AgentStamp
About
Trust intelligence platform for AI agents — identity certification, trust scoring, forensic audit trails, and x402 micropayments. 14 MCP tools.
Details
- Author
- vinaybhosle
- Categories
- Developer Tools, AI, Security, Other
Jump to
Setup
Install AgentStamp in your MCP client (Claude Desktop, Cursor, Windsurf, and others).
Repository: https://github.com/vinaybhosle/agentstamp
Follow the installation instructions in the repository README, then restart your MCP client.
A lightweight x402-powered platform combining AI agent identity certification, a public agent registry, reputation scores, cross-protocol passports, and a digital wishing well — all payable via USDC micropayments on Base and Solana.
git clone https://github.com/vinaybhosle/agentstamp.git cd agentstamp npm install cp .env.example .env # Edit with your wallet address npm start # Backend at http://localhost:4005
cd web npm install npm run dev # Development at http://localhost:3000 npm run build && npm start # Production at http://localhost:4000
npm run seed # 5 agents, 5 stamps, 10 wishes, 5 endorsements
- Runtime:Node.js + Express
- Database:SQLite (better-sqlite3, WAL mode)
- Payments:x402 protocol — USDC on Base + Solana (dual-chain)
- Signing:Ed25519 keypair (auto-generated)
- Frontend:Next.js 16 + Tailwind CSS + shadcn/ui
- SDK:agentstamp-verifyon npm (Express + Hono middleware)
- MCP:Live MCP server at/mcp(Streamable HTTP transport, 17 tools)
- HTTPS:Cloudflare Tunnel
- Process Manager:PM2
- Helmetwith HSTS (2-year max-age, includeSubDomains, preload)
- x402 fail-closed guard— if payment middleware fails, paid routes return 503 (not free)
- Wallet validation middleware— mutation requests without wallet address return 401
- Rate limiting— 100 req/min per IP
- MCP session bounds— 1000 max sessions, 30-min idle timeout, 5-min cleanup
- Process error handlers— uncaughtException (graceful shutdown) + unhandledRejection
- Input sanitization— HTML tag stripping, field validation, parameterized SQL queries
- File permissions— Ed25519 keys and .env at mode 0o600
Connect any MCP client tohttps://agentstamp.org/mcp:
- name: Verify Agent Trust uses: vinaybhosle/agentstamp/.github/actions/verify-agent@main with: wallet-address: ${{ secrets.AGENT_WALLET }} min-tier: 'silver' min-score: '60'
See.github/actions/verify-agent/README.mdfor full docs.
import { requireStamp } from 'agentstamp-verify/express'; // Gate your API behind AgentStamp verification app.use('/api/', requireStamp({ minTier: 'bronze', x402: true }));
Also supports Hono middleware and a standalone client. Seenpmfor full docs.
Each stamp produces an Ed25519-signed certificate. To verify independently:
- Fetch the certificate viaGET /api/v1/stamp/verify/:certId
- Extract thecertificateobject andsignature
- Canonicalize:JSON.stringify(cert, Object.keys(cert).sort())
- Verify the base64 signature against the returnedpublic_keyusing Ed25519
See.env.examplefor all configuration options.
Agents with a trust score of 50+ can vouch for other agents via delegation:
- Min delegator score:50
- Max outgoing delegations:5 per agent
- Expiry:30 days (auto-revoked)
- Bonus formula:delegator_score weight * 0.15, capped at 20 total points from all delegations
POST /api/v1/trust/delegate { delegatee_wallet, weight (0.1-2.0), reason } DELETE /api/v1/trust/delegate/:delegateeWallet GET /api/v1/trust/delegations/:wallet
Example: An agent with score 80 delegates with weight 1.0 = +12 points for the delegatee.
Human Sponsor & EU AI Act Compliance
Human Sponsor— Optionalhuman_sponsorfield (email or URL) on agent registration linking the agent to its human operator. Appears in passport, MCP tools, and compliance reports.
AI Act Fields— Optionalai_act_risk_level(minimal/limited/high) andtransparency_declaration(structured JSON: purpose, model_provider, training_data, human_oversight, data_retention).
Returns structured metadata for EU AI Act Article 52 transparency, including risk level, human sponsor, audit chain integrity, and trust status. Also available as MCP toolcompliance_report.
If a private key is compromised or needs rotation:
POST /api/v1/stamp/revoke/:stampId { reason: "key_rotation" | "key_compromise" | "decommissioned" | "owner_request" }
After revoking, mint a new stamp with the new wallet to complete the rotation. The old stamp is permanently revoked and the event is recorded in the audit trail.
Export any agent's passport as a W3C VC Data Model 2.0 credential:
Returns a standardVerifiableCredentialwithAgentTrustCredentialtype, interoperable with any W3C VC verifier. Issuer:did:web:agentstamp.org. Also available as MCP toolget_verifiable_credential.
Make your agent discoverable via DNS by adding a TXT record:
_agentstamp.yourdomain.com TXT "v=as1; wallet=0x...; stamp=gold"
Verify with:GET /api/v1/discovery/dns/yourdomain.com
Generate your TXT record:GET /api/v1/discovery/txt-record/:walletAddress
Also available as MCP tooldns_discovery.
This is a web browser that enables your coding agent, such as Claude Code, to visit websites on your behalf and assist you in identifying bugs or creating UI test cases.
Agent identity and trust framework — DID verification, capability attestation, agent-to-agent authentication by MEOK AI Labs
Cryptographic identity, scoped delegation, values governance, and deliberative consensus for AI agents. 11 tools, Ed25519 signatures, zero blockchain.
A secure MCP server for AI agents to interact with the Authenticator App for 2FA codes and passwords.
Agent identity and key custody — provider keys held in a local encrypted vault and leased to agents under owner approvals, with env-var injection so secrets never enter model context and a one-command kill switch; plus a registry with Ed25519 agent identity, reputation, and messaging.
Identity, secrets, and audit for AI agents. Proxy mode intercepts every MCP tool call.
Open-source API gateway that adds budget enforcement, cost attribution, and monetization to AI agent API calls. MCP-aware with per-tool cost tracking, macaroon-based bearer tokens, L402 Lightning micropayments, and enterprise budget control (Fiat402). The economic firewall for the agent economy.
ALTER - identity infrastructure for the AI economy
Auth0, but for agents. Identity and authentication service for AI agents.
AgentTrust is a pure MCP-only reputation and trust scoring server for AI agents.
It connects Agents to data wallet with DID and verifiable credentials
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.




