sigmodx-mcp
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@sigmodx-mcpLog invoice approval for PO-12345 for $5000"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
sigmodx-mcp
MCP server for Sigmodx — audit infrastructure for AI agents making consequential decisions.
Exposes Sigmodx as MCP tools any compatible agent framework can call. Works with Claude, Cursor, LangChain, AutoGen, and any MCP client.
Installation
pip install sigmodx-mcpRelated MCP server: cronozen-proof
Usage
SIGMODX_API_KEY=your-key \
SIGMODX_AGENT_ID=your-agent-uuid \
sigmodx-mcpClaude Desktop / Cursor configuration
Add to your MCP config:
{
"mcpServers": {
"sigmodx": {
"command": "sigmodx-mcp",
"env": {
"SIGMODX_API_KEY": "your-api-key",
"SIGMODX_AGENT_ID": "your-agent-uuid"
}
}
}
}Available tools
Tool | Description |
| Log invoice approval/rejection |
| Log GL entry review decision |
| Log anomaly flag/clear/escalate |
| Verify a verification string |
| Get agent ALLOW/LIMIT/BLOCK state |
| Hash input payload (no auth needed) |
Links
Available Tools
6 toolssigmodx_get_reliabilityA
Get the current reliability state (ALLOW/LIMIT/BLOCK) for an agent in a specific scenario.
| Name | Required | Description | Default |
|---|---|---|---|
| scenario | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden. It implies a read-only operation via 'Get' and lists possible return values, which adds behavioral context. However, it does not explicitly state side-effect freedom or prerequisites.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence of 11 words, front-loading the action and result. No redundant or filler content.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Simple tool with 1 parameter and no output schema; description specifies the output states. Minor gap: doesn't explicitly state the return type (string) or error conditions, but overall sufficient for the simplicity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description merely references 'a specific scenario' without elaborating on the enum values or their meaning. Fails to compensate for the missing schema descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states the verb 'Get' and resource 'current reliability state' with explicit possible values (ALLOW/LIMIT/BLOCK) and scope (for an agent in a specific scenario). Distinguishes well from sibling tools which handle logging, hashing, and verification.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Implies usage when needing reliability state, but no explicit guidance on when to use vs alternatives (e.g., logging tools might also be contextually relevant). No when-not or exclusion mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sigmodx_hash_inputsA
Hash an input payload using Sigmodx's deterministic SHA-256 method. The payload itself is never sent to Sigmodx.
| Name | Required | Description | Default |
|---|---|---|---|
| payload | Yes | The input data to hash |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It discloses the deterministic SHA-256 method and the critical privacy trait that the payload is never sent. This is concise but informative for a simple hashing tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with zero waste, front-loading the action and method. Every sentence contributes useful information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description explains input and process but does not mention the output format or return value, which is a gap since no output schema exists. For a hashing tool, the agent needs to know what the tool returns.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already covers the required parameter 'payload' with 100% description coverage, so the description adds no new info beyond stating what is hashed. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool hashes an input payload using SHA-256, emphasizing the payload is never sent to Sigmodx. It distinguishes itself from sibling tools which focus on reliability, logging decisions, and attestation verification.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description does not provide explicit guidance on when to use this tool versus alternatives. Usage is implied as a hashing utility, but no exclusions or context for choosing it over other tools are given.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sigmodx_log_anomaly_decisionA
Log an anomaly detection decision to Sigmodx. Use when an AI agent flags, clears, or escalates a financial transaction anomaly. Critical severity items are automatically escalated for immediate review.
| Name | Required | Description | Default |
|---|---|---|---|
| decision_type | Yes | ||
| inputs | Yes | ||
| rationale | Yes | ||
| anomaly_subtype | No | ||
| severity | No | ||
| anomaly_score | No | ||
| transaction_amount | No | ||
| entity_reference | No | ||
| confidence | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Adds behavioral context about automatic escalation for critical severity, which is not in annotations (none provided). However, misses other behavioral traits like idempotency, auth requirements, or side effects. Moderate disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with purpose. No wasted words, but could include brief parameter guidance without bloating. Efficient overall.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with 9 parameters (including nested 'inputs'), no output schema, and no annotations, this description is insufficient. Missing explanation of key parameters, expected input format, and return behavior. Leaves significant gaps for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 0% schema description coverage, the description should compensate but only mentions the decision_type actions (flag, clear, escalate) implicitly. Does not explain other parameters like 'inputs', 'rationale', or enum values. Minimal added value over schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states the verb 'log', resource 'anomaly detection decision', and context 'financial transaction'. Differentiates from siblings by specifying anomaly-specific actions (flag, clear, escalate).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states when to use: 'when an AI agent flags, clears, or escalates a financial transaction anomaly.' Provides behavioral note about automatic escalation for critical severity, but lacks explicit when-not-to-use or alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sigmodx_log_gl_decisionA
Log a GL entry review decision to Sigmodx. Use when an AI agent approves, flags, or blocks a journal entry. Segregation of duties violations are auto-blocked.
| Name | Required | Description | Default |
|---|---|---|---|
| decision_type | Yes | ||
| inputs | Yes | ||
| rationale | Yes | ||
| flag_subtype | No | ||
| flag_severity | No | ||
| entry_amount | No | ||
| gl_account_code | No | ||
| sod_violation_detected | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full behavioral transparency burden. It discloses auto-blocking for segregation violations, which is useful. However, it does not mention side effects, permissions, idempotency, or whether it's a write operation beyond logging. Adequate but not thorough.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loaded with the core purpose and usage. Every sentence adds value without redundancy, achieving maximum conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema, complex parameters (8 properties, nested object), and no annotations, the description is insufficient. It does not explain return values, tool effects, or parameter relationships, leaving the agent with an incomplete understanding.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, and the description provides no explanation of the 8 parameters, including required fields like 'inputs' and 'rationale'. It does not compensate for the lack of schema descriptions, leaving parameter semantics entirely undocumented.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool logs a GL entry review decision and lists specific actions (approves, flags, blocks). It distinguishes from sibling tools by explicitly mentioning 'GL entry review' and 'journal entry', which sets it apart from anomaly or invoice decision tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly says 'Use when an AI agent approves, flags, or blocks a journal entry,' providing clear usage context. It also notes auto-blocking for segregation of duties violations, but does not mention when not to use or compare directly to sibling tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sigmodx_log_invoice_decisionA
Log an invoice approval decision to Sigmodx for cryptographic attestation. Use when an AI agent approves, rejects, or escalates an invoice. The input payload is hashed client-side — invoice data never leaves your environment.
| Name | Required | Description | Default |
|---|---|---|---|
| decision_type | Yes | The agent's decision | |
| inputs | Yes | What the agent consumed (will be hashed) | |
| rationale | Yes | Why the agent made this decision (min 10 chars) | |
| invoice_amount | No | Invoice amount | |
| vendor_id | No | Vendor reference (internal ID, not name) | |
| confidence | No | Confidence score 0.0-1.0 |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden. It discloses a key behavior (client-side hashing for data privacy), but omits details like side effects, required permissions, success/failure responses, or persistence guarantees.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, both essential: the first states purpose, the second adds an important behavioral constraint. No unnecessary words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a logging tool with 6 parameters and no output schema, the description covers purpose, usage, and a key behavioral trait. It is mostly complete, but lacks information on what happens after logging (e.g., attestation confirmation or errors).
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, and each parameter has a clear schema description. The tool description adds no additional per-parameter context beyond the schema, so baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies the tool's purpose: logging invoice approval decisions for cryptographic attestation, with specific decision types. It distinguishes itself from sibling tools by focusing on invoices, though not explicitly contrasting with other log tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit guidance on when to use the tool (when an AI agent approves, rejects, or escalates an invoice). However, it does not specify when not to use it or mention alternatives among sibling tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sigmodx_verify_attestationA
Verify a Sigmodx attestation using a verification string. Returns the attestation record and confirms the cryptographic hash is intact. No authentication required.
| Name | Required | Description | Default |
|---|---|---|---|
| verification_string | Yes | Verification string e.g. SIGMODX-INVOICE-6DFC-D331... |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description must cover behavior. It mentions no authentication and confirms hash integrity, but does not specify whether it is read-only or has side effects, rate limits, or error conditions. Acceptable for a simple verification but could be more thorough.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences: first states purpose, second provides key detail. Efficient and front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Describes purpose, return type, authentication requirement. For a one-parameter tool without output schema, this is nearly complete. However, missing details on error responses or record format, so not a 5.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Verification_string is the only parameter, fully described in schema. Description provides an example, adding marginal value. With 100% coverage, baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states the action 'verify' and resource 'Sigmodx attestation' using a verification string, and mentions returning the record. Distinguishable from sibling tools like logging or reliability checks.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit guidance on when to use vs alternatives. Only mentions 'No authentication required' which is a minor usage hint. Could be improved by contrasting with other verification or reliability tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
6 tool updates
v0.1.0- First observed
sigmodx_get_reliability - First observed
sigmodx_hash_inputs - First observed
sigmodx_log_anomaly_decision - First observed
sigmodx_log_gl_decision - First observed
sigmodx_log_invoice_decision - First observed
sigmodx_verify_attestation
TDQS
Each tool targets a distinct operation: reliability state, input hashing, three decision logging types (anomaly, GL, invoice), and attestation verification. No functional overlap exists.
All tools follow a consistent 'sigmodx_verb_noun' pattern (e.g., get_reliability, hash_inputs, log_anomaly_decision). Naming is uniform and predictable.
With 6 tools, the set is well-scoped for a specialized MCP server focusing on Sigmodx operations. Each tool serves a clear purpose without being too few or too many.
The tool surface covers core operations: reliability checking, input hashing, decision logging for three key domains, and attestation verification. Minor gaps like a general decision retrieval tool are absent but not critical for the stated purpose.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Bitcoin-anchored, tamper-evident audit log for AI agents — record, disclose and verify actions.
AI/LLM agent output audit MCP: policy eval, tamper-evident chain, AI safety, x402 USDC on Base.
Identity, authorization, audit trails, and revocable permissions for AI agents accessing MCP tools.
Hash-chained HMAC-signed audit log MCP for A2A (agent-to-agent) calls. Every tool-call, agent-ha...
Related MCP Servers
- FlicenseNot gradedqualityCmaintenanceTamper-evident cryptographic audit trail for LLM outputs. Compliance logging for AI agent decisions.-
- AlicenseNot gradedqualityBmaintenanceTamper-proof audit trail for AI decisions. 6 tools to record, verify, and export cryptographic proof chains via MCP.1Apache 2.0
- AlicenseNot gradedqualityDmaintenanceCryptographic proof of every AI decision. An immutable, verifiable audit trail MCP server.1MIT
- AlicenseAqualityDmaintenanceTamper-evident audit logging for AI decisions. Three tools (record_decision, verify_decision, list_decisions) write to a regulator-grade ledger built on AWS S3 Object Lock with 7-year retention. Designed for EU AI Act Article 12 and FCA SS1/23 evidence requirements. Try zero-config: npx audit-ledger-mcp boots in sandbox mode against a public hosted tenant.3661Apache 2.0
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/Sigmodx/mcp-server'
If you have feedback or need assistance with the MCP directory API, please join our Discord server