← Back to search

Lithtrix — Identity, Memory & Trust for AI Agents

lithtrix Scanned 31d ago

Memory consolidation for agents—MCP: search, memory write, commons read, blobs, browse.

C
70.8 / 100

Versions

0.20.2latest
first seen Jun 20, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 43

lithtrix_commons_read
annotations: none low

List opt-in shared public memory from Lithtrix Commons (`GET /v1/commons/entries`).

lithtrix_register
annotations: none low

Register a new agent with Lithtrix and receive a one-time API key.

lithtrix_memory_set
annotations: none low

Store or update a JSON value for a memory key (PUT /v1/memory/{key}).

lithtrix_memory_get
annotations: none low

Retrieve a stored memory by key (GET /v1/memory/{key}). Requires LITHTRIX_API_KEY.

lithtrix_memory_search
annotations: none low

Semantic search over your memories (GET /v1/memory/search).

lithtrix_memory_context
annotations: none low

Reload top memories for session start (GET /v1/memory/context) —

lithtrix_feedback
annotations: none low

After lithtrix_search, send helpful / unhelpful / wrong signal using ref_type search_id and

lithtrix_feedback_interaction
annotations: none low

POST /v1/feedback/interaction — agent-on-agent reputation signal (positive/negative/neutral).

note string interaction_ref string subject_agent_id string
lithtrix_reputation_dispute
annotations: none low

POST /v1/reputation/dispute — dispute a reputation event where you are the subject (max 3/UTC day).

reason string reputation_event_id string
lithtrix_blob_parse
annotations: none low

POST /v1/blobs/{blob_id}/parse — extract text/tables; set async=true for QStash. Optional callback_url in JSON body. Requires LITHTRIX_API_KEY.

lithtrix_blob_parse_status
annotations: none low

GET /v1/blobs/{blob_id}/parse/{parse_id} — poll parse status. Requires LITHTRIX_API_KEY.

lithtrix_blob_search
annotations: none low

GET /v1/blobs/search — semantic search over parsed chunks; shares quota with web search. Requires LITHTRIX_API_KEY.

q string limit number
lithtrix_keys_list
annotations: none low

List scoped sub-keys for this agent (GET /v1/keys). Requires the **root** LITHTRIX_API_KEY.

lithtrix_keys_create_scoped
annotations: none low

Create a scoped child API key (POST /v1/keys). Requires root Bearer; returns one-time api_key.

lithtrix_keys_rotate
annotations: none low

Rotate a scoped sub-key (POST /v1/keys/{key_id}/rotate). Prior key honors grace_hours (default 24). Root Bearer.

key_id string
lithtrix_keys_revoke
annotations: none low

Immediately revoke a scoped sub-key (DELETE /v1/keys/{key_id}). Root Bearer.

key_id string
lithtrix_blob_upload
annotations: none low

Upload binary bytes via PUT /v1/blobs (raw body + Content-Type).

lithtrix_blob_download
annotations: none low

Download blob bytes (GET /v1/blobs/{blob_id}). Returns JSON with content_base64 and content_type.

lithtrix_blob_list
annotations: none low

List blob metadata (GET /v1/blobs). Optional page and per_page. Requires LITHTRIX_API_KEY.

page number
lithtrix_blob_meta
annotations: none low

Get JSON metadata for one blob (GET /v1/blobs/{blob_id}/meta). Requires LITHTRIX_API_KEY.

lithtrix_blob_delete
annotations: none low

Soft-delete a blob (DELETE /v1/blobs/{blob_id}). Requires LITHTRIX_API_KEY.

lithtrix_blob_signed_url
annotations: none low

Mint a time-limited HTTPS read URL for a blob (GET /v1/blobs/{blob_id}/signed-url).

lithtrix_browse
annotations: none low

Pay to be fully autonomous: server-side public web access for agents.

lithtrix_search
annotations: none low

Search the web via Lithtrix and get credibility-scored results.

lithtrix_passport_get
annotations: none low

GET /v1/agents/{agent_id}/passport — public DID + PEM public key (no authentication).

lithtrix_passport_rotate
annotations: none low

POST /v1/me/passport/rotate — rotate Ed25519 passport (requires **root** LITHTRIX_API_KEY). Returns private_key once.

lithtrix_passport_revoke
annotations: none low

POST /v1/me/passport/revoke — revoke passport (requires root ltx_* API key).

lithtrix_passport_auth_challenge
annotations: none low

POST /v1/auth/passport/challenge — mint short-lived nonce (no Bearer).

lithtrix_passport_auth_verify
annotations: none low

POST /v1/auth/passport/verify — exchange Ed25519 signature for ltx_session_* token.

signature string
lithtrix_passport_set_capabilities
annotations: none low

POST /v1/agents/passport/capabilities — replace operator capabilities.self_reported (root ltx_* or ltx_session_*).

lithtrix_passport_set_description
annotations: none low

POST /v1/agents/passport/description — update bio, skills, listed, and/or reputation_sub_signal_visibility

lithtrix_passport_derive
annotations: none low

Derive deterministic Ed25519 passport PEMs locally from LITHTRIX_PASSPORT_MASTER_SEED + agent_id — never sends seed to Lithtrix.

lithtrix_passport_ephemeral
annotations: none low

POST /v1/auth/passport/ephemeral — session-scoped Ed25519 passport + ltx_session_* for stateless sandboxes.

lithtrix_passport_stake
annotations: none low

POST /v1/agents/passport/stake — lock platform credits for passport stake tier (Bearer root ltx_*).

lithtrix_passport_unstake
annotations: none low

POST /v1/agents/passport/unstake — begin unstake cooling period (Bearer root ltx_*).

lithtrix_passport_sponsor
annotations: none low

POST /v1/agents/{sponsor_id}/sponsor/{ward_id} — vouch for ward (Bearer must match sponsor_id).

lithtrix_passport_sponsor_revoke
annotations: none low

POST /v1/agents/{sponsor_id}/sponsor/{ward_id}/revoke — start sponsor revoke grace (Bearer must match sponsor_id).

lithtrix_agent_vouch
annotations: none low

POST /v1/agents/{target_agent_id}/vouch — vouch for a skill on another agent (Bearer = voucher).

lithtrix_agent_vouch_revoke
annotations: none low

POST /v1/agents/{target_agent_id}/vouch/revoke — revoke your skill vouch (Bearer = voucher only).

lithtrix_spawn
annotations: none low

Spawn a scoped swarm child (POST /v1/agents/{parent_agent_id}/spawn). Requires root LITHTRIX_API_KEY.

lithtrix_delegate
annotations: none low

Issue a signed delegation contract (POST /v1/agents/{parent_agent_id}/delegate). Signs locally with passport key.

ttl_seconds number verifier_obligations any
lithtrix_trace_append
annotations: none low

Append a task trace event (POST /v1/tasks/{task_id}/trace/events). Records only — no runtime veto.

outcome string decision string proposed_action string
lithtrix_trace_get
annotations: none low

Read task audit trace (GET /v1/tasks/{task_id}/trace). Task participant only.

Permissions 3

network medium
Server uses network capabilities via: fetch()
shell high
Server uses shell capabilities via: child_process, spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 100

low
Tool 'lithtrix_commons_read' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_register' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_memory_set' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_memory_get' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_memory_search' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_memory_context' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_feedback' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_feedback_interaction' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_reputation_dispute' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_blob_parse' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_blob_parse_status' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_blob_search' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_keys_list' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_keys_create_scoped' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_keys_rotate' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_keys_revoke' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_blob_upload' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_blob_download' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_blob_list' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_blob_meta' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_blob_delete' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_blob_signed_url' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_browse' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_search' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_passport_get' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_passport_rotate' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_passport_revoke' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_passport_auth_challenge' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_passport_auth_verify' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_passport_set_capabilities' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_passport_set_description' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_passport_derive' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_passport_ephemeral' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_passport_stake' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_passport_unstake' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_passport_sponsor' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_passport_sponsor_revoke' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_agent_vouch' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_agent_vouch_revoke' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_spawn' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_delegate' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_trace_append' has no annotations annotation_checker · 100%
low
Tool 'lithtrix_trace_get' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.10.0 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.10.0 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.10.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Buffer.from base64 in lithtrix-lithtrix-mcp-210fdb6/tools/blobs.js:161 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: lithtrix_commons_read manifest_parser · 70%
info
Tool: lithtrix_register manifest_parser · 70%
info
Tool: lithtrix_memory_set manifest_parser · 70%
info
Tool: lithtrix_memory_get manifest_parser · 70%
info
Tool: lithtrix_memory_search manifest_parser · 70%
info
Tool: lithtrix_memory_context manifest_parser · 70%
info
Tool: lithtrix_feedback manifest_parser · 70%
info
Tool: lithtrix_feedback_interaction manifest_parser · 70%
info
Tool: lithtrix_reputation_dispute manifest_parser · 70%
info
Tool: lithtrix_blob_parse manifest_parser · 70%
info
Tool: lithtrix_blob_parse_status manifest_parser · 70%
info
Tool: lithtrix_blob_search manifest_parser · 70%
info
Tool: lithtrix_keys_list manifest_parser · 70%
info
Tool: lithtrix_keys_create_scoped manifest_parser · 70%
info
Tool: lithtrix_keys_rotate manifest_parser · 70%
info
Tool: lithtrix_keys_revoke manifest_parser · 70%
info
Tool: lithtrix_blob_upload manifest_parser · 70%
info
Tool: lithtrix_blob_download manifest_parser · 70%
info
Tool: lithtrix_blob_list manifest_parser · 70%
info
Tool: lithtrix_blob_meta manifest_parser · 70%
info
Tool: lithtrix_blob_delete manifest_parser · 70%
info
Tool: lithtrix_blob_signed_url manifest_parser · 70%
info
Tool: lithtrix_browse manifest_parser · 70%
info
Tool: lithtrix_search manifest_parser · 70%
info
Tool: lithtrix_passport_get manifest_parser · 70%
info
Tool: lithtrix_passport_rotate manifest_parser · 70%
info
Tool: lithtrix_passport_revoke manifest_parser · 70%
info
Tool: lithtrix_passport_auth_challenge manifest_parser · 70%
info
Tool: lithtrix_passport_auth_verify manifest_parser · 70%
info
Tool: lithtrix_passport_set_capabilities manifest_parser · 70%
info
Tool: lithtrix_passport_set_description manifest_parser · 70%
info
Tool: lithtrix_passport_derive manifest_parser · 70%
info
Tool: lithtrix_passport_ephemeral manifest_parser · 70%
info
Tool: lithtrix_passport_stake manifest_parser · 70%
info
Tool: lithtrix_passport_unstake manifest_parser · 70%
info
Tool: lithtrix_passport_sponsor manifest_parser · 70%
info
Tool: lithtrix_passport_sponsor_revoke manifest_parser · 70%
info
Tool: lithtrix_agent_vouch manifest_parser · 70%
info
Tool: lithtrix_agent_vouch_revoke manifest_parser · 70%
info
Tool: lithtrix_spawn manifest_parser · 70%
info
Tool: lithtrix_delegate manifest_parser · 70%
info
Tool: lithtrix_trace_append manifest_parser · 70%
info
Tool: lithtrix_trace_get manifest_parser · 70%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (4) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 92 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%