← Back to search

io.github.CSOAI-ORG/agent-audit-logger-mcp

CSOAI-ORG streamable_http Scanned 20d ago

Hash-chained HMAC-signed audit log MCP for A2A (agent-to-agent) calls. Every tool-call, agent-ha...

MCP Registry ↗
B
78.9 / 100

Versions

1.0.2latest
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 5

log
annotations: none low

Append a signed, hash-chained log entry. - tenant_id: customer / organisation identifier - from_agent: calling agent id (e.g. "orchestrator") - to_agent: receiving agent id (e.g. "compliance-scorer") - action: what was requested (e.g. "score_dora_compliance") - payload_hash: SHA256 of the payload body (keeps logs small + hides PII) - outcome: success | fail | timeout | blocked - context_csv: optional comma-separated tags (e.g. "high-risk,financial")

action str api_key str outcome str to_agent str tenant_id str from_agent str context_csv str payload_hash str
verify_chain
annotations: none low

Re-verify the integrity of the log chain for a tenant. Returns OK or the first sequence number where the chain breaks.

api_key str tenant_id str
search
annotations: none low

Query the log. Empty filters match everything. Returns newest-first.

limit int action str api_key str outcome str to_agent str tenant_id str from_agent str
daily_stats
annotations: none low

Return daily log volume stats for a tenant.

api_key str tenant_id str
sign_day_attestation
annotations: none low

Emit a signed attestation certifying the log integrity + volume for a given day. Pro/Enterprise only. Use this as end-of-day evidence for your auditor / Trust Center. The attestation includes the tip hash at end-of-day so anyone can later prove the log wasn't retroactively modified.

email str api_key str date_utc str tenant_id str

Permissions 3

network medium
Server uses network capabilities via: urllib
filesystem low
Server uses filesystem capabilities via: open(), os
env_vars low
Server uses env_vars capabilities via: os.environ

Scan Findings 29

low
Tool 'log' has no annotations annotation_checker · 100%
low
Tool 'verify_chain' has no annotations annotation_checker · 100%
low
Tool 'search' has no annotations annotation_checker · 100%
low
Tool 'daily_stats' has no annotations annotation_checker · 100%
low
Tool 'sign_day_attestation' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3483) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: log manifest_parser · 90%
info
Tool: verify_chain manifest_parser · 90%
info
Tool: search manifest_parser · 90%
info
Tool: daily_stats manifest_parser · 90%
info
Tool: sign_day_attestation manifest_parser · 90%
info
Required env vars (8) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 80%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%