agent-receipts/obsigna

View on GitHub ↗

Agent Receipts — cryptographically signed audit trails for AI agent actions. Protocol spec, SDKs (Go, TypeScript, Python), and MCP proxy.

20 ★3 forksGoUpdated 1mo ago

What you need to know

Obsigna is the reference toolset implementing Agent Receipts, an open protocol for producing cryptographically signed, tamper-evident records of AI agent actions via MCP.

Install

brew install agent-receipts/tap/obsigna
obsigna daemon start
For Go: go get obsigna.dev/sdk/go
For TypeScript: npm install @obsigna/sdk-ts
For Python: pip install obsigna

Usage

  • •Add PostToolUse hook to ~/.claude/settings.json
  • •Inspect audit trail with obsigna list/show/verify
  • •Use the MCP proxy to wrap any MCP server

Key features

  • ✓Cryptographically signed audit trails
  • ✓MCP stdio proxy signing every tool call
  • ✓Policy hooks and risk scoring
  • ✓Go/TypeScript/Python SDKs
  • ✓Formal verification of the receipt chain

Best for

Teams that need tamper-evident audit trails for AI agent actions

Caveats

  • ⚠Requires the daemon to hold the signing key and own the audit chain
  • ⚠In-process trust model allows forgery by anyone with code execution
Platforms: Local · macOSClients: Claude Code · Claude Desktop · Codex
Documentation ↗

Reviewed 2026-08-11

Topics

agent-receiptsaiai-agentsauditcryptographyed25519golangmcpmodel-context-protocolobsignapythonreceiptssecuritytypescriptverifiable-credentialsw3c-vc
Stars
20★
Forks
3
Language
Go
License
Apache-2.0
Created
2026-04-02
Last push
2026-08-15