agentseal-mcp


MCP server for AgentSeal. Tamper-proof audit logs for AI agents, using SHA-256 hash chains.

Every agent action is recorded in a hash chain. With this, you can actually prove to your clients that your agent did what it said it did.

Setup

Claude Desktop

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "agentseal": {
      "command": "npx",
      "args": ["-y", "agentseal-mcp"],
      "env": {
        "AGENTSEAL_API_KEY": "as_sk_your_key_here"
      }
    }
  }
}

Restart Claude Desktop after saving.

Cursor / Other MCP hosts

Same configuration — add the server with your API key.

Environment variables

| Variable | Required | Description | |---|---|---| | AGENTSEAL_API_KEY | Yes | Your API key from agentseal.io | | AGENTSEAL_URL | No | Custom API base URL (defaults to production) |

Tools

record_action

Record an agent action to the audit trail. Call this after significant actions to create a cryptographically chained record of what happened and why.

| Parameter | Type | Required | Description | |---|---|---|---| | agent_id | string | Yes | Identifier for the agent (e.g. research-bot) | | action_type | string | Yes | What kind of action (e.g. email:send, file:write, api:call) | | action_params | object | No | Details of the action | | reasoning | string | No | Why the agent decided to take this action | | authorized_by | string | No | Who or what approved the action |

Returns a sequence number and SHA-256 hash confirming the entry was chained.

query_actions

Look up previously recorded actions from the audit trail. Use this to check what actions have been taken or recall past decisions.

| Parameter | Type | Required | Description | |---|---|---|---| | agent_id | string | No | Filter by agent | | action_type | string | No | Filter by action type | | limit | number | No | Max entries to return (default 20) |

verify_chain

Verify the integrity of the hash chain. Each entry's SHA-256 hash includes the previous entry's hash — if any record was modified, the chain breaks and this reports where.

| Parameter | Type | Required | Description | |---|---|---|---| | agent_id | string | No | Verify chain for a specific agent. If omitted, verifies all entries. |

Returns the number of entries verified and whether the chain is intact.

How it works

Each recorded action is hashed with SHA-256. That hash includes the previous entry's hash, forming a chain. Modify any record and every hash after it changes — verify_chain catches it instantly.

Get an API key

Sign up at agentseal.io. Free to use.

Python SDK

For direct integration without MCP: pip install agentseal-sdk. See agentseal-sdk.

License

MIT