Vorim AI — MCP Server
Give every AI agent its own cryptographic identity, scoped permissions, and a tamper-evident audit trail — directly from Claude Desktop, Cursor, or any MCP-compatible client.
What is Vorim AI?
Vorim AI is the identity and trust layer for autonomous AI agents. It gives each agent its own Ed25519 keypair, time-bounded scoped permissions, hash-linked audit events, and a publicly verifiable trust score — so when an agent does something, you can prove who acted, what they were allowed to do, and what happened.
The protocol underneath (VAIP) is open, MIT-licensed, and submitted to IETF as draft-nyantakyi-vaip-agent-identity-01.
This package is the MCP (Model Context Protocol) server that exposes 19 Vorim tools to any MCP-compatible AI client.
Works with Claude Desktop, Cursor, VS Code, and any other MCP client.
Quick Start
npm install -g @vorim/mcp-server
Or run directly with npx:
VORIM_API_KEY=agid_sk_live_... npx @vorim/mcp-server
Configuration
Claude Desktop
Add to ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"vorim": {
"command": "npx",
"args": ["@vorim/mcp-server"],
"env": {
"VORIM_API_KEY": "agid_sk_live_..."
}
}
}
}
Cursor
Add to .cursor/mcp.json in your project root:
{
"mcpServers": {
"vorim": {
"command": "npx",
"args": ["@vorim/mcp-server"],
"env": {
"VORIM_API_KEY": "agid_sk_live_..."
}
}
}
}
VS Code
Add to your VS Code MCP settings with the same format.
Get an API Key
- Sign up at vorim.ai (free, no credit card)
- Go to Settings > API Keys
- Create a key with
agents:*,audit:*,trust:*scopes
Available Tools (19)
Health
| Tool | Description |
|---|---|
vorim_ping | Check API health and connectivity |
Agent Identity
| Tool | Description |
|---|---|
vorim_register_agent | Register a new agent with Ed25519 cryptographic identity |
vorim_register_ephemeral | Register a did:key ephemeral agent with TTL |
vorim_get_agent | Get agent details by ID |
vorim_list_agents | List all agents with pagination and filtering |
vorim_update_agent | Update agent metadata (name, description, status) |
vorim_revoke_agent | Permanently revoke an agent |
Permissions
| Tool | Description |
|---|---|
vorim_check_permission | Check if agent has a permission scope (sub-5ms) |
vorim_grant_permission | Grant a permission with optional expiry and rate limits |
vorim_list_permissions | List all active permissions for an agent |
vorim_revoke_permission | Revoke a specific permission scope |
Credential Delegation
| Tool | Description |
|---|---|
vorim_delegate_credential | Delegate OAuth credentials to an agent |
vorim_request_token | Agent requests a short-lived access token |
vorim_list_delegations | List active credential delegations |
Audit
| Tool | Description |
|---|---|
vorim_emit_event | Log an audit event for an agent action |
vorim_export_audit | Export signed audit bundle with SHA-256 manifest |
Trust
| Tool | Description |
|---|---|
vorim_verify_trust | Verify agent trust score (public, no auth required) |
Onboarding
| Tool | Description |
|---|---|
vorim_onboard_start | Start device-authorization onboarding for a user with no API key; returns a user code and activation URL |
vorim_onboard_check | Check whether the user approved onboarding and retrieve the issued API key |
Example Usage
Once configured, use natural language in Claude, Cursor, or any MCP client:
- "Register an agent called invoice-processor with read and execute permissions"
- "Check if agent agid_acme_a1b2 has permission to execute"
- "Log a tool_call event for the agent: action=process_invoice, result=success"
- "What's the trust score for agent agid_acme_a1b2?"
- "Export the audit trail for the last 30 days"
- "Delegate my GitHub OAuth token to this agent for 24 hours"
- "Revoke agent agid_acme_a1b2"
Why Use Vorim AI
- Cryptographic identity — Ed25519 keypairs for every agent. Not a shared service account.
- Fine-grained permissions — 7 scopes with time bounds and rate limits, sub-5ms checks.
- Tamper-evident audit trails — SHA-256 hash-linked events, signed export bundles for compliance.
- Public trust scoring — anyone can verify any agent without auth (no shared secrets).
- Open protocol — VAIP submitted to IETF, MIT-licensed, freely implementable.
- Compliance-ready — EU AI Act, US Executive Order 14110, SOC 2, GDPR.
Environment Variables
| Variable | Required | Default | Description |
|---|---|---|---|
VORIM_API_KEY | Yes | — | Your Vorim API key (agid_sk_live_...) |
VORIM_BASE_URL | No | https://api.vorim.ai | API base URL (override for self-hosted) |
Links
- Platform: vorim.ai
- API Docs: vorim.ai/docs
- Protocol Spec (VAIP): github.com/Vorim-AI-Labs/vorim-protocol
- TypeScript SDK: @vorim/sdk on npm
- Python SDK: vorim on PyPI
- OpenClaw Skill: Vorim-AI-Labs/vorim-openclaw-skill
- Agent Discovery: vorim.ai/.well-known/agent.json
License
MIT — see LICENSE for details.
Built by Vorim AI. Questions or feedback: kwame@vorim.ai.