hive-mcp-spire — SPIRE Attestation (AFiR) MCP Server
A record a party keeps about itself is not evidence; it is a claim. SPIRE issues an independent, tamper-evident, offline-verifiable attestation of what an AI agent actually did.
SPIRE is the attestation surface of the AFiR Protection Program from Hive Civilization. Every attestation is signed with ML-DSA-65 (NIST FIPS 204) — a post-quantum signature — by the Hive typed signer, and is verifiable offline with the returned envelope. No secret is needed to verify; anyone can check an attestation against the published public key.
Patent Pending. MIT licensed. Build tier (first 1M attestations) free; verify is always free.
Tools
| Tool | What it seals | Pass |
|---|---|---|
sign_mint |
Constitutional agent-instance mint (Atom 1) — instance binding, granted authority, custody terms. No-self-attest custody, decaying authority, non-transferable binding. | mint: {instance_id, agent_ref, authority, granted_at, decay, custodian_ref} |
sign_trajectory |
Agent trajectory (Atom 2) — ordered causal edges, with a trajectory root distinct from the content root. Proves the path the agent took, not just its outputs. | trajectory: {run_id, agent_ref, edges:[{from, to, seq, cause}]} |
sign_coherence |
Coherence attestation (Atom 3, lead claim) — aggregate trajectory-drift. Attests coherence (stayed within mandate), not correctness; supports verifier-side correctness-refusal. | coherence: {run_id, agent_ref, drift_score, window, mandate_ref} |
verify_attestation |
Verify any signed SPIRE attestation offline. Returns {valid, reasons[], scheme, ...}. Always free. |
attestation: the full object returned by any sign tool (carries envelope + fragments_canon) |
get_pubkey |
The ML-DSA-65 (FIPS 204) public key + issuer DID + spec, for offline verification. Free. | — |
Each sign tool returns a signed afir.attestation object (the ML-DSA-65 envelope plus its canonical fragments_canon). Hand that whole object to verify_attestation (or to any offline ML-DSA-65 verifier with the published key) to independently confirm it.
Endpoints
| Method | Path | Purpose |
|---|---|---|
GET |
/health |
Liveness |
GET |
/ |
Service descriptor + atom map |
POST |
/mcp |
MCP JSON-RPC 2.0 (initialize, tools/list, tools/call, ping) |
GET |
/.well-known/mcp.json |
MCP discovery manifest |
GET |
/.well-known/agent.json |
A2A agent card |
Transport: Streamable-HTTP. Protocol: MCP 2024-11-05. Inbound only — the server never holds custody; it relays typed fragments to the Hive signer and returns the signed envelope.
Upstream signer: https://hive-typed-signer.onrender.com (override with HIVE_SIGNER_URL).
Connect
Hosted (recommended): point your MCP client at
https://hive-mcp-spire.onrender.com/mcp
Smithery: smithery.ai/new?repo=srotzin/hive-mcp-spire
Local:
git clone https://github.com/srotzin/hive-mcp-spire.git
cd hive-mcp-spire
npm install
node server.js # listens on :3000
Quick check:
curl -s http://localhost:3000/health
curl -s -X POST http://localhost:3000/mcp -H 'Content-Type: application/json' \
-d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}'
Environment
| Var | Default | Purpose |
|---|---|---|
PORT |
3000 |
Listen port |
ENABLE |
true |
Set false for a dormant health-only instance |
HIVE_SIGNER_URL |
https://hive-typed-signer.onrender.com |
Upstream typed signer |
Why this exists
Self-reported logs are a claim. When an AI agent acts — mints an instance, takes a path, stays within a mandate — the counterparty needs proof that does not depend on trusting the actor's own records. SPIRE binds the exact state into a post-quantum signature that anyone can verify offline, forever, without phoning home.
Part of the Hive Civilization agent economy. © 2026 Steve Rotzin / Hive Civilization. MIT.
