Add protect-mcp — cryptographic receipt signing for MCP tool calls

[tomjwxf]

Server name

protect-mcp

GitHub URL

https://github.com/scopeblind/scopeblind-gateway

npm

https://www.npmjs.com/package/protect-mcp

Category

Security / Governance

Description

Ed25519 receipt signing and Cedar policy enforcement for MCP tool calls. Every tool invocation produces a tamper-evident receipt verifiable offline. Works as a Claude Code hook server or MCP gateway wrapper.

License

MIT

Additional context

• Merged into Microsoft Agent Governance Toolkit
• Receipt format follows IETF Internet-Draft: draft-farley-acta-signed-receipts
• Offline verification: npx @veritasacta/verify receipt.json