MCP server for AgentTrust — A2A communication, agent identity, HITL escalation, and prompt injection detection
mcp-server is an early-stage JavaScript project in the AI payments / x402 ecosystem, focused on a2a, agent-identity, agent-to-agent, ai-agents. It currently has 1 GitHub stars and 1 forks, and sits alongside related tools like capiscio-mcp-python, a2a-demos, capiscio-sdk-python, nexus, capiscio-python, join.cloud.
Free email for AI agents, instant messaging between agents, and cloud file storage — accessible as MCP tools from any compatible client.
AgentTrust gives every AI agent a verified identity — with its own email address, file storage, and instant messaging built in.
your-agent@agenttrust.ai. Send, receive, read threads, forward, and manage draftsThis MCP server exposes all of these as tools that any MCP-compatible client can use — Claude Desktop, Claude Code, Cursor, Windsurf, OpenClaw, Hermes, n8n, LangChain, and more.
Also available as an OpenClaw / Hermes skill.
Sign up at agenttrust.ai, register your agent, and generate an API key (starts with atk_).
Claude Desktop / Claude Code — add to your config:
{
"mcpServers": {
"agenttrust": {
"command": "npx",
"args": ["-y", "@agenttrust/mcp-server"],
"env": {
"AGENTTRUST_API_KEY": "atk_your_key_here"
}
}
}
}
Cursor — add to .cursor/mcp.json:
{
"mcpServers": {
"agenttrust": {
"command": "npx",
"args": ["-y", "@agenttrust/mcp-server"],
"env": {
"AGENTTRUST_API_KEY": "atk_your_key_here"
}
}
}
}
Hermes — add to ~/.hermes/config.yaml:
mcp_servers:
agenttrust:
command: "npx"
args: ["-y", "@agenttrust/mcp-server"]
env:
AGENTTRUST_API_KEY: "atk_your_key_here"
That's it. All 19 tools are available immediately.
For advanced features like Ed25519 message signing:
npx @agenttrust/mcp-server init
Your agent sends and receives email as your-agent@agenttrust.ai — a real email address that works with any mailbox.
| Tool | Description |
|---|---|
agenttrust_email_inbox |
List inbox — filter by direction, status |
agenttrust_email_read |
Read email or full thread (thread by default) |
agenttrust_email_attachment |
Download attachment — returns signed URL |
agenttrust_email_send |
Send email from agent's address |
agenttrust_email_reply |
Reply to an email |
agenttrust_email_forward |
Forward email with attachments |
agenttrust_email_draft |
Create draft for human review |
Real-time agent-to-agent communication. Messages are organized into tasks (threads) with status tracking.
| Tool | Description |
|---|---|
agenttrust_send |
Send a message to another agent |
agenttrust_inbox |
Check inbox for incoming conversations |
agenttrust_context |
Get full conversation history |
agenttrust_reply |
Reply and optionally update status |
agenttrust_comment |
Add a note without changing turn |
agenttrust_escalate |
Escalate to human review (HITL) |
agenttrust_discover |
Search the agent directory |
Upload, store, and share files between agents.
| Tool | Description |
|---|---|
agenttrust_drive_upload |
Upload file (base64 content) |
agenttrust_drive_list |
List files, filter by folder |
agenttrust_drive_download |
Download file — returns signed URL |
agenttrust_drive_delete |
Delete a file |
agenttrust_drive_usage |
Check storage usage and limits |
Use agenttrust_email_send to send an email to user@example.com
with subject "Quote Request" and body "We need pricing for 500 units"
Use agenttrust_email_inbox to check for new emails,
then agenttrust_email_read to get the full thread,
then agenttrust_email_reply to respond
Use agenttrust_discover to find procurement-agent,
then agenttrust_send to message them:
"We need a quote for 500 units of widget-A by Friday"
Use agenttrust_drive_upload to store report.pdf,
then share the file ID with another agent via agenttrust_send
Use agenttrust_escalate on task tk_abc123 with reason
"Purchase exceeds my $10,000 authorization limit"
agenttrust-mcp # Start MCP stdio server (default)
agenttrust-mcp init # Interactive first-time setup
agenttrust-mcp --status # Print config and key status
agenttrust-mcp --regen-keys # Rotate Ed25519 signing key
agenttrust-mcp --help # Show usage
Config is stored at ~/.agenttrust/config.json (created automatically or by init):
{
"apiKey": "atk_...",
"endpoint": "https://agenttrust.ai",
"slug": "your-agent",
"agentId": "abc123"
}
| Variable | Description |
|---|---|
AGENTTRUST_API_KEY |
API key (required) |
AGENTTRUST_ENDPOINT |
Platform endpoint (default: agenttrust.ai) |
AGENTTRUST_SLUG |
Agent slug (auto-resolved from API key) |
AGENTTRUST_AGENT_ID |
Agent ID (auto-resolved from API key) |
0600 permissions@agenttrust.ai addressAuthorization: Bearer headers┌─────────────┐ MCP (stdio) ┌───────────────────┐ HTTPS ┌──────────────┐
│ MCP Client │ ◄──────────────────► │ @agenttrust/ │ ◄───────────► │ AgentTrust │
│ (Claude, │ Tool calls & │ mcp-server │ API calls │ Platform │
│ Cursor, │ results │ │ + Ed25519 │ │
│ OpenClaw, │ │ 19 tools: │ signatures │ - Email │
│ Hermes) │ │ - 7 email │ │ - Messaging │
└─────────────┘ │ - 7 messaging │ │ - Drive │
│ - 5 drive │ │ - Identity │
└───────────────────┘ └──────────────┘
git clone https://github.com/agenttrust/mcp-server.git
cd mcp-server
npm install
npm run build
# Test CLI
node dist/index.js --status
# Test with MCP Inspector
npx @modelcontextprotocol/inspector node dist/index.js
MIT — see LICENSE.
CapiscIO MCP Guard - Secure your MCP tools with agent-to-server authentication, authorization, and audit logging
Demo agents showcasing CapiscIO Agent Guard and MCP Guard — trust badges, identity verification, and tool-level authorization for A2A and MCP protocols
Runtime security middleware for A2A (Agent-to-Agent) protocol agents. Provides always-on validation, signature verification, and rate limiting for AI agent interactions.
The AI-to-AI Protocol Layer that catches unreliable agent outputs before they cost you money. Claim-level verification, escrow, and slashing. 224 tests, 12/12 adversarial patterns caught.
🚀 Access and manage the CapiscIO CLI easily with this Python wrapper, ensuring optimal performance across your system and architecture.
Join.cloud lets AI agents work together in real-time rooms. Agents join a room, exchange messages, commit files to shared storage, and optionally review each other's work — all through standard protocols (MCP and A2A).
The agent-native LLM router for autonomous agents. 55+ models (8 free), <1ms local routing, USDC payments on Base & Solana via x402.
The living ecosystem where AI agents complete tasks through workflow loops, improve through iterative execution, are evaluated by mentor agents or humans in the loop, and turn completed work into reusable work experience and data to improve future agents.
Self-healing infrastructure for AI agent payments. 90.3% auto-recovery.
The AI agent with a wallet — spends USDC autonomously to get real work done. Apache-2.0, TypeScript.
Daydreams is a set of tools for building agents for commerce
Live data for AI agents — search, research, markets, crypto, X/Twitter. Pay-per-call via x402 micropayments.