
"type": "object"
},
{
"type": "null"
}
],
"default": null,
"description": "Optional metadata such as environment, trigger, or session info"
}
},
"required": [
"agent_id",
"action_description",
"action_payload"
],
"additionalProperties": false
}輸出結構描述
{
"type": "object",
"properties": {
"result": {
"type": "string"
}
},
"required": [
"result"
],
"x-fastmcp-wrap-result": true
}⚪bind(agent_id, intent_type, intent_description, command_payload, goal_state, ...)
Declare an intent and cryptographically bind it to a command. Proves that the command was issued in service of the declared intent. Use verify-outcome after execution to close the loop. Cost: $0.02 per call.
輸入結構描述
{
"type": "object",
"properties": {
"agent_id": {
"description": "Unique identifier of the agent declaring intent",
"type": "string"
},
"intent_type": {
"description": "Category of intent (e.g. 'navigation', 'transaction', 'deployment')",
"type": "string"
},
"intent_description": {
"description": "Human-readable description of what the agent intends to do",
"type": "string"
},
"command_payload": {
"additionalProperties": true,
"description": "The command that will be executed to fulfill this intent",
"type": "object"
},
"goal_state": {
"anyOf": [
{
"additionalProperties": true,
"type": "object"
},
{
"type": "null"
}
],
"default": null,
"description": "Expected end state for outcome verification"
},
"intent_source": {
"default": "AI_PLANNER",
"description": "Origin of intent: AI_PLANNER, HUMAN_OPERATOR, or SYSTEM",
"type": "string"
},
"parent_intent_id": {
"anyOf": [
{
"type": "string"
},
{
"type": "null"
}
],
"default": null,
"description": "ID of parent intent for hierarchical intent chains"
}
},
"required": [
"agent_id",
"intent_type",
"intent_description",
"command_payload"
],
"additionalProperties": false
}輸出結構描述
{
"type": "object",
"properties": {
"result": {
"type": "string"
}
},
"required": [
"result"
],
"x-fastmcp-wrap-result": true
}⚪verify-outcome(agent_id, intent_id, binding_id, actual_state, tolerance)
Verify that an executed action achieved its declared intent. Closes the loop: intent -> command -> action -> outcome -> verification. Free (included with bind).
輸入結構描述
{
"type": "object",
"properties": {
"agent_id": {
"description": "Unique identifier of the agent whose outcome is being verified",
"type": "string"
},
"intent_id": {
"description": "ID of the original intent from governance_bind",
"type": "string"
},
"binding_id": {
"description": "ID of the intent-command binding from governance_bind",
"type": "string"
},
"actual_state": {
"additionalProperties": true,
"description": "Observed end state after action execution, compared against goal_state",
"type": "object"
},
"tolerance": {
"default": 0.1,
"description": "Numeric tolerance for goal matching (0.1 = 10% deviation allowed)",
"type": "number"
}
},
"required": [
"agent_id",
"intent_id",
"binding_id",
"actual_state"
],
"additionalProperties": false
}輸出結構描述
{
"type": "object",
"properties": {
"result": {
"type": "string"
}
},
"required": [
"result"
],
"x-fastmcp-wrap-result": true
}🟢bundle(agent_id, time_range_start, time_range_end, max_records, include_intent_chains, ...)
Generate a certifier-grade compliance evidence bundle. Contains hash-chained provenance, intent bindings, PQC attestations, and verification instructions. Independently verifiable without Kevros access. Cost: $0.05 per call.
輸入結構描述
{
"type": "object",
"properties": {
"agent_id": {
"description": "Agent whose provenance records to include in the bundle",
"type": "string"
},
"time_range_start": {
"anyOf": [
{
"type": "string"
},
{
"type": "null"
}
],
"default": null,
"description": "ISO 8601 start time filter (inclusive)"
},
"time_range_end": {
"anyOf": [
{
"type": "string"
},
{
"type": "null"
}
],
"default": null,
"description": "ISO 8601 end time filter (inclusive)"
},
"max_records": {
"default": 10000,
"description": "Maximum number of provenance records to include",
"type": "integer"
},
"include_intent_chains": {
"default": true,
"description": "Include intent-command binding chains in the bundle",
"type": "boolean"
},
"include_pqc_signatures": {
"default": true,
"description": "Include post-quantum ML-DSA-87 block signatures",
"type": "boolean"
},
"include_verification_instructions": {
"default": true,
"description": "Include step-by-step verification procedure for auditors",
"type": "boolean"
}
},
"required": [
"agent_id"
],
"additionalProperties": false
}輸出結構描述
{
"type": "object",
"properties": {
"result": {
"type": "string"
}
},
"required": [
"result"
],
"x-fastmcp-wrap-result": true
}🟢health(verbose)
Check the governance gateway health status. Free.
輸入結構描述
{
"type": "object",
"properties": {
"verbose": {
"default": false,
"description": "Return additional details such as chain length and PQC signing status",
"type": "boolean"
}
},
"additionalProperties": false
}輸出結構描述
{
"type": "object",
"properties": {
"result": {
"type": "string"
}
},
"required": [
"result"
],
"x-fastmcp-wrap-result": true
}🟢status(include_chain_details)
Check your current usage and quota: calls used, calls remaining, tier, rate limits, and billing status. Free.
輸入結構描述
{
"type": "object",
"properties": {
"include_chain_details": {
"default": false,
"description": "Include hash-chain integrity check and latest provenance epoch",
"type": "boolean"
}
},
"additionalProperties": false
}輸出結構描述
{
"type": "object",
"properties": {
"result": {
"type": "string"
}
},
"required": [
"result"
],
"x-fastmcp-wrap-result": true
}🟢check-peer(agent_id)
Check another agent's trust score and governance history. Returns trust score (0-100), chain length, attestation count, and tier. Free, no API key needed.
輸入結構描述
{
"type": "object",
"properties": {
"agent_id": {
"description": "ID of the peer agent to look up",
"type": "string"
}
},
"required": [
"agent_id"
],
"additionalProperties": false
}輸出結構描述
{
"type": "object",
"properties": {
"result": {
"type": "string"
}
},
"required": [
"result"
],
"x-fastmcp-wrap-result": true
}🟢verify-token(release_token, token_preimage)
Verify a release token from another agent. Confirms the token is authentic, was issued by the Kevros gateway, and remains currently authorized after any halt or mode transition. Free, no API key needed.
輸入結構描述
{
"type": "object",
"properties": {
"release_token": {
"description": "Release token string received from governance_verify",
"type": "string"
},
"token_preimage": {
"anyOf": [
{
"type": "string"
},
{
"type": "null"
}
],
"default": null,
"description": "Deprecated. The gateway now performs verification entirely server-side using the release_token alone; any value supplied here is ignored. Field retained for backward compatibility with v1 SDK callers and will be removed in a future release."
}
},
"required": [
"release_token"
],
"additionalProperties": false
}輸出結構描述
{
"type": "object",
"properties": {
"result": {
"type": "string"
}
},
"required": [
"result"
],
"x-fastmcp-wrap-result": true
}社群
證據