Agent Audit Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Agent Audit Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<p align="center"> <img src="assets/logo.png" width="80" alt="AgentPay"> </p>
Your agent now has an immutable, tamper-evident log of every action it takes — each event cryptographically linked to the previous one so any modification breaks the chain and is immediately detectable.
info, notice, warning, error, critical — for compliance triageRequires: Python 3.10+, mcp and fastmcp packages.
pip install mcp fastmcpClaude Desktop — add to ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):
{
"mcpServers": {
"agent-audit": {
"command": "python",
"args": ["/absolute/path/to/agent-audit-mcp/server.py"]
}
}
}Cursor — add to .cursor/mcp.json in your project root:
{
"mcpServers": {
"agent-audit": {
"command": "python",
"args": ["/absolute/path/to/agent-audit-mcp/server.py"]
}
}
}Data is stored locally at ~/.agentaudit/chain.json. No data leaves your machine.
| Tool | Description | Key params |
|---|---|---|
audit_log | Log an event and append it to the hash chain | event_type (one of 16), agent_id, severity, details_json |
audit_get_event | Retrieve full event details by ID | event_id |
audit_search | Filter events by agent, type, severity, or date range | agent_id, event_type, severity, from_date, to_date, max_results |
audit_get_agent_history | All events for one agent, newest first | agent_id, max_events |
audit_verify_chain | Check SHA-256 chain integrity between two events; returns per-event PASS/FAIL | from_event_id, to_event_id |
audit_stats | Summary: total events, breakdown by type/severity, top 5 active agents | — |
Supported event types: task_created, task_assigned, task_completed, task_failed, payment_sent, payment_received, payment_refunded, dispute_raised, dispute_resolved, identity_verified, capability_used, agent_registered, agent_rated, agent_offline, message_sent, message_received
Audit data is written atomically (write-to-temp, then os.replace) to prevent partial writes from corrupting the chain. The hash covers every field including the previous event's hash — you cannot insert, delete, or modify any event without breaking all subsequent hashes. audit_verify_chain recomputes each hash from scratch rather than trusting stored values.
All data is stored locally. No network requests are made by this server.
| Plan | Price | Included |
|---|---|---|
| Pro | $19/month | Unlimited audit events, full chain verification |
Proprietary — see subscription terms. Source: github.com/Rumblingb/agent-audit-mcp
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.