agent-staking-mcp-server
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@agent-staking-mcp-serverdeposit 50 REP for agent-alice"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
agent-staking-mcp-server
MCP server for agent reputation staking — trust through skin-in-the-game.
Agents deposit stakes as trust collateral. Bad behavior gets slashed. Good actors build reputation over time. Creates a self-regulating trust layer for the agent economy.
Why Staking?
Traditional reputation systems are cheap to game. Staking changes the incentive structure:
Agents that stake signal commitment — they have something to lose
Slashing punishes bad behavior with real consequences
Network effect — the more agents stake, the more trustworthy the entire network becomes
Related MCP server: Agent Identity MCP Server
Tools
Tool | Description |
| Deposit stake as trust collateral |
| Check an agent's stake and trust tier |
| Get stake-weighted reputation score (0–100) |
| Slash an agent's stake for bad behavior |
| Open a dispute between two agents |
| Resolve a dispute and auto-slash the loser |
| Ranked list of most trustworthy agents |
Trust Tiers
Balance | Tier |
0 | unverified |
1–9 REP | bronze |
10–49 REP | silver |
50–199 REP | gold |
200+ REP | platinum |
Installation
pip install agent-staking-mcp-serverClaude Desktop Config
{
"mcpServers": {
"agent-staking": {
"command": "agent-staking-mcp-server"
}
}
}Example Usage
# Deposit stake
stake_deposit("agent-alice", 100, "REP")
# Verify trust
stake_verify("agent-alice")
# → balance: 100, trust_tier: "gold", trust_score: 50.0
# Open dispute
dispute_open("agent-alice", "agent-bob", "Bob failed to deliver, took payment", stake_at_risk=50.0)
# Resolve — Alice wins, Bob gets slashed
dispute_resolve("dispute_12345_agent-al", "agent-alice", "Evidence confirmed non-delivery")
# → agent-bob's stake reduced by 50 REP automatically
# Leaderboard
stake_leaderboard(top_n=5)How It Works
Deposit: Agents stake REP tokens to prove commitment
Build trust: Longevity + high balance + no slashes = high reputation score
Slash: Bad actors get penalized — slash events are permanent and public
Disputes: Structured conflict resolution with automatic stake enforcement
Leaderboard: Most trustworthy agents ranked for easy discovery
Data is stored locally in ~/.agent_staking_store.json — persistent across restarts.
Related Servers
agent-reputation-mcp-server — Basic reputation tracking
shared-context-cache-mcp-server — Shared knowledge cache
agent-identity-mcp-server — Agent identity management
License
MIT
Available Tools
7 toolstool_dispute_openA
Open a dispute between two agents.
If the defendant loses, their stake is automatically slashed by the stake_at_risk amount.
Args: claimant_id: Agent filing the complaint defendant_id: Agent being accused description: What happened (will be permanently logged) stake_at_risk: Amount of defendant's stake to slash if they lose
| Name | Required | Description | Default |
|---|---|---|---|
| claimant_id | Yes | ||
| defendant_id | Yes | ||
| description | Yes | ||
| stake_at_risk | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It discloses that the defendant's stake is automatically slashed if they lose, and that the description is permanently logged. However, it does not mention authorization requirements, other side effects, or whether the dispute can be canceled.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise and front-loaded with the purpose. Every sentence adds information, though the argument list could be more succinctly integrated.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 4 parameters, no output schema, and no annotations, the description covers the basic action and one key behavioral effect. It lacks details on return values, error conditions, or prerequisites (e.g., both agents must have stakes).
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must add meaning. It provides minimal context for each parameter (e.g., 'Agent filing the complaint' for claimant_id, 'What happened (will be permanently logged)' for description). This adds some value but does not fully compensate for the missing schema descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Open a dispute between two agents.' This is a specific verb+resource combination that distinguishes it from siblings like tool_dispute_resolve, tool_slash_stake, etc.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explains a consequence (stake slashing if defendant loses) but does not provide explicit guidance on when to use this tool versus alternatives like tool_dispute_resolve. No exclusions or context are given.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tool_dispute_resolveA
Resolve an open dispute and optionally slash the loser's stake.
If claimant wins, defendant's stake is automatically slashed by the disputed amount.
Args: dispute_id: ID of the dispute to resolve (from dispute_open) winner_id: Agent ID of the winner (claimant or defendant) resolution_notes: Explanation of the resolution decision
| Name | Required | Description | Default |
|---|---|---|---|
| dispute_id | Yes | ||
| winner_id | Yes | ||
| resolution_notes | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full burden. It discloses stake slashing behavior and the condition (claimant win). Slight ambiguity in 'optional' vs 'automatic' but overall transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Description is concise (6 lines), front-loaded with main purpose, and uses an Args block for clarity. No unnecessary information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Covers the main side effect (stake slashing) but lacks prerequisites like dispute must be open or stakeholder conditions. No output schema, so return values not specified. Slightly incomplete but adequate for a simple tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage 0%, so description must add meaning. It explains dispute_id and winner_id clearly, but resolution_notes is minimal. No format or constraints given beyond basic explanations.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool resolves an open dispute and optionally slashes loser's stake. It specifies the automatic slashing when claimant wins, and distinguishes from sibling tools like tool_dispute_open or tool_slash_stake.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Implies usage after a dispute is opened (via sibling tool_dispute_open) but doesn't explicitly state when to use or not use. No alternatives mentioned, but the context is clear enough for an AI agent.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tool_reputation_by_stakeA
Get a stake-weighted reputation score for an agent (0-100).
Combines stake size, slash history, and membership duration. Returns score, grade (A+ to F), and breakdown.
Args: agent_id: Agent identifier to evaluate
| Name | Required | Description | Default |
|---|---|---|---|
| agent_id | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Without annotations, the description adds some transparency by listing factors combined (stake size, slash history, membership duration) and return fields (score, grade, breakdown). However, it does not disclose whether the tool is read-only or has side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences and an args line with no waste. The purpose is front-loaded, and every sentence adds value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-parameter tool with no output schema, the description adequately covers what the tool returns and the factors used. Minor gap: no details on the breakdown structure.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The description explains 'agent_id' as 'Agent identifier to evaluate', adding context beyond the schema title. With 0% schema description coverage, this is helpful, but still lacks format or examples.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action 'Get' and the resource 'stake-weighted reputation score', with a specific range (0-100). It distinguishes from sibling tools by focusing on reputation rather than disputes, slashing, or leaderboard.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit guidance on when to use this tool versus alternatives. The description does not mention when not to use it or compare to siblings like tool_stake_leaderboard, which could provide raw stake data.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tool_slash_stakeA
Slash an agent's stake for bad behavior (fraud, non-delivery, rule violations).
The slash is permanently recorded in the agent's history. Slash events reduce the agent's trust score and tier.
Args: agent_id: Agent to slash slash_amount: Amount to slash from their stake reason: Description of the bad behavior (logged permanently)
| Name | Required | Description | Default |
|---|---|---|---|
| agent_id | Yes | ||
| slash_amount | Yes | ||
| reason | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, but the description fully discloses key behavioral traits: the slash is permanently recorded in the agent's history and reduces the agent's trust score and tier. This clearly communicates the destructive, irreversible nature of the action, which is critical for an agent deciding to invoke this tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise: two sentences for purpose and effects, then a three-line bullet list for arguments. No redundant or irrelevant information. Every sentence adds value, and the structure is clear and scannable.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the lack of annotations, output schema, and low schema coverage, the description covers the key behavioral effects and parameter meanings. However, it omits details like return value (confirmation message?), error cases, and potential limits on slash_amount. It is adequate but not fully comprehensive for an agent to use without additional context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so the description must compensate. It provides brief explanations for all three parameters (agent_id, slash_amount, reason) beyond their schema titles. However, it does not specify constraints (e.g., slash_amount must be positive, reason max length) or format, leaving some ambiguity for the agent.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: slashing an agent's stake for bad behavior (fraud, non-delivery, rule violations). It specifies the action (slash) and the resource (agent's stake), and it distinguishes from sibling tools (e.g., stake_deposit, stake_verify) by focusing on punitive action.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description lists concrete examples of when to use the tool (fraud, non-delivery, rule violations) and mentions permanent recording and impact on trust score/tier. While it doesn't explicitly say when not to use or name alternatives, it implies usage for punitive actions, which provides sufficient context for selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tool_stake_depositA
Deposit stake for an agent as a trust proof.
Higher stake = higher trust tier. Tiers: unverified → bronze → silver → gold → platinum. Stake can be slashed for bad behavior.
Args: agent_id: Unique identifier for the agent (e.g. DID, UUID, name) amount: Amount to stake (must be > 0) currency: Currency/token for the stake (default: REP)
| Name | Required | Description | Default |
|---|---|---|---|
| agent_id | Yes | ||
| amount | Yes | ||
| currency | No | REP |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It notes that stake can be slashed, adding behavioral context. However, it does not disclose other traits such as whether deposits are additive, idempotent, or require specific auth. The description gives some transparency but lacks depth for a mutation tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise, with a clear first sentence stating purpose, followed by tier explanation and a warning about slashing. The structured Args section is efficient. Every sentence adds value without redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
No output schema exists, and the description does not mention what the tool returns (e.g., updated stake, confirmation). While the tool is simple, the lack of return value information leaves a gap. Sibling tools provide some context, but completeness for a deposit operation could be improved.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, but the description adds meaning to all three parameters: agent_id (e.g., DID, UUID, name), amount (>0), and currency (default: REP). This fully compensates for the missing schema documentation, providing essential usage guidance.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action: 'Deposit stake for an agent as a trust proof.' It explains the purpose (increasing trust tier) and distinguishes from sibling tools like slash, verify, and leaderboard by focusing on the deposit action. The verb 'deposit' and resource 'stake' are specific and unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides context (higher stake = higher tier) but lacks explicit guidance on when to use this tool versus alternatives like slash or verify. It implies usage for increasing trust but does not state exclusions or prerequisites. The information about tiers and slashing is helpful but not directive.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tool_stake_leaderboardA
Get the trust leaderboard — top staked agents ranked by trust score.
Shows the most trustworthy agents in the network. Higher stake + no slashes + longer membership = better ranking.
Args: top_n: Number of agents to show (default: 10)
| Name | Required | Description | Default |
|---|---|---|---|
| top_n | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description fully bears the burden. It discloses that the tool returns a leaderboard and explains ranking criteria ('Higher stake + no slashes + longer membership = better ranking'). However, it does not mention whether the operation is read-only or any potential side effects, though it is clearly a read operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise (4 lines, two sentences plus an Args section). Every sentence adds value: explains purpose, ranking logic, and parameter. No superfluous content.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema, the description could explain the return format (e.g., list of agent names with trust scores or stake amounts). It only describes ranking criteria but not the structure of results. For a simple leaderboard, this is acceptable but leaves some ambiguity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description compensates by explaining the single parameter top_n as 'Number of agents to show (default: 10)'. This adds meaning beyond the schema's title and default value.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Get the trust leaderboard — top staked agents ranked by trust score.' It uses a specific verb ('Get') and resource ('trust leaderboard'), and the mention of 'staked agents' and 'trust score' distinguishes it from sibling tools like tool_reputation_by_stake or tool_slash_stake.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage for viewing most trustworthy agents but does not explicitly state when to use this tool versus alternatives like tool_reputation_by_stake. No 'when not to use' guidance is provided, and no alternative tools are named.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tool_stake_verifyA
Verify an agent's stake status and trust level.
Returns current balance, trust tier, slash history, and trust score.
Args: agent_id: Agent identifier to look up
| Name | Required | Description | Default |
|---|---|---|---|
| agent_id | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full burden. It explicitly states it is a read-only verification returning balance, trust tier, slash history, and trust score. This clearly indicates no destructive side effects. However, it omits authentication requirements or rate limits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Description is concise (4 lines), front-loaded with purpose, and includes structured Args block. Every sentence adds value with no extraneous text.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is simple with 1 parameter. Description explains return values (balance, trust tier, etc.) compensating for lack of output schema. However, it could mention that verification is typically a prerequisite for other stake operations, but that overlaps with usage guidelines.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Only one parameter (agent_id). Description adds 'to look up' which is minimal beyond the schema's title and type. With 0% schema description coverage, the description partially compensates but does not provide rich semantic detail like expected format or example.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'Verify' and the resource 'agent's stake status and trust level'. It distinguishes from siblings like tool_slash_stake or tool_stake_deposit by focusing on verification rather than mutation or deposits.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit when-to-use or when-not-to-use guidance. The description implies it is for checking status before actions like disputes or slashes, but does not mention alternatives or exclusions. Adequate but lacks proactive guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
7 tool updates
v0.1.0- First observed
tool_dispute_open - First observed
tool_dispute_resolve - First observed
tool_reputation_by_stake - First observed
tool_slash_stake - First observed
tool_stake_deposit - First observed
tool_stake_leaderboard - First observed
tool_stake_verify
TDQS
Each tool targets a distinct operation: dispute opening/resolution, stake deposit/verification/leaderboard/slashing, and reputation scoring. No overlapping or ambiguous purposes.
Most tools follow a noun_verb pattern (e.g., stake_deposit, dispute_open) or verb_noun (slash_stake). However, reputation_by_stake deviates with a preposition, and leaderboard is a noun rather than an action.
7 tools cover the core staking and dispute resolution workflows without being too few or excessive. The number feels right for the domain.
Core CRUD-like operations are present for staking (deposit, verify, slash) and disputes (open, resolve). Missing are a withdraw/unstake tool and perhaps a dispute list, but these are not essential for basic functionality.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
MCP server connecting AI agents to non-custodial staking data across 130+ networks.
The vetted, cross-LLM marketplace of doer agents — itself an MCP server.
MCP-native Trust Infrastructure for AI Agents. Persistent encrypted memory with Trust Quotient.
Trust infrastructure for AI agents. Portable reputation (JTS 0-5), agent discovery, vouching.
Related MCP Servers
- AlicenseAqualityDmaintenanceTrust intelligence MCP server for AI agents. 19 tools for identity stamps, reputation scoring (0-100), agent registry, forensic audit trails, ERC-8004 bridge, and A2A passports via x402 USDC micropayments.191Apache 2.0
- AlicenseNot gradedqualityDmaintenanceMCP Server for AI agent identity and authorization. Create, verify, and manage agent identities with trust scores and scoped authorization tokens.MIT
- FlicenseAqualityDmaintenanceReputation and trust scoring service for AI agents, exposed as an MCP server. Evaluate counterparties, report interactions, issue portable trust certificates, and detect Sybil attacks.23-
- AlicenseAqualityDmaintenanceMCP server for AI agent transaction insurance and escrow — protect agent-to-agent payments with smart escrow, dispute resolution, and risk scoring.11MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/AiAgentKarl/agent-staking-mcp-server'
If you have feedback or need assistance with the MCP directory API, please join our Discord server