Install
$ agentstack add mcp-authenticiq-receipts-mcp ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
receipts-mcp
MCP middleware that emits signed receipts for tool calls while transparently forwarding broader MCP server traffic.
Status
This repository is in active internal build. The stdio-based MCP shim path and local client packs for Claude Desktop, Cursor, VS Code, and Claude Code have landed for local development. The first OpenAI developer or ChatGPT pack is also documented as a remote MCP deployment target, with broader transport and additional client packs still in progress.
Current internal surface:
- deterministic input and output hashing for receipt payloads
- ML-DSA-87 signing aligned to
agent-receipts/v1 - stdout, file, HTTP, and local git sinks
- stdio upstream forwarding via the MCP TypeScript SDK
- transparent proxying for tools, prompts, and resources, including
resources/subscribeandresources/unsubscribe - forwarding for upstream
notifications/tools/list_changed,notifications/prompts/list_changed,notifications/resources/list_changed, andnotifications/resources/updated - Claude Desktop, Cursor, VS Code, and Claude Code setup docs with config examples for the current stdio deployment model
- OpenAI developer or ChatGPT remote MCP guidance for the current remote deployment target
Still in progress:
- broader MCP transport coverage beyond stdio
- additional client integration packs and demos beyond Claude Desktop, Cursor, VS Code, Claude Code, and the OpenAI developer or ChatGPT remote pack
- end-to-end verification against released
agent-receiptsJS bindings
Planned launch surface:
- Transparent MCP shim for upstream tool servers
- Local file, stdout, and HTTP sinks
- Drop-in config examples for Claude Desktop, Cursor, VS Code, Claude Code, and OpenAI or ChatGPT MCP integrations
- End-to-end verification with
agent-receipts
See docs/DESIGN.md for the internal architecture and failure-mode decisions, docs/CLAUDE_DESKTOP.md for the Claude Desktop pack, docs/CURSOR.md for the Cursor pack, docs/VSCODE.md for the VS Code pack, docs/CLAUDE_CODE.md for the Claude Code pack, and docs/CHATGPT_DEVELOPER.md for the OpenAI developer or ChatGPT pack.
This project is intended to be usable independently of StrataCodes.
Maintained by AuthenticIQ. StrataCodes may later use this project in production as a downstream commercial implementation.
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: authenticiq
- Source: authenticiq/receipts-mcp
- License: Apache-2.0
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.