io.github.SaravananJaichandar/etch
Etch is a signed audit chain for AI agent decisions, offline-verifiable against pinned public keys.
Install
Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).
claude mcp add --transport http etch 'https://etch.systems/mcp' --header 'Authorization: <Bearer token. For zero-signup try-it-now (500 events, 14-day retention), run: curl -X POST https://etch.systems/v1/your-project. The response returns a token; use '\''Bearer <token>'\'' as the header value. For a persistent project token, sign up at https://etch.systems/signup.>'{
"mcpServers": {
"etch": {
"type": "http",
"url": "https://etch.systems/mcp",
"headers": {
"Authorization": "<Bearer token. For zero-signup try-it-now (500 events, 14-day retention), run: curl -X POST https://etch.systems/v1/your-project. The response returns a token; use 'Bearer <token>' as the header value. For a persistent project token, sign up at https://etch.systems/signup.>"
}
}
}
}Documentation
From the project's README on GitHub, refreshed weekly. Links open on GitHub.
Contents
etch-mcp
Etch is a signed audit chain for AI agent decisions, offline-verifiable against pinned public keys.
This repository is the MCP integration surface for Etch, the hosted service. It carries only:
- The MCP registry metadata (
server.json,glama.json) - Per-client integration examples for Claude Code / Cursor / Continue / Cline / Codex
- Documentation for attaching an MCP-compliant client to Etch
The hosted Etch service source is proprietary and lives in a separate repository. Nothing in this repository is required to be inspected or modified in order to use Etch.
Try in 30 seconds, no signup
curl -X POST https://etch.systems/v1/your-projectThe response returns a bearer token, an MCP endpoint URL, and an anonymous project id. Point any MCP-compliant client at https://etch.systems/mcp with the token. Anonymous projects carry 500 signed events over 14 days; convert to a persistent project any time to keep the chain forever.
Full walk-through: etch.systems/docs/quickstart.
Per-client config
Claude Code
~/.claude/settings.json:
{
"mcpServers": {
"etch": {
"url": "https://etch.systems/mcp",
"headers": {
"Authorization": "Bearer wm_YOUR_ANON_TOKEN"
}
}
}
}Cursor
~/.cursor/mcp.json (or .cursor/mcp.json at the project root):
{
"mcpServers": {
"etch": {
"url": "https://etch.systems/mcp",
"headers": {
"Authorization": "Bearer wm_YOUR_ANON_TOKEN"
}
}
}
}Continue
~/.continue/config.yaml:
mcpServers:
- name: etch
url: https://etch.systems/mcp
headers:
Authorization: Bearer wm_YOUR_ANON_TOKENCline (VS Code)
~/.config/Cline/User/globalStorage/saoudrizwan.claude-dev/settings/cline_mcp_settings.json:
{
"mcpServers": {
"etch": {
"url": "https://etch.systems/mcp",
"headers": {
"Authorization": "Bearer wm_YOUR_ANON_TOKEN"
}
}
}
}Codex CLI
~/.codex/config.toml:
[mcp_servers.etch]
url = "https://etch.systems/mcp"
headers = { Authorization = "Bearer wm_YOUR_ANON_TOKEN" }Per-client documentation with current config file locations is kept up-to-date at etch.systems/docs/mcp-clients.
Verify
Every event Etch signs is verifiable offline against pinned public keys with the OSS reference verifier. Auditors pin fingerprints once at pilot onboarding; every past epoch is verifiable indefinitely without contacting Etch.
- Reference verifier posture and benchmark numbers: etch.systems
- Framework mapping (SR 11-7, EU AI Act Article 12, ISO 42001, NIST AI RMF): etch.systems/aarm
- FAQ: etch.systems/docs/faq
What Etch is NOT
- Not a media-provenance envelope (that lane is C2PA and SPIF). Etch signs decisions, not content. Comparison: etch.systems/vs/c2pa.
- Not a transparency log (that lane is Sigstore Rekor). Etch is a per-project chain that anchors epochs on Rekor. Comparison: etch.systems/vs/sigstore-rekor.
- Not a watermarking system. Etch records who reviewed an output and what they applied, not whether a specific model touched the text.
License
The metadata and documentation in this repository are MIT-licensed (see LICENSE). The hosted Etch service is Business Source License 1.1 with a hosted-service restriction; see etch.systems/pricing for terms.
Registry listings
Etch is listed on:
- Official MCP Registry as
io.github.SaravananJaichandar/etch - Glama.ai MCP servers (auto-indexed from
glama.jsonin this repo) - mcpservers.org
- punkpeye/awesome-mcp-servers under Knowledge & Memory
- agentrust-io/awesome-ai-governance under Agent Identity & Attestation
- ottosulin/awesome-ai-security under MCP Security
PulseMCP auto-indexes from the Official MCP Registry when their intake resumes; no separate submission needed.
For issues with the hosted service, contact via etch.systems. For issues with the metadata or integration examples in this repository, open a GitHub issue here.
Frequently asked questions
What is io.github.SaravananJaichandar/etch?
Etch is a signed audit chain for AI agent decisions, offline-verifiable against pinned public keys.
How do I install io.github.SaravananJaichandar/etch?
It runs as a remote server. In Claude Code: claude mcp add --transport http etch 'https://etch.systems/mcp' --header 'Authorization: <Bearer token. For zero-signup try-it-now (500 events, 14-day retention), run: curl -X POST https://etch.systems/v1/your-project. The response returns a token; use '\''Bearer <token>'\'' as the header value. For a persistent project token, sign up at https://etch.systems/signup.>'. For other clients, paste the JSON configuration from this page into their MCP settings.
Does io.github.SaravananJaichandar/etch need an API key?
Yes. It expects Authorization, which you set in its configuration.
Is io.github.SaravananJaichandar/etch open source?
Yes. Its code is on GitHub under the MIT license.
Who maintains io.github.SaravananJaichandar/etch?
It is published by SaravananJaichandar. AI.tn lists it but does not maintain or endorse it.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.