Skip to main content
Glama
PiQrypt

PiQrypt MCP Server

by PiQrypt

PiQrypt MCP Server

Cryptographic Audit Trail for AI Agents via Model Context Protocol

MCP npm downloads AISS License Python Node Add to Cursor Install in Claude

Related MCP server: DCL Evaluator

๐Ÿš€ What is PiQrypt MCP?

PiQrypt MCP Server provides Model Context Protocol access to PiQrypt โ€” the post-quantum cryptographic audit trail for AI agents.

Use cases:

  • ๐Ÿค– AI Agents: Sign every decision with cryptographic proof

  • ๐Ÿ“Š n8n Workflows: Add audit trail to automation workflows

  • ๐Ÿฆ Trading Bots: SEC/FINRA compliance for automated trading

  • ๐Ÿ‘ฅ HR Automation: GDPR-compliant AI hiring decisions

  • ๐Ÿฅ Healthcare AI: HIPAA audit trail for medical decisions


๐Ÿ“ฆ Installation

Prerequisites

1. Install piqrypt (required โ€” Python 3.8+)

pip install piqrypt

The MCP server delegates all cryptographic operations to the piqrypt Python package. If it is not installed, the server will return a clear error on every tool call.

2. Install the MCP server (Node.js 18+)

npm install -g @piqrypt/mcp-server

Install via npx (no global install)

npx @piqrypt/mcp-server

Build from source

git clone https://github.com/piqrypt/piqrypt-mcp-server
cd piqrypt-mcp-server
npm install
npm run build

PIQRYPT_PYTHON โ€” custom Python environment

By default the server uses python3 (Linux/Mac) or python (Windows). If piqrypt is installed in a virtual environment, set this variable to point to the right interpreter:

Windows

set PIQRYPT_PYTHON=C:\path\to\venv\Scripts\python.exe

Linux / Mac

export PIQRYPT_PYTHON=/path/to/venv/bin/python

To make it persistent, add it to your MCP client configuration:

{
  "mcpServers": {
    "piqrypt": {
      "command": "piqrypt-mcp-server",
      "args": [],
      "env": {
        "PIQRYPT_PYTHON": "/path/to/venv/bin/python"
      }
    }
  }
}

โš™๏ธ Configuration

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "piqrypt": {
      "command": "piqrypt-mcp-server",
      "args": []
    }
  }
}

n8n (v1.88+)

  1. Install n8n MCP integration

  2. Add PiQrypt MCP server to configuration

  3. Use in workflows via MCP node


Compatible with

MCP clients

Client

Version

Notes

Any MCP-compatible client

MCP spec 2024-11+

stdio transport

n8n

1.88+

via MCP node

Cursor

any

add to mcp settings

VS Code

any

add to mcp settings

Continue

any

add to mcp settings

Windsurf

any

add to mcp settings

Automation platforms (via MCP node)

Platform

Integration

Use case

n8n

MCP node (native)

No-code audit trail

Make.com

HTTP module

Webhook-triggered stamping

Zapier

Webhooks + HTTP

Basic event recording

What you can audit with PiQrypt MCP

Every tool call goes through the same 4 operations โ€” stamp, verify, export, search. Here is what that means in practice depending on your context:

Automated trading / finance Any agent that submits orders, rebalances portfolios, or triggers transactions can stamp each decision before execution. The signed chain is exportable for SEC/FINRA audit without any additional infrastructure.

HR and hiring automation Any workflow that evaluates candidates, scores CVs, or routes applicants can stamp each decision. Provides a GDPR Art.22 compliant audit trail for AI-assisted hiring โ€” who decided what, when, and what data was used (hashed, never stored raw).

Content and publishing pipelines Any agent that drafts, approves, or publishes content can stamp each step. Useful when multiple AI agents collaborate and you need to prove attribution โ€” which agent wrote what, in what order.

DevOps and CI/CD Any agent that triggers deployments, merges branches, or rotates secrets can stamp each action. Provides a tamper-evident record of infrastructure changes made by autonomous agents.

Healthcare and medical AI Any diagnostic or triage agent can stamp each recommendation. Provides a HIPAA-compliant audit trail linking each AI output to a verifiable agent identity.

The common pattern in all cases:

[Agent makes decision]
โ†“
piqrypt_stamp_event    โ† sign + chain
โ†“
[Agent executes action]
โ†“
piqrypt_export_audit   โ† portable proof, verifiable
                          without PiQrypt installed

๐Ÿ› ๏ธ Available Tools

1. piqrypt_stamp_event

Sign an AI decision with cryptographic proof.

Parameters:

  • agent_id (string, required): Agent identifier

  • payload (object, required): Decision data

  • previous_hash (string, optional): Previous event hash for chaining

Example:

const event = await mcp.call('piqrypt_stamp_event', {
  agent_id: 'trading_bot_v1',
  payload: {
    action: 'buy',
    symbol: 'AAPL',
    quantity: 100,
    price: 150.25
  }
});

Returns:

{
  "version": "AISS-1.0",
  "agent_id": "trading_bot_v1",
  "timestamp": 1739382400,
  "nonce": "uuid-...",
  "payload": { ... },
  "previous_hash": "sha256:...",
  "signature": "base64:..."
}

2. piqrypt_verify_chain

Verify integrity of event chain.

Parameters:

  • events (array, required): Events to verify

Example:

const result = await mcp.call('piqrypt_verify_chain', {
  events: [event1, event2, event3]
});

Returns:

{
  "valid": true,
  "events_count": 3,
  "chain_hash": "sha256:...",
  "errors": []
}

3. piqrypt_export_audit

Export audit trail for compliance.

Parameters:

  • agent_id (string, required): Agent to export

  • certified (boolean): Request PiQrypt certification

  • output_format (string): json or pqz

Example:

const audit = await mcp.call('piqrypt_export_audit', {
  agent_id: 'trading_bot_v1',
  certified: true,
  output_format: 'json'
});

4. piqrypt_search_events

Fast search via SQLite index.

Parameters:

  • event_type (string, optional): Filter by type

  • from_timestamp (number, optional): Start time

  • to_timestamp (number, optional): End time

  • limit (number): Max results (default: 100)

Example:

const trades = await mcp.call('piqrypt_search_events', {
  event_type: 'trade_executed',
  from_timestamp: 1739300000,
  limit: 50
});

๐Ÿ“Š Vigil Dashboard (optional, free)

Every stamped event is visible in Vigil โ€” PiQrypt's local monitoring dashboard.

Note: Vigil is not launched automatically by the MCP server. You must start it separately before opening the dashboard.

piqrypt vigil
# โ†’ http://localhost:8421

Free tier includes: chain health, VRS risk score, 7-day history, CRITICAL alerts. Upgrade to Pro for 90-day history, TrustGate governance, and post-quantum signatures.


๐Ÿ—‘๏ธ Managing Agents

Agents are created automatically on first stamp. To view and delete agents:

  1. Start Vigil: piqrypt vigil

  2. Open http://localhost:8421

  3. Go to All Agents view

  4. Check the agents to delete โ†’ click โœ• Delete selected

  5. Confirm โ€” Vigil returns to the welcome screen when no agents remain

Agents are stored in ~/.piqrypt/agents/ on your machine. Deleting an agent removes its keys and event history permanently.


๐Ÿ”’ Security Model

Process Isolation

โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”
โ”‚  MCP Client (any MCP-compatible client)     โ”‚
โ”‚  โ†“ JSON-RPC over stdio              โ”‚
โ”œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ค
โ”‚  MCP Server (TypeScript/Node.js)    โ”‚  โ† No crypto here
โ”‚  โ†“ subprocess call                  โ”‚
โ”œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ค
โ”‚  Python Bridge (bridge.py)          โ”‚
โ”‚  โ†“ invokes CLI                      โ”‚
โ”œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ค
โ”‚  PiQrypt CLI (Python)               โ”‚
โ”‚  โ†“ uses                             โ”‚
โ”œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”ค
โ”‚  Core Crypto (aiss package)         โ”‚  โ† All crypto here
โ”‚  โ€ข Ed25519 / Dilithium3             โ”‚
โ”‚  โ€ข RFC 8785 canonical JSON          โ”‚
โ”‚  โ€ข Hash chains                      โ”‚
โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜

Guarantees

โœ… Private keys never exposed to MCP layer
โœ… All crypto in Python (Ed25519, Dilithium3)
โœ… Same security as CLI (process isolation)
โœ… RFC AISS-1.1 compliant (identical output)
โœ… Input validation before subprocess call


๐Ÿ“š Examples

Trading Bot (n8n)

[Webhook: price alert] 
    โ†“
[AI Decision: buy/sell?]
    โ†“
[PiQrypt MCP: stamp decision]  โ† Audit trail
    โ†“
[Execute trade API]
    โ†“
[Database: store proof]

HR Automation

[Upload CV]
    โ†“
[AI Agent: evaluate candidate]
    โ†“
[PiQrypt MCP: stamp evaluation]  โ† GDPR compliance
    โ†“
[Email HR team]

๐Ÿงช Testing

# Build
npm run build

# Test bridge
python3 src/python/bridge.py stamp '{"agent_id":"test","payload":{"action":"test"}}'

# Test MCP server (manual)
node dist/index.js
# Then send MCP request via stdin

๐Ÿ”ง Troubleshooting

Error: piqrypt is not installed in this Python environment

The Python interpreter used by the MCP server cannot find the piqrypt package.

Fix:

pip install piqrypt

If piqrypt is installed in a virtual environment and not the system Python, set PIQRYPT_PYTHON to point to the correct interpreter:

# Linux / Mac
export PIQRYPT_PYTHON=/path/to/venv/bin/python

# Windows
set PIQRYPT_PYTHON=C:\path\to\venv\Scripts\python.exe

To verify which Python the server will use:

# Linux / Mac
$PIQRYPT_PYTHON -c "import aiss; print('ok')"

# Windows
%PIQRYPT_PYTHON% -c "import aiss; print('ok')"

๐Ÿ“– Documentation


๐Ÿค Contributing

We welcome contributions! See CONTRIBUTING.md.


๐Ÿ“„ License

MCP Server โ†’ MIT License - see LICENSE PiQrypt Core โ†’ free tier + commercial tiers



Built with โค๏ธ by PiQrypt Inc.

Available Tools

4 tools
piqrypt_export_auditA

Export the complete agent audit trail to a portable JSON archive. Set certified=true to request a PiQrypt CA signature for legal admissibility (eIDAS Art.26). The export is self-contained and verifiable without PiQrypt installed.

ParametersJSON Schema
NameRequiredDescriptionDefault
agent_idYesAgent ID to export
certifiedNoCreate certified export (requires Pro license)
output_formatNoOutput format (json or encrypted pqz archive)json

TDQS

A4.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Discloses that export is self-contained and verifiable, and mentions Pro license requirement. Does not detail side effects or reading behavior; with no annotations, this is moderate.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, each adding essential information: purpose and certification detail. No unnecessary words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Lacks output schema but describes the result as a portable JSON archive. Missing details on error conditions or what the audit trail contains, but adequate for a simple export.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. Description adds value for the certified parameter (legal admissibility) and clarifies the export scope (complete trail).

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool exports a complete agent audit trail to JSON, using a specific verb and resource. It distinguishes well from sibling tools like piqrypt_search_events.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides context on when to use certified=true and notes the export is self-contained. Lacks explicit when-not-to-use or alternatives, but siblings are distinct actions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

piqrypt_search_eventsA

Search the agent's cryptographic event history by type, time range, or session. Returns signed events with chain metadata. Use to reconstruct what an agent did during a specific period.

ParametersJSON Schema
NameRequiredDescriptionDefault
event_typeNoFilter by event type (e.g., "trade_executed", "decision_made")
from_timestampNoStart timestamp (Unix UTC seconds)
to_timestampNoEnd timestamp (Unix UTC seconds)
limitNoMaximum number of results

TDQS

A3.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided; description states it returns signed events with chain metadata, implying read-only. However, it does not mention authentication, rate limits, pagination behavior, or what happens with empty results.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three concise sentences with no filler. The action verb is front-loaded, and every sentence adds useful context.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema; description gives a brief idea of return values (signed events with chain metadata) but omits details like event structure or metadata fields. The mention of session without a corresponding parameter reduces completeness.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the description adds minimal value beyond repeating filter options. It mentions session but the schema lacks a session parameter, creating slight ambiguity.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states verb (search), resource (cryptographic event history), and scope (by type, time range, or session). Distinguishes from siblings like piqrypt_stamp_event (create) and piqrypt_export_audit (export).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides a clear use case ('reconstruct what an agent did during a specific period'), but does not explicitly state when not to use or mention alternatives among siblings.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

piqrypt_stamp_eventA

Create a tamper-proof cryptographic record of an agent decision. Signs the event with Ed25519, links it to the previous event in a hash chain (AISS v2.0). Call this after every significant agent action. Required for GDPR Art.22, EU AI Act Art.13, HIPAA audit trail, SEC/FINRA trading compliance.

ParametersJSON Schema
NameRequiredDescriptionDefault
agent_idYesAgent identifier (e.g., "trading_bot_v1", "hr_decision_engine")
payloadYesEvent payload containing decision data (JSON object)
previous_hashNoOptional hash of previous event for chain integrity

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Without annotations, the description discloses key behaviors: tamper-proof record creation, Ed25519 signing, and hash chain linking. It lacks details on side effects, idempotency, or error handling, but covers essential traits.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise at two sentences, front-loading the purpose and including key details. It is efficient but could be slightly more structured by grouping regulations separately.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with 3 parameters and no output schema, the description covers purpose, usage, and behavioral details adequately. The lack of return value description is a minor shortfall, but overall it is fairly complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema already describes all three parameters with 100% coverage. The description adds no additional semantics beyond the schema, so a baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool creates a cryptographic record, specifying the signing algorithm (Ed25519) and chaining mechanism (AISS v2.0), which distinguishes it from sibling tools for export, search, and verification.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly advises 'Call this after every significant agent action' and lists regulatory requirements, providing strong contextual cues. However, it does not explicitly exclude cases where the tool should not be called.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

piqrypt_verify_chainA

Verify that an agent's decision history is intact and untampered. Detects modified events, missing events, hash chain breaks, and forks. Call before trusting any historical agent output.

ParametersJSON Schema
NameRequiredDescriptionDefault
eventsYesArray of PiQrypt events to verify

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description adequately describes what the tool detects (tampering evidence). However, it lacks details on output/return behavior (e.g., error vs result) and side effects, which would improve transparency.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, no wasted words, front-loaded with the main action and key details.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple tool with full schema coverage, the description covers purpose and usage. It lacks specification of return value (e.g., boolean, report), but overall is complete enough for an agent to invoke correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the description does not add additional meaning beyond the schema's 'Array of PiQrypt events to verify'. Baseline score of 3 is appropriate as the schema already carries the parameter semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: verifying integrity of an agent's decision history. It lists specific detection capabilities (modified events, missing events, etc.) and distinguishes itself from siblings by its verification role.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description includes explicit usage guidance: 'Call before trusting any historical agent output.' While it doesn't explicitly exclude scenarios or name alternatives, the clear context is sufficient for an agent to decide when to invoke this tool.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. 4 tool updatesv1.5.3
    • Addedpiqrypt_export_audit
    • Addedpiqrypt_search_events
    • Addedpiqrypt_stamp_event
    • Addedpiqrypt_verify_chain

TDQS

A4.3/5.0
Disambiguation5/5

Each tool has a distinct purpose: export, search, stamp, and verify. No overlap, clear boundaries.

Naming Consistency5/5

All tools follow the consistent pattern 'piqrypt_verb_noun' (export_audit, search_events, stamp_event, verify_chain). Perfect uniformity.

Tool Count5/5

Four tools cover the essential operations for a cryptographic audit trail server without redundancy or deficiency.

Completeness5/5

The set provides a complete workflow: create events (stamp), search them, export them, and verify integrity. No obvious gaps for the domain.

Maintenance

ActivityInactive
ResponsivenessNo issues

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    B
    maintenance
    Provides cryptographic signing and verification for AI decisions to generate verifiable, Ed25519-signed receipts for compliance and auditing. It automatically maps AI actions to regulatory frameworks like HIPAA and SOX with high-performance, sub-3ms signing.
    4
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Provides an immutable, tamper-evident audit trail for AI agents, enabling event logging with cryptographic chaining, search, verification, and statistics.
    2
    MIT

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/PiQrypt/piqrypt-mcp-server'

If you have feedback or need assistance with the MCP directory API, please join our Discord server