io.github.CSOAI-ORG/agent-audit-logger-mcp

← Back to search

Hash-chained HMAC-signed audit log MCP for A2A (agent-to-agent) calls. Every tool-call, agent-ha...

MCP Registry ↗

78.9 / 100

Versions

MCP Registry1

1.0.2latest

first seen May 19, 2026

Tools 5

log

annotations: none low

Append a signed, hash-chained log entry. - tenant_id: customer / organisation identifier - from_agent: calling agent id (e.g. "orchestrator") - to_agent: receiving agent id (e.g. "compliance-scorer") - action: what was requested (e.g. "score_dora_compliance") - payload_hash: SHA256 of the payload body (keeps logs small + hides PII) - outcome: success | fail | timeout | blocked - context_csv: optional comma-separated tags (e.g. "high-risk,financial")

action str api_key str outcome str to_agent str tenant_id str from_agent str context_csv str payload_hash str

verify_chain

annotations: none low

Re-verify the integrity of the log chain for a tenant. Returns OK or the first sequence number where the chain breaks.

api_key str tenant_id str

search

annotations: none low

Query the log. Empty filters match everything. Returns newest-first.

limit int action str api_key str outcome str to_agent str tenant_id str from_agent str

daily_stats

annotations: none low

Return daily log volume stats for a tenant.

api_key str tenant_id str

sign_day_attestation

annotations: none low

Emit a signed attestation certifying the log integrity + volume for a given day. Pro/Enterprise only. Use this as end-of-day evidence for your auditor / Trust Center. The attestation includes the tip hash at end-of-day so anyone can later prove the log wasn't retroactively modified.

email str api_key str date_utc str tenant_id str

Permissions 3

network medium

Server uses network capabilities via: urllib

filesystem low

Server uses filesystem capabilities via: open(), os

env_vars low

Server uses env_vars capabilities via: os.environ

Scan Findings 0

No scan findings.