HiveTrust

Official17 toolsLive

by srotzin · JavaScript

KYA identity verification, trust scoring, and performance bonds for AI agents

io.github.srotzin/hivetrust (Model Context Protocol Server)

This MCP server, io.github.srotzin/hivetrust, is described as providing KYA identity verification, trust scoring, and performance bonds for AI agents. The catalog details list 17 tools available under the server.

🛠️ Key Features

KYA identity verification
Trust scoring
Performance bonds
Tooling count: 17
Topics: hive-civilization, agent-commerce, defensible, trust, x402

🚀 Use Cases

Verifying identities for agent-to-agent (A2A) interactions
Assigning trust levels to AI agents
Backing agent performance with performance bonds

⚡ Developer Benefits

Provides trust-related primitives (identity verification, trust scoring, bonds) for AI agent workflows
Includes 17 tools exposed by the server

⚠️ Limitations

The available description excerpt does not enumerate specific tool names or configuration details.

Topics

hive-civilizationagent-commercedefensibletrustx402

Captured live from the server via tools/list.

hivetrust_register_agent

Register a new AI agent identity with HiveTrust KYA (Know Your Agent). Assigns a unique agent ID, anchors the public key, and initializes the trust score.

Parameters16

name	string	required	Human-readable agent name
description	string	optional	What this agent does
public_key	string	optional	Ed25519 public key (base58 encoded)
public_key_format	string	optional	Encoding format of the public key
checksum	string	optional	SHA-256 checksum of the agent (system prompt + tools + model config)
owner_id	string	required	ID of the owning organization or user
owner_type	string	optional
model_provider	string	optional	e.g. openai, anthropic, google
model_name	string	optional	e.g. gpt-4o, claude-3-5-sonnet
model_version	string	optional	Specific model version
capabilities	array	optional	List of capability tags (e.g. ["finance", "trading", "research"])
verticals	array	optional	Industry verticals this agent operates in
delegation_scope	array	optional	Scope of delegated authority
eu_ai_act_class	string	optional	EU AI Act risk classification
hiveagent_id	string	optional	Cross-reference ID from HiveAgent platform
metadata	object	optional	Additional key-value metadata

Raw schema

{
  "type": "object",
  "properties": {
    "name": {
      "type": "string",
      "description": "Human-readable agent name"
    },
    "description": {
      "type": "string",
      "description": "What this agent does"
    },
    "public_key": {
      "type": "string",
      "description": "Ed25519 public key (base58 encoded)"
    },
    "public_key_format": {
      "type": "string",
      "enum": [
        "ed25519-base58",
        "ed25519-hex",
        "jwk"
      ],
      "description": "Encoding format of the public key",
      "default": "ed25519-base58"
    },
    "checksum": {
      "type": "string",
      "description": "SHA-256 checksum of the agent (system prompt + tools + model config)"
    },
    "owner_id": {
      "type": "string",
      "description": "ID of the owning organization or user"
    },
    "owner_type": {
      "type": "string",
      "enum": [
        "organization",
        "individual",
        "dao"
      ],
      "default": "organization"
    },
    "model_provider": {
      "type": "string",
      "description": "e.g. openai, anthropic, google"
    },
    "model_name": {
      "type": "string",
      "description": "e.g. gpt-4o, claude-3-5-sonnet"
    },
    "model_version": {
      "type": "string",
      "description": "Specific model version"
    },
    "capabilities": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "List of capability tags (e.g. [\"finance\", \"trading\", \"research\"])"
    },
    "verticals": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Industry verticals this agent operates in"
    },
    "delegation_scope": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Scope of delegated authority"
    },
    "eu_ai_act_class": {
      "type": "string",
      "enum": [
        "minimal_risk",
        "limited_risk",
        "high_risk",
        "unacceptable_risk"
      ],
      "default": "minimal_risk",
      "description": "EU AI Act risk classification"
    },
    "hiveagent_id": {
      "type": "string",
      "description": "Cross-reference ID from HiveAgent platform"
    },
    "metadata": {
      "type": "object",
      "description": "Additional key-value metadata"
    }
  },
  "required": [
    "name",
    "owner_id"
  ]
}

hivetrust_get_agent

Retrieve a registered agent's full identity profile, including public key, checksum, trust tier, capabilities, and compliance status.

Parameters1

agent_id

string

required

Agent UUID or DID (e.g. "did:hivetrust:abc123")

Raw schema

{
  "type": "object",
  "properties": {
    "agent_id": {
      "type": "string",
      "description": "Agent UUID or DID (e.g. \"did:hivetrust:abc123\")"
    }
  },
  "required": [
    "agent_id"
  ]
}

hivetrust_verify_identity

Verify an agent's cryptographic identity by checking public key ownership and checksum integrity. Returns a verification result with confidence score and reason codes.

Parameters4

agent_id	string	required	Agent UUID or DID to verify
challenge	string	optional	Optional challenge string to verify live key possession
signature	string	optional	Agent's signature of the challenge (base58 encoded)
checksum	string	optional	Current agent checksum to compare against registered value

Raw schema

{
  "type": "object",
  "properties": {
    "agent_id": {
      "type": "string",
      "description": "Agent UUID or DID to verify"
    },
    "challenge": {
      "type": "string",
      "description": "Optional challenge string to verify live key possession"
    },
    "signature": {
      "type": "string",
      "description": "Agent's signature of the challenge (base58 encoded)"
    },
    "checksum": {
      "type": "string",
      "description": "Current agent checksum to compare against registered value"
    }
  },
  "required": [
    "agent_id"
  ]
}

hivetrust_get_trust_score

Retrieve an agent's current multi-pillar trust score (0–1000 scale). Returns composite score, tier, per-pillar breakdown (identity, behavior, fidelity, compliance, provenance), verdict, and max recommended transaction value.

Parameters1

agent_id

string

required

Agent UUID or DID

Raw schema

{
  "type": "object",
  "properties": {
    "agent_id": {
      "type": "string",
      "description": "Agent UUID or DID"
    }
  },
  "required": [
    "agent_id"
  ]
}

hivetrust_verify_agent_risk

Quick risk assessment for payment processors and marketplace operators. Returns verdict (ALLOW/REVIEW/BLOCK), trust tier, and max transaction limit. This is the free public endpoint — no API key required.

Parameters1

agent_id

string

required

Agent UUID or DID to assess

Raw schema

{
  "type": "object",
  "properties": {
    "agent_id": {
      "type": "string",
      "description": "Agent UUID or DID to assess"
    }
  },
  "required": [
    "agent_id"
  ]
}

hivetrust_ingest_telemetry

Bulk ingest behavioral telemetry events for an agent. These events feed into the trust scoring engine. Supports transaction completions, SLA violations, dispute events, tool calls, and more.

Parameters1

events

array

required

Array of behavioral events to ingest

Raw schema

{
  "type": "object",
  "properties": {
    "events": {
      "type": "array",
      "description": "Array of behavioral events to ingest",
      "items": {
        "type": "object",
        "properties": {
          "agent_id": {
            "type": "string",
            "description": "Agent UUID"
          },
          "event_type": {
            "type": "string",
            "enum": [
              "transaction_completed",
              "transaction_failed",
              "sla_violation",
              "dispute_filed",
              "dispute_resolved",
              "tool_call",
              "auth_success",
              "auth_failure",
              "checksum_mismatch",
              "fidelity_probe",
              "capital_staked",
              "capital_withdrawn"
            ],
            "description": "Type of behavioral event"
          },
          "source": {
            "type": "string",
            "description": "Platform or system emitting the event"
          },
          "source_platform": {
            "type": "string",
            "description": "Platform name"
          },
          "action": {
            "type": "string",
            "description": "Specific action performed"
          },
          "outcome": {
            "type": "string",
            "enum": [
              "success",
              "failure",
              "partial",
              "disputed"
            ],
            "description": "Outcome of the action"
          },
          "counterparty_id": {
            "type": "string",
            "description": "ID of the other party in the transaction"
          },
          "transaction_value": {
            "type": "number",
            "description": "Transaction value in USDC"
          },
          "evidence": {
            "type": "object",
            "description": "Supporting evidence for the event"
          },
          "metadata": {
            "type": "object",
            "description": "Additional event metadata"
          }
        },
        "required": [
          "agent_id",
          "event_type",
          "source"
        ]
      }
    }
  },
  "required": [
    "events"
  ]
}

hivetrust_issue_credential

Issue a W3C-compatible verifiable credential to an agent. Credentials represent verified claims such as identity verification, compliance certification, or domain expertise.

Parameters5

agent_id	string	required	Agent UUID to issue the credential to
credential_type	string	required	Type of verifiable credential
issuer_id	string	required	ID of the issuing entity
claims	object	required	Credential claims (key-value pairs specific to the credential type)
expires_at	string	optional	ISO 8601 expiration date (optional)

Raw schema

{
  "type": "object",
  "properties": {
    "agent_id": {
      "type": "string",
      "description": "Agent UUID to issue the credential to"
    },
    "credential_type": {
      "type": "string",
      "enum": [
        "IdentityVerification",
        "ComplianceCertification",
        "DomainExpertise",
        "CapitalVerification",
        "HumanOversight",
        "ThirdPartyAudit"
      ],
      "description": "Type of verifiable credential"
    },
    "issuer_id": {
      "type": "string",
      "description": "ID of the issuing entity"
    },
    "claims": {
      "type": "object",
      "description": "Credential claims (key-value pairs specific to the credential type)"
    },
    "expires_at": {
      "type": "string",
      "format": "date-time",
      "description": "ISO 8601 expiration date (optional)"
    }
  },
  "required": [
    "agent_id",
    "credential_type",
    "issuer_id",
    "claims"
  ]
}

hivetrust_verify_credential

Verify a previously issued verifiable credential. Checks signature validity, revocation status, and expiration.

Parameters1

credential_id

string

required

UUID of the credential to verify

Raw schema

{
  "type": "object",
  "properties": {
    "credential_id": {
      "type": "string",
      "description": "UUID of the credential to verify"
    }
  },
  "required": [
    "credential_id"
  ]
}

hivetrust_revoke_credential

Revoke a verifiable credential. Records the revocation in the registry. Revoked credentials immediately fail verification checks.

Parameters4

credential_id	string	required	UUID of the credential to revoke
agent_id	string	optional	Agent UUID that owns the credential
reason	string	required	Reason for revocation (e.g. "compromised_key", "expired_compliance")
evidence	object	optional	Supporting evidence for the revocation

Raw schema

{
  "type": "object",
  "properties": {
    "credential_id": {
      "type": "string",
      "description": "UUID of the credential to revoke"
    },
    "agent_id": {
      "type": "string",
      "description": "Agent UUID that owns the credential"
    },
    "reason": {
      "type": "string",
      "description": "Reason for revocation (e.g. \"compromised_key\", \"expired_compliance\")"
    },
    "evidence": {
      "type": "object",
      "description": "Supporting evidence for the revocation"
    }
  },
  "required": [
    "credential_id",
    "reason"
  ]
}

hivetrust_get_insurance_quote

Get a dynamic insurance premium quote for an agent transaction. Premium is calculated based on trust score, transaction value, and risk tier. HiveTrust takes a 1.5% spread on insured transactions.

Parameters3

agent_id	string	required	Agent UUID being insured
counterparty_id	string	optional	ID of the counterparty agent or user (optional)
transaction_value	number	required	Value of the transaction in USDC

Raw schema

{
  "type": "object",
  "properties": {
    "agent_id": {
      "type": "string",
      "description": "Agent UUID being insured"
    },
    "counterparty_id": {
      "type": "string",
      "description": "ID of the counterparty agent or user (optional)"
    },
    "transaction_value": {
      "type": "number",
      "description": "Value of the transaction in USDC",
      "minimum": 0
    }
  },
  "required": [
    "agent_id",
    "transaction_value"
  ]
}

hivetrust_bind_insurance

Bind (activate) an insurance policy for an agent. Locks in the premium, creates the policy record, and deploys the escrow contract on Base L2.

Parameters3

agent_id	string	required	Agent UUID to insure
quote_details	object	optional	Quote object returned by hivetrust_get_insurance_quote
transaction_value	number	required	Transaction value in USDC

Raw schema

{
  "type": "object",
  "properties": {
    "agent_id": {
      "type": "string",
      "description": "Agent UUID to insure"
    },
    "quote_details": {
      "type": "object",
      "description": "Quote object returned by hivetrust_get_insurance_quote"
    },
    "transaction_value": {
      "type": "number",
      "description": "Transaction value in USDC",
      "minimum": 0
    }
  },
  "required": [
    "agent_id",
    "transaction_value"
  ]
}

hivetrust_file_claim

File an insurance claim against an active policy. Triggers claims adjudication workflow. Payouts are made in USDC via the Base L2 escrow contract.

Parameters6

policy_id	string	required	Insurance policy UUID
claimant_id	string	required	ID of the entity filing the claim
claim_type	string	required	Type of claim being filed
amount	number	required	Claim amount in USDC
description	string	optional	Detailed description of the claim
evidence	object	optional	Supporting evidence (transaction IDs, logs, screenshots)

Raw schema

{
  "type": "object",
  "properties": {
    "policy_id": {
      "type": "string",
      "description": "Insurance policy UUID"
    },
    "claimant_id": {
      "type": "string",
      "description": "ID of the entity filing the claim"
    },
    "claim_type": {
      "type": "string",
      "enum": [
        "non_delivery",
        "fraud",
        "sla_breach",
        "data_loss",
        "unauthorized_action"
      ],
      "description": "Type of claim being filed"
    },
    "amount": {
      "type": "number",
      "description": "Claim amount in USDC",
      "minimum": 0
    },
    "description": {
      "type": "string",
      "description": "Detailed description of the claim"
    },
    "evidence": {
      "type": "object",
      "description": "Supporting evidence (transaction IDs, logs, screenshots)"
    }
  },
  "required": [
    "policy_id",
    "claimant_id",
    "claim_type",
    "amount"
  ]
}

hivetrust_file_dispute

File a dispute or appeal against a trust score decision, credential revocation, or behavioral event. Initiates the dispute resolution workflow.

Parameters6

agent_id	string	required	Agent UUID filing the dispute
dispute_type	string	required	Category of the dispute
target_type	string	required	Type of the resource being disputed
target_id	string	required	UUID of the resource being disputed
reason	string	required	Detailed reason for the dispute
evidence	object	optional	Supporting evidence for the dispute

Raw schema

{
  "type": "object",
  "properties": {
    "agent_id": {
      "type": "string",
      "description": "Agent UUID filing the dispute"
    },
    "dispute_type": {
      "type": "string",
      "enum": [
        "score_dispute",
        "credential_dispute",
        "event_dispute",
        "policy_dispute"
      ],
      "description": "Category of the dispute"
    },
    "target_type": {
      "type": "string",
      "enum": [
        "trust_score",
        "credential",
        "behavioral_event",
        "insurance_policy",
        "insurance_claim"
      ],
      "description": "Type of the resource being disputed"
    },
    "target_id": {
      "type": "string",
      "description": "UUID of the resource being disputed"
    },
    "reason": {
      "type": "string",
      "description": "Detailed reason for the dispute"
    },
    "evidence": {
      "type": "object",
      "description": "Supporting evidence for the dispute"
    }
  },
  "required": [
    "agent_id",
    "dispute_type",
    "target_type",
    "target_id",
    "reason"
  ]
}

hivetrust_get_platform_stats

Retrieve HiveTrust platform-wide statistics: total registered agents, verified count, average trust score, total insured value, active policies, claims filed, and more.

Parameters

No parameters.

Raw schema

{
  "type": "object",
  "properties": {},
  "required": []
}

hivetrust_create_lease

Create a Data Oracle Context Lease — "Sign Once, Settle Many". Grants unlimited access to a data stream for a fixed period (24h/72h/168h). Returns a cryptographic lease token (SHA-256) for zero-friction verification. Available streams: construction_pricing, simpson_catalog, compliance_feeds, market_data, pheromone_signals.

Parameters3

lessee_did	string	required	DID of the agent acquiring the lease (e.g. "did:hivetrust:abc123")
data_stream	string	required	The data stream to lease access to
duration_hours	number	required	Lease duration in hours (24h, 72h, or 168h / 1 week)

Raw schema

{
  "type": "object",
  "properties": {
    "lessee_did": {
      "type": "string",
      "description": "DID of the agent acquiring the lease (e.g. \"did:hivetrust:abc123\")"
    },
    "data_stream": {
      "type": "string",
      "enum": [
        "construction_pricing",
        "simpson_catalog",
        "compliance_feeds",
        "market_data",
        "pheromone_signals"
      ],
      "description": "The data stream to lease access to"
    },
    "duration_hours": {
      "type": "number",
      "enum": [
        24,
        72,
        168
      ],
      "description": "Lease duration in hours (24h, 72h, or 168h / 1 week)"
    }
  },
  "required": [
    "lessee_did",
    "data_stream",
    "duration_hours"
  ]
}

hivetrust_stake_bond

Stake USDC to back an agent's reputation via HiveBond. Creates a trust bond with a specified tier (bronze/silver/gold/platinum) and lock period. Phase 1: declared stake amount tracked in-memory; flat $0.25 registration fee via x402. Longer lock periods earn higher simulated yield (2–5% APY). Slashing is permanent — if an agent fails, stake is slashed and paid to injured parties.

Parameters4

agent_did	string	required	DID of the agent staking (e.g. "did:hive:abc123")
amount_usdc	number	required	Amount of USDC to stake. Must meet tier minimum: bronze $100, silver $500, gold $2000, platinum $10000.
tier	string	required	Bond tier. Determines max bounty access: bronze $1k, silver $10k, gold $50k, platinum unlimited.
lock_period_days	number	required	Lock period in days. Longer lock = higher APY: 30d 2%, 90d 3%, 180d 4%, 365d 5%.

Raw schema

{
  "type": "object",
  "properties": {
    "agent_did": {
      "type": "string",
      "description": "DID of the agent staking (e.g. \"did:hive:abc123\")"
    },
    "amount_usdc": {
      "type": "number",
      "description": "Amount of USDC to stake. Must meet tier minimum: bronze $100, silver $500, gold $2000, platinum $10000.",
      "minimum": 100
    },
    "tier": {
      "type": "string",
      "enum": [
        "bronze",
        "silver",
        "gold",
        "platinum"
      ],
      "description": "Bond tier. Determines max bounty access: bronze $1k, silver $10k, gold $50k, platinum unlimited."
    },
    "lock_period_days": {
      "type": "number",
      "enum": [
        30,
        90,
        180,
        365
      ],
      "description": "Lock period in days. Longer lock = higher APY: 30d 2%, 90d 3%, 180d 4%, 365d 5%."
    }
  },
  "required": [
    "agent_did",
    "amount_usdc",
    "tier",
    "lock_period_days"
  ]
}

hivetrust_verify_bond

Quick bond verification — check if an agent is bonded and at what tier. Returns bonded status, tier, staked amount, slash count, and max bounty access. This is the key integration point — other services call this to check bond status before assigning bounties. Free endpoint, no x402 payment required.

Parameters1

did

string

required

DID of the agent to verify (e.g. "did:hive:abc123")

Raw schema

{
  "type": "object",
  "properties": {
    "did": {
      "type": "string",
      "description": "DID of the agent to verify (e.g. \"did:hive:abc123\")"
    }
  },
  "required": [
    "did"
  ]
}

README.md22 KBView on GitHub

🐝 HiveTrust

code

██╗  ██╗██╗██╗   ██╗███████╗████████╗██████╗ ██╗   ██╗███████╗████████╗
██║  ██║██║██║   ██║██╔════╝╚══██╔══╝██╔══██╗██║   ██║██╔════╝╚══██╔══╝
███████║██║██║   ██║█████╗     ██║   ██████╔╝██║   ██║███████╗   ██║   
██╔══██║██║╚██╗ ██╔╝██╔══╝     ██║   ██╔══██╗██║   ██║╚════██║   ██║   
██║  ██║██║ ╚████╔╝ ███████╗   ██║   ██║  ██║╚██████╔╝███████║   ██║   
╚═╝  ╚═╝╚═╝  ╚═══╝  ╚══════╝   ╚═╝   ╚═╝  ╚═╝ ╚═════╝ ╚══════╝   ╚═╝

"The Equifax + GEICO of the A2A Economy"

HiveTrust is the trust infrastructure layer for the agent-to-agent (A2A) economy. It provides Know-Your-Agent (KYA) identity verification, algorithmic trust scoring, and parametric insurance so that AI agents can transact with each other safely — at machine speed, without human intermediaries.

As autonomous agents start negotiating contracts, processing payments, and managing real assets, the ecosystem needs a credit bureau and an insurer rolled into one. That's HiveTrust.

What HiveTrust Does

🪪 KYA Identity Verification

Agents are pseudonymous by default. HiveTrust anchors each agent to a verifiable, unforgeable identity:

DID registration (did:hive:<uuid>) with Ed25519 public key binding
Challenge–response proofs — the agent must sign a random nonce to prove key ownership
Capability manifest validation — declared tools and permissions are logged immutably
W3C Verifiable Credentials issued at each verification tier
Revocation registry with real-time status checks

📊 Trust Scoring (0 – 1000)

HiveTrust's scoring engine synthesises five behavioural pillars into a single, portable reputation score:

Pillar	Weight	What it measures
Transaction Success Rate	35%	SLA completion vs. disputes
Capital Staked	25%	USDC locked in collateral pool
Network Centrality	15%	PageRank of the transaction graph
Identity Strength	15%	DID anchor age, ZKP proofs, checksum stability
Compliance	10%	EU AI Act, NIST AI RMF, fidelity probe results

Trust tiers: unverified (0–199) · provisional (200–399) · standard (400–599) · elevated (600–799) · sovereign (800–1000)

🛡️ Parametric Insurance

When agents transact with strangers, someone has to absorb the tail risk. HiveTrust provides:

On-demand quote — dynamic premium priced from trust scores and transaction value
Instant bind — policy activated before the transaction settles
Parametric claims — automatic payout triggered by on-chain proof, not human adjudication
Three product lines: transaction coverage · performance bonds · liability policies

How HiveTrust Complements HiveAgent

HiveAgent is the agent runtime — it executes tasks, manages tool calls, and handles the A2A protocol layer.

HiveTrust is the trust fabric underneath it:

code

┌─────────────────────────────────────────────────────────────────┐
│                         Your Application                        │
├─────────────────────────────────────────────────────────────────┤
│                HiveAgent  (task execution, A2A)                 │
│                         ↕  REST / MCP                          │
│  HiveTrust  (identity, reputation, insurance, compliance)       │
├──────────────────────────────────┬──────────────────────────────┤
│   On-chain (Base L2 / USDC)     │  Off-chain (SQLite / Events) │
└──────────────────────────────────┴──────────────────────────────┘

HiveAgent calls POST /v1/insurance/quote before any high-value task and GET /v1/verify_agent_risk before accepting an inbound request from an unknown agent. The trust score flows back into HiveAgent's routing and pricing decisions.

Architecture

code

┌─────────────────────────────────────────────────────────────────────┐
│  Layer 1 — Identity KYA                                             │
│  ┌────────────────┐  ┌──────────────────┐  ┌───────────────────┐  │
│  │  DID Registry  │  │  Ed25519 Proofs  │  │  W3C-VC Issuance  │  │
│  └────────────────┘  └──────────────────┘  └───────────────────┘  │
├─────────────────────────────────────────────────────────────────────┤
│  Layer 2 — Reputation Engine                                        │
│  ┌─────────────────────────────────────────────────────────────┐   │
│  │  Telemetry Ingest → Pillar Computation → Score 0-1000       │   │
│  │  (35% txSuccess + 25% capital + 15% network +               │   │
│  │   15% identity + 10% compliance)                            │   │
│  └─────────────────────────────────────────────────────────────┘   │
├─────────────────────────────────────────────────────────────────────┤
│  Layer 3 — Insurance Underwriter                                    │
│  ┌──────────────┐  ┌──────────────┐  ┌──────────────────────────┐  │
│  │  Quote Engine │  │  USDC Escrow │  │  Parametric Claims       │  │
│  │  (dynamic    │  │  (Base L2    │  │  (on-chain trigger →      │  │
│  │   premium)   │  │   Coinbase)  │  │   instant payout)        │  │
│  └──────────────┘  └──────────────┘  └──────────────────────────┘  │
├─────────────────────────────────────────────────────────────────────┤
│  Layer 4 — Data Moat                                                │
│  ┌──────────────────────┐  ┌────────────────────────────────────┐  │
│  │  Behavioural Graph   │  │  Federation (cross-registry sync)  │  │
│  │  (audit trail,       │  │  Aggregated data licensing         │  │
│  │   PageRank, patterns)│  │  to enterprise customers           │  │
│  └──────────────────────┘  └────────────────────────────────────┘  │
└─────────────────────────────────────────────────────────────────────┘

Quick Start

bash

# Clone
git clone https://github.com/hiveagentiq/hivetrust.git
cd hivetrust

# Install
npm install

# Configure
cp .env.example .env
# Edit .env with your values

# Seed sample data (optional)
node src/seed.js

# Start
npm start
# Server running on http://localhost:3001

The health endpoint confirms it's live:

bash

curl http://localhost:3001/health
# {"status":"ok","version":"1.0.0","uptime":3.14}

API Reference

All endpoints are prefixed /v1 unless noted. Authentication via X-API-Key header.

Identity (KYA)

Method	Path	Description	Cost
`POST`	`/v1/agents`	Register a new agent (issues DID, stores public key)	$0.01
`GET`	`/v1/agents/:id`	Retrieve full agent profile + current trust tier	Free
`PUT`	`/v1/agents/:id`	Update agent metadata (creates immutable version snapshot)	$0.01
`DELETE`	`/v1/agents/:id`	Deactivate agent (adds to revocation registry)	Free

Credentials

Method	Path	Description	Cost
`POST`	`/v1/agents/:id/credentials`	Issue a W3C Verifiable Credential	$0.05
`GET`	`/v1/agents/:id/credentials`	List all credentials for an agent	Free
`DELETE`	`/v1/agents/:id/credentials/:credId`	Revoke a credential	Free
`POST`	`/v1/verify/credential`	Verify a presented credential (revocation + sig check)	$0.01

Trust Score

Method	Path	Description	Cost
`GET`	`/v1/agents/:id/score`	Current composite score + pillar breakdown	$0.01
`GET`	`/v1/agents/:id/score/history`	Score over time (pagination supported)	$0.01
`GET`	`/v1/verify_agent_risk`	Fast binary risk check — `clear` or `block` (< 50ms)	$0.01

Telemetry

Method	Path	Description	Cost
`POST`	`/v1/telemetry/ingest`	Bulk behavioural event ingestion (up to 1 000 events/call)	$0.001/event
`GET`	`/v1/agents/:id/events`	Query the agent's full audit trail	Free

Insurance

Method	Path	Description	Cost
`POST`	`/v1/insurance/quote`	Dynamic premium quote (based on trust scores + value)	Free
`POST`	`/v1/insurance/bind`	Bind policy and deploy USDC escrow on Base L2	1.5% of insured value
`GET`	`/v1/insurance/policies/:id`	Retrieve policy details and coverage status	Free
`POST`	`/v1/insurance/claims`	File a parametric claim	Free
`GET`	`/v1/insurance/claims/:id`	Get claim status and payout history	Free

claim_type namespace note: HiveTrust's claim_type field (non_delivery | fraud | sla_breach | data_loss | unauthorized_action) is distinct from the CTEF envelope-level claim_type (identity | transport | authority | continuity) defined in A2A CTEF v0.3.1. Both tokens coexist at disjoint envelope levels — see docs/CLAIM_TYPE_NAMESPACE.md.

Disputes

Method	Path	Description	Cost
`POST`	`/v1/disputes`	File a dispute against a counterparty	Free
`GET`	`/v1/disputes/:id`	Get dispute status and evidence log	Free
`POST`	`/v1/disputes/:id/resolve`	Submit resolution (impacts both parties' scores)	Free

Webhooks

Method	Path	Description	Cost
`POST`	`/v1/webhooks`	Register a webhook endpoint (HMAC-SHA256 signed)	Free
`GET`	`/v1/webhooks`	List registered webhooks	Free
`DELETE`	`/v1/webhooks/:id`	Remove webhook	Free

Federation

Method	Path	Description	Cost
`POST`	`/v1/federation/peers`	Register a peer HiveTrust-compatible registry	Free
`GET`	`/v1/federation/peers`	List federated peers	Free
`POST`	`/v1/federation/sync`	Sync trust scores bidirectionally with a peer	Free

System

Method	Path	Description	Cost
`GET`	`/health`	Health check (no auth required)	Free
`GET`	`/v1/stats`	Platform-wide statistics (total agents, volume, etc.)	Free
`GET`	`/.well-known/hivetrust.json`	Discovery document	Free

MCP Integration

HiveTrust exposes all core operations as MCP tools via a single JSON-RPC 2.0 endpoint at POST /mcp. This lets any MCP-compatible agent (including HiveAgent) call HiveTrust natively without REST boilerplate.

List available tools

http

POST /mcp
Content-Type: application/json
X-API-Key: ht_your_api_key

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/list"
}

Call a tool

http

POST /mcp
Content-Type: application/json
X-API-Key: ht_your_api_key

{
  "jsonrpc": "2.0",
  "id": 2,
  "method": "tools/call",
  "params": {
    "name": "hivetrust_get_trust_score",
    "arguments": { "agent_id": "a1b2c3d4-..." }
  }
}

Available MCP Tools

Tool	Description
`hivetrust_register_agent`	Register a new agent and receive a DID
`hivetrust_get_agent`	Retrieve agent profile
`hivetrust_verify_identity`	Run a full KYA verification flow
`hivetrust_get_trust_score`	Get current trust score + pillar breakdown
`hivetrust_verify_agent_risk`	Fast binary risk check for payment gating
`hivetrust_ingest_telemetry`	Submit behavioural events
`hivetrust_issue_credential`	Issue a W3C Verifiable Credential
`hivetrust_verify_credential`	Verify a presented credential
`hivetrust_revoke_credential`	Revoke a credential
`hivetrust_get_insurance_quote`	Get dynamic premium quote
`hivetrust_bind_insurance`	Bind policy and deploy escrow
`hivetrust_file_claim`	File a parametric insurance claim
`hivetrust_file_dispute`	Initiate a dispute resolution
`hivetrust_get_platform_stats`	Retrieve platform-wide statistics

CTEF v0.3.1 Endpoint

HiveTrust is the 5th canonicalizer in the CTEF (Composable Trust Evidence Format) v0.3.1 byte-match consortium: AgentGraph + AgentID + APS + Nobulex + HiveTrust. Seat committed at the 2026-04-25 01:48 UTC freeze.

Patent applications 64/049,200 – 64/049,226, priority 2026-04-24, holder: Stephen A. Rotzin / TheHiveryIQ.

Endpoints

Route	Method	Auth	Description
`/.well-known/cte-test-vectors.json`	GET	Public	CTEF v0.3.1 fixture with all 4 vectors
`/verify`	GET `?did=`	Free (1st/day)	HiveTrust passport tier lookup
`/verify`	POST	10/day free, then $0.01 USDC	Structural verification of a CTEF envelope
`/verify/pubkey`	GET	Public	Ed25519 attestation pubkey for Apr 30 byte-match
`/verify/self-test`	GET	Public	Run all 4 vectors — returns pass/fail counts

CTEF Fixture

bash

curl https://hivetrust.hiveagentiq.com/.well-known/cte-test-vectors.json | jq '.version'
# "0.3.1"

Structural Verification (POST /verify)

bash

# First 10 requests/day per IP are free
curl -X POST https://hivetrust.hiveagentiq.com/verify \
  -H 'Content-Type: application/json' \
  -d '{"type":"TrustAttestation","version":"0.3.1","claim_type":"authority",...}'

# Returns: { verdict: "valid"|"INVALID_CLAIM_SCOPE"|"INVALID_COMPOSITION",
#             canonical_sha256: "...", pass: true|false }

Beyond 10 free requests/day, the endpoint returns HTTP 402 with an x402 payment challenge: $0.01 USDC on Base chain 8453.

Self-Test

bash

curl https://hivetrust.hiveagentiq.com/verify/self-test | jq '.data.summary'

Canonicalization

All vectors use RFC 8785 JCS — implemented inline in src/routes/cte.js. The implementation produces byte-identical output to AgentGraph's canonicalize_jcs_strict for all 4 shared test vectors:

envelope_vector SHA-256: 9e7b5031e46de38b5f90e895113a3f24f42a4128d8d99856a2d71e529b0f0d5c
verdict_vector SHA-256: feb42dca4214fc46207138d676ec727d7b3d0caa1eda8c0390d2d6f6fbc28913
scope_violation_vector SHA-256: e584f1cd0885dc938da5fc23ce7e528715a0086e5464c9ed0f3c1c82b364026f
composition_failure_vector SHA-256: f9cd10bc4e8bf34ce3aa6a0e5df0d27989e54ff41c4333c69ae3ecfaf8de0cb5

Revenue Model

HiveTrust operates five revenue streams:

Stream	Mechanism	Target
KYA API Calls	$0.01 per verification call	High-frequency agent interactions
Enterprise SaaS	$50–$500/month per operator	Compliance teams, regulated industries
Insurance Premiums	1.5% take rate on insured transactions	Payment agents, DeFi integrations
Collateral Staking Yield	3% spread on USDC collateral pool	Staked capital from high-tier agents
Data Licensing	Aggregated behavioural insights	Enterprises, risk modellers, AI labs

Environment Variables

Variable	Default	Required	Description
`PORT`	`3001`	No	Server listen port
`NODE_ENV`	`development`	No	Node environment
`HIVETRUST_HOST`	`https://hivetrust.hiveagentiq.com`	Yes (prod)	Public base URL
`INTERNAL_API_TOKEN`	—	Yes (prod)	Service-to-service auth token
`WEBHOOK_SIGNING_SECRET`	—	Yes	HMAC secret for webhook payloads
`HIVEAGENT_URL`	`https://hiveagentiq.com`	No	HiveAgent platform URL
`CDP_API_KEY_ID`	—	Yes (insurance)	Coinbase CDP key ID
`CDP_API_KEY_SECRET`	—	Yes (insurance)	Coinbase CDP key secret
`COLLATERAL_POOL_ADDRESS`	—	Yes (insurance)	USDC escrow contract on Base L2
`BASE_RPC_URL`	`https://mainnet.base.org`	No	Base L2 RPC endpoint
`DB_PATH`	`data/hivetrust.db`	No	SQLite database file path
`FEDERATION_SECRET`	—	Yes (federation)	Shared secret for peer sync
`FEDERATION_PEERS`	—	No	Comma-separated peer URLs
`INSURANCE_MIN_SCORE`	`300`	No	Minimum score for insurance eligibility
`INSURANCE_MAX_COVERAGE_USDC`	`100000`	No	Per-transaction coverage cap
`INSURANCE_BASE_RATE`	`0.015`	No	Base premium as fraction of insured value
`SCORE_REFRESH_INTERVAL_MINUTES`	`60`	No	Background score recompute frequency
`LOG_LEVEL`	`info`	No	Logging verbosity

See .env.example for the full annotated list.

Deployment

Render (recommended for development)

bash

# Push to GitHub, then connect the repo in the Render dashboard
# render.yaml is already configured — click "Apply"

# Or deploy manually:
render deploy

The included render.yaml sets free-tier web service, auto-generates secrets, and configures all env vars.

Fly.io (recommended for production)

bash

# Install flyctl: https://fly.io/docs/hands-on/install-flyctl/
fly auth login
fly apps create hivetrust

# Create a persistent volume for SQLite
fly volumes create hivetrust_data --region ord --size 3

# Deploy
fly deploy

See fly.toml for the full configuration. Auto-stop/start is enabled to minimise costs.

Docker

bash

# Build
docker build -t hivetrust:latest .

# Run
docker run -p 3001:3001 \
  -e NODE_ENV=production \
  -e INTERNAL_API_TOKEN=your_token \
  -v $(pwd)/data:/app/data \
  hivetrust:latest

Railway

bash

railway init
railway up

Set environment variables in the Railway dashboard using .env.example as the reference.

Tech Stack

Component	Technology
Runtime	Node.js 22 (ES Modules)
Framework	Express 5.2.1
Database	SQLite via better-sqlite3 12.8.0 (WAL mode)
Identity	Ed25519 keys (base58), DID:hive, W3C-VC
Protocol	MCP JSON-RPC 2.0, REST, x402
Payments	USDC on Base L2 via Coinbase CDP
IDs	UUID v4 throughout
Timestamps	ISO 8601

SDK

JavaScript / TypeScript

bash

npm install @hivetrust/sdk

import { HiveTrustClient } from '@hivetrust/sdk';

const trust = new HiveTrustClient('https://hivetrust.hiveagentiq.com', 'ht_your_api_key');

// Register an agent
const agent = await trust.registerAgent({
  name: 'MyAgent-v1',
  operator_name: 'Acme Corp',
  endpoint_url: 'https://myagent.acme.example/mcp',
  public_key: 'edPublicKeyBase58...',
});

// Check trust before transacting
const score = await trust.getTrustScore(agent.id);
console.log(score.score, score.tier); // 680 "elevated"

// Get insurance quote
const quote = await trust.getInsuranceQuote(agent.id, counterpartyId, 1000);
console.log(quote.premium_usdc); // 15.00

See packages/npm/ for the full SDK source.

Python

bash

pip install hivetrust

python

from hivetrust import HiveTrustClient

trust = HiveTrustClient("https://hivetrust.hiveagentiq.com", "ht_your_api_key")

score = trust.get_trust_score("agent-id-here")
print(score["score"], score["tier"])

See packages/python/ for the full SDK source.

License

Hive Civilization

Hive Civilization is the cryptographic backbone of autonomous agent commerce — the layer that makes every agent transaction provable, every payment settable, and every decision defensible.

This repository is part of the DEFENSIBLE pillar.

thehiveryiq.com
hiveagentiq.com
agent-card: https://hivetrust.hiveagentiq.com/.well-known/agent-card.json

Install

Tools (17)

hivetrust_register_agenthivetrust_get_agenthivetrust_verify_identityhivetrust_get_trust_scorehivetrust_verify_agent_riskhivetrust_ingest_telemetryhivetrust_issue_credentialhivetrust_verify_credential

Remote endpoint

Streamable HTTP

Hosted server - connect over the network, no local install.

url

https://hivetrust.onrender.com/mcp

Add to VS Code Add to Cursor

claude_desktop_config.json

json

{
  "mcpServers": {
    "hivetrust": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://hivetrust.onrender.com/mcp"
      ]
    }
  }
}

Desktop config is stdio-only; this bridges via mcp-remote. Native remote: Settings > Connectors.

io.github.srotzin/hivetrust (Model Context Protocol Server)

🛠️ Key Features

🚀 Use Cases

⚡ Developer Benefits

⚠️ Limitations

Topics

hivetrust_register_agent

hivetrust_get_agent

hivetrust_verify_identity

hivetrust_get_trust_score

hivetrust_verify_agent_risk

hivetrust_ingest_telemetry

hivetrust_issue_credential

hivetrust_verify_credential

hivetrust_revoke_credential

hivetrust_get_insurance_quote

hivetrust_bind_insurance

hivetrust_file_claim

hivetrust_file_dispute

hivetrust_get_platform_stats

hivetrust_create_lease

hivetrust_stake_bond

hivetrust_verify_bond

🐝 HiveTrust

What HiveTrust Does

🪪 KYA Identity Verification

📊 Trust Scoring (0 – 1000)

🛡️ Parametric Insurance

How HiveTrust Complements HiveAgent

Architecture

Quick Start

API Reference

Identity (KYA)

Credentials

Trust Score

Telemetry

Insurance

Disputes

Webhooks

Federation

System

MCP Integration

List available tools

Call a tool

Available MCP Tools

CTEF v0.3.1 Endpoint

Endpoints

CTEF Fixture

Structural Verification (POST /verify)

Self-Test

Canonicalization

Revenue Model

Environment Variables

Deployment

Render (recommended for development)

Fly.io (recommended for production)

Docker

Railway

Tech Stack

SDK

JavaScript / TypeScript

Python

License

Hive Civilization

Install

Remote endpoint

Related servers