MCP server giving any AI agent cryptographic identity, SIGIL, heartbeat, passport, and beats proofs.
Provenonce MCP server demonstrates strong definition quality overall. All 11 tools have explicit name, description, and input schema definitions visible in src/tools.ts. Tool names follow verb_noun convention (register, purchase_sigil, heartbeat, etc.) and are action-oriented. Descriptions are comprehensive (ranging 150 - 300+ chars) and explain WHAT, WHEN, and dependencies clearly. Input schemas are well-formed JSON Schema with proper type declarations, constraints (enums, min/max), and parameter descriptions. Tool annotations (destructiveHint, readOnlyHint, idempotentHint, openWorldHint) are correctly applied. Primary gaps: (1) Output schemas are NOT documented, none of the tool definitions include what fields the response will contain, forcing LLMs to guess downstream structure; (2) Error handling and recovery guidance are absent from tool descriptions; (3) Batch tool (provenonce_batch_heartbeat) accepts 20 children but lacks pagination or offset/limit for truly large operations. Per-tool analysis reveals high consistency in schema quality but systematic omission of output documentation.
Submit heartbeats for multiple child agents in a single call. One payment covers all children. Requires active sponsorships for each child. Max 20 children per batch.
Compute a Beats work-proof — cryptographic evidence of computational effort by this agent. Computes sequential hash chains at the current network difficulty, submits to the Beats service for a signed receipt. The receipt can be used for spawn authorization and other operations.
Get the full lineage chain for an agent — all events in its provenance history (registration, SIGIL issuance, heartbeats, spawns). Public — no authentication required.
Get this agent's cryptographically signed Passport — a verifiable identity document any third party can verify offline using the Provenonce authority public key. Root agents (depth 0) require an active SIGIL; child agents (depth > 0) only need at least one heartbeat.
Submit a heartbeat to prove this agent is alive. Root agents (depth 0) require a SIGIL first; child agents (depth > 0) can heartbeat without a SIGIL. If payment_tx is omitted, returns payment instructions (fee amount + address).
Output schemas not documented. None of the 11 tool definitions declare what fields the response will contain (e.g., provenonce_register should document that it returns {hash, api_key, identity}). LLMs cannot plan downstream tool calls or extract data without knowing response structure.
Error handling and recovery guidance absent. Tool descriptions do not explain what errors can occur, when they are retryable, or what corrective action the LLM should take. Example: provenonce_heartbeat should document 'Fails if no SIGIL registered for root agents, call provenonce_purchase_sigil first.'
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-22 | C | 66 | 2026-07-28+ | v2 |
| 2026-03-09 | F | 13 | - | v1 |
Purchase a Provenonce SIGIL to unlock full provenance: heartbeat access, signed passport, and a permanent identity record. If payment_tx is omitted, returns payment instructions (fee amount + address). SIGIL format: name*principal*tier (e.g. my-agent*acme*ind).
Register this agent with Provenonce to get a cryptographic identity (hash + API key). Safe to call multiple times — returns existing identity if already registered. No wallet required. Free.
Spawn a child agent under this agent's identity. The child inherits lineage from the parent. Returns the child's hash and API key. Requires sufficient beats balance or a work-proof receipt.
Get this agent's current Provenonce status: identity, SIGIL, beats balance, and next steps. Requires prior provenonce_register call.
Compute VDF beats and submit to the Registry to credit this agent's lifetime beat count. Unlike provenonce_beats_proof (which gets a receipt for spawn/resync), this extends the agent's persistent beat chain and increases the "Lifetime Beats" metric visible in the Registry.
Verify another agent's Provenonce identity. Returns their SIGIL, identity class, and registration status. Public — no authentication required.
Missing dependency documentation in descriptions. provenonce_status description says 'Requires prior provenonce_register call' (good), but provenonce_heartbeat should similarly state 'Requires provenonce_register; root agents (depth 0) must have active SIGIL first.' Current descriptions assume the agent already knows prerequisites.
provenonce_batch_heartbeat lacks pagination support. Accepts max 20 children, but no offset/limit for larger agent populations. If an agent needs to heartbeat 100 children, it must make 5 sequential calls. Should support cursor-based pagination or document batch size limit more prominently.
No dry-run or confirmation for irreversible operations. provenonce_purchase_sigil, provenonce_submit_beats, and provenonce_spawn are destructive (incur costs, modify state). No ability to preview or confirm before executing. Should offer an optional 'dry_run' parameter or require explicit confirmation.