AgentStack
MCP verified Apache-2.0 Self-run

Receipts Mcp

mcp-authenticiq-receipts-mcp · by authenticiq

MCP middleware that signs every tool call

No reviews yet
0 installs
2 views
0.0% view→install

Install

$ agentstack add mcp-authenticiq-receipts-mcp

✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

Are you the author of Receipts Mcp? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

receipts-mcp

MCP middleware that emits signed receipts for tool calls while transparently forwarding broader MCP server traffic.

Status

This repository is in active internal build. The stdio-based MCP shim path and local client packs for Claude Desktop, Cursor, VS Code, and Claude Code have landed for local development. The first OpenAI developer or ChatGPT pack is also documented as a remote MCP deployment target, with broader transport and additional client packs still in progress.

Current internal surface:

  • deterministic input and output hashing for receipt payloads
  • ML-DSA-87 signing aligned to agent-receipts/v1
  • stdout, file, HTTP, and local git sinks
  • stdio upstream forwarding via the MCP TypeScript SDK
  • transparent proxying for tools, prompts, and resources, including resources/subscribe and resources/unsubscribe
  • forwarding for upstream notifications/tools/list_changed, notifications/prompts/list_changed, notifications/resources/list_changed, and notifications/resources/updated
  • Claude Desktop, Cursor, VS Code, and Claude Code setup docs with config examples for the current stdio deployment model
  • OpenAI developer or ChatGPT remote MCP guidance for the current remote deployment target

Still in progress:

  • broader MCP transport coverage beyond stdio
  • additional client integration packs and demos beyond Claude Desktop, Cursor, VS Code, Claude Code, and the OpenAI developer or ChatGPT remote pack
  • end-to-end verification against released agent-receipts JS bindings

Planned launch surface:

  • Transparent MCP shim for upstream tool servers
  • Local file, stdout, and HTTP sinks
  • Drop-in config examples for Claude Desktop, Cursor, VS Code, Claude Code, and OpenAI or ChatGPT MCP integrations
  • End-to-end verification with agent-receipts

See docs/DESIGN.md for the internal architecture and failure-mode decisions, docs/CLAUDE_DESKTOP.md for the Claude Desktop pack, docs/CURSOR.md for the Cursor pack, docs/VSCODE.md for the VS Code pack, docs/CLAUDE_CODE.md for the Claude Code pack, and docs/CHATGPT_DEVELOPER.md for the OpenAI developer or ChatGPT pack.

This project is intended to be usable independently of StrataCodes.

Maintained by AuthenticIQ. StrataCodes may later use this project in production as a downstream commercial implementation.

Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet — be the first.

Versions

  • v0.1.0 Imported from the upstream source.