io.github.JoeyBrar/agentseal
Verifiable action logs for AI agents. Every action is recorded in a SHA-256 hash chain.
Install
Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).
agentseal-mcpclaude mcp add agentseal -e 'AGENTSEAL_API_KEY=<your agentseal_api_key>' -- npx -y agentseal-mcp@0.2.1
{
"mcpServers": {
"agentseal": {
"command": "npx",
"args": [
"-y",
"agentseal-mcp@0.2.1"
],
"env": {
"AGENTSEAL_API_KEY": "<your agentseal_api_key>"
}
}
}
}
Environment variables
AGENTSEAL_API_KEYrequired secret Your AgentSeal API key from agentseal.io
Documentation
From the project's README on GitHub, refreshed weekly. Links open on GitHub.
agentseal-mcp
MCP server for AgentSeal. Tamper-proof audit logs for AI agents, using SHA-256 hash chains.
Every agent action is recorded in a hash chain. With this, you can actually prove to your clients that your agent did what it said it did.
Setup
Claude Desktop
Add to your claude_desktop_config.json:
{
"mcpServers": {
"agentseal": {
"command": "npx",
"args": ["-y", "agentseal-mcp"],
"env": {
"AGENTSEAL_API_KEY": "as_sk_your_key_here"
}
}
}
}
Restart Claude Desktop after saving.
Cursor / Other MCP hosts
Same configuration — add the server with your API key.
Environment variables
| Variable | Required | Description |
|---|---|---|
AGENTSEAL_API_KEY | Yes | Your API key from agentseal.io |
AGENTSEAL_URL | No | Custom API base URL (defaults to production) |
Tools
record_action
Record an agent action to the audit trail. Call this after significant actions to create a cryptographically chained record of what happened and why.
| Parameter | Type | Required | Description |
|---|---|---|---|
agent_id | string | Yes | Identifier for the agent (e.g. research-bot) |
action_type | string | Yes | What kind of action (e.g. email:send, file:write, api:call) |
action_params | object | No | Details of the action |
reasoning | string | No | Why the agent decided to take this action |
authorized_by | string | No | Who or what approved the action |
Returns a sequence number and SHA-256 hash confirming the entry was chained.
query_actions
Look up previously recorded actions from the audit trail. Use this to check what actions have been taken or recall past decisions.
| Parameter | Type | Required | Description |
|---|---|---|---|
agent_id | string | No | Filter by agent |
action_type | string | No | Filter by action type |
limit | number | No | Max entries to return (default 20) |
verify_chain
Verify the integrity of the hash chain. Each entry's SHA-256 hash includes the previous entry's hash — if any record was modified, the chain breaks and this reports where.
| Parameter | Type | Required | Description |
|---|---|---|---|
agent_id | string | No | Verify chain for a specific agent. If omitted, verifies all entries. |
Returns the number of entries verified and whether the chain is intact.
How it works
Each recorded action is hashed with SHA-256. That hash includes the previous entry's hash, forming a chain. Modify any record and every hash after it changes — verify_chain catches it instantly.
Get an API key
Sign up at agentseal.io. Free to use.
Python SDK
For direct integration without MCP: pip install agentseal-sdk. See agentseal-sdk.
License
MIT
Frequently asked questions
What is io.github.JoeyBrar/agentseal?
Verifiable action logs for AI agents. Every action is recorded in a SHA-256 hash chain.
How do I install io.github.JoeyBrar/agentseal?
It runs on your machine. In Claude Code: claude mcp add agentseal -e 'AGENTSEAL_API_KEY=<your agentseal_api_key>' -- npx -y agentseal-mcp@0.2.1. For other clients, paste the JSON configuration from this page into their MCP settings.
Does io.github.JoeyBrar/agentseal need an API key?
Yes. It expects AGENTSEAL_API_KEY, which you set in its configuration.
Is io.github.JoeyBrar/agentseal open source?
Yes. Its code is on GitHub under the MIT license.
Who maintains io.github.JoeyBrar/agentseal?
It is published by JoeyBrar. AI.tn lists it but does not maintain or endorse it.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.