--- bezeichner: "io.github.shahidh68/audit-ledger-mcp" art: "mcp_server" slug: "io-github-shahidh68-audit-ledger-mcp" paketkoordinate: "npm:audit-ledger-mcp" status: "aktiv" homepage: "https://github.com/shahidh68/audit-ledger-mcp" erhebungsstand: "2026-10-11T01:17:01.851Z" namensraum: "io.github.shahidh68" registerseite: "https://tracevero.com/mcp/io-github-shahidh68-audit-ledger-mcp" abgerufen_am: "2026-10-11" zugangsdaten_erforderlich: false ausfuehrungsort: "lokal" dateisystem_pfadargument: false quelloffen_einsehbar: true roh_beschreibung: "Record AI decisions to a tamper-evident audit ledger from any MCP-compatible agent." version: "0.3.1" roh_umgebungsvariablen: "AUDIT_API_URL, AUDIT_WRITE_KEY, AUDIT_READ_KEY, AUDIT_TIMEOUT_MS, AUDIT_RETRY_ATTEMPTS, AUDIT_HMAC_KEY" roh_geheime_pflichtvariablen: "" roh_transportarten: "stdio" roh_pfadargumente: "" roh_repository_url: "https://github.com/shahidh68/audit-ledger-mcp" roh_paketquellen: "npm" roh_geheime_pflichtkopfzeilen: "" roh_pfad_umgebungsvariablen: "" roh_remote_adressen: "" roh_remote_hosts: "" roh_statusmeldung: "" roh_veroeffentlicht_am: "2026-06-05" roh_aktualisiert_am: "2026-06-05" roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json" roh_bereitstellungsform: "paket" roh_repository_quelle: "github" roh_repository_unterordner: "" roh_paketbezeichner: "audit-ledger-mcp" roh_paketversionen: "0.3.1" roh_laufzeithinweise: "" roh_umgebungsformate: "string" roh_umgebungsbeschreibungen: "AUDIT_API_URL=Your deployed audit-ledger API endpoint (e.g. https://.execute-api..amazonaws.com/prod). Leave unset to run in sandbox mode against the public shared tenant. · AUDIT_HMAC_KEY=Tenant secret used to HMAC-SHA256 PII and prompts locally before sending. Generate once per tenant (e.g. node -e \"console.log(require('crypto').randomBytes(32).toString('hex'))\") and keep it in your environment. The key never leaves your process. If unset, the MCP falls back to plain SHA-256 for backwards compatibility and logs a one-time deprecation warning; set this to switch to keyed hashing, which regulators (ICO/EDPB) expect for pseudonymisation. · AUDIT_READ_KEY=Tenant read key for your deployed ledger. Required if AUDIT_API_URL is set and you want to call verify_decision or list_decisions. · AUDIT_RETRY_ATTEMPTS=Number of retry attempts on transient failures. Defaults to 3. · AUDIT_TIMEOUT_MS=HTTP timeout in milliseconds. Defaults to 5000. · AUDIT_WRITE_KEY=Tenant write key for your deployed ledger. Required if AUDIT_API_URL is set and you want to call record_decision." roh_symbolformate: "" roh_verbindungswege: "{\"packages\":[{\"registryType\":\"npm\",\"identifier\":\"audit-ledger-mcp\",\"version\":\"0.3.1\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"AUDIT_API_URL\",\"description\":\"Your deployed audit-ledger API endpoint (e.g. https://.execute-api..amazonaws.com/prod). Leave unset to run in sandbox mode against the public shared tenant.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"AUDIT_WRITE_KEY\",\"description\":\"Tenant write key for your deployed ledger. Required if AUDIT_API_URL is set and you want to call record_decision.\",\"format\":\"string\",\"required\":false,\"secret\":true},{\"name\":\"AUDIT_READ_KEY\",\"description\":\"Tenant read key for your deployed ledger. Required if AUDIT_API_URL is set and you want to call verify_decision or list_decisions.\",\"format\":\"string\",\"required\":false,\"secret\":true},{\"name\":\"AUDIT_TIMEOUT_MS\",\"description\":\"HTTP timeout in milliseconds. Defaults to 5000.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"AUDIT_RETRY_ATTEMPTS\",\"description\":\"Number of retry attempts on transient failures. Defaults to 3.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"AUDIT_HMAC_KEY\",\"description\":\"Tenant secret used to HMAC-SHA256 PII and prompts locally before sending. Generate once per tenant (e.g. node -e \\\"console.log(require('crypto').randomBytes(32).toString('hex'))\\\") and keep it in your environment. The key never leaves your process. If unset, the MCP falls back to plain SHA-256 for backwards compatibility and logs a one-time deprecation warning; set this to switch to keyed hashing, which regulators (ICO/EDPB) expect for pseudonymisation.\",\"format\":\"string\",\"required\":false,\"secret\":true}],\"additional_arguments_declared\":false}],\"remotes\":[]}" --- # io.github.shahidh68/audit-ledger-mcp ## Measured values | Property | Value | Source | Collected on | Level of trust | Raw declaration | | --- | --- | --- | --- | --- | --- | | Required secrets declared | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: | | Execution location | lokal | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_transportarten: stdio | | Path argument present | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: | | Repository URL listed | true | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_repository_url: https://github.com/shahidh68/audit-ledger-mcp | | Description (raw) | Record AI decisions to a tamper-evident audit ledger from any MCP-compatible agent. | MCP-Register | 2026-08-26T16:45:01.514Z | selbstauskunft | | | Declared version | 0.3.1 | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Environment variables (raw) | AUDIT_API_URL, AUDIT_WRITE_KEY, AUDIT_READ_KEY, AUDIT_TIMEOUT_MS, AUDIT_RETRY_ATTEMPTS, AUDIT_HMAC_KEY | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Required secret variables (raw) | | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Transports (raw) | stdio | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Path arguments (raw) | | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Repository (raw) | https://github.com/shahidh68/audit-ledger-mcp | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Package registries (raw) | npm | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Required secret headers (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Path environment variables (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Remote URLs (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Remote hosts (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Registry status message (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | First listed in the registry (raw) | 2026-06-05 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Last changed in the registry (raw) | 2026-06-05 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Delivery form (raw) | paket | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Repository platform (raw) | github | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Repository subfolder (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Package identifiers (raw) | audit-ledger-mcp | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Package versions (raw) | 0.3.1 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Runtime hints (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Environment variable formats (raw) | string | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Environment variable descriptions (raw) | AUDIT_API_URL=Your deployed audit-ledger API endpoint (e.g. https://.execute-api..amazonaws.com/prod). Leave unset to run in sandbox mode against the public shared tenant. · AUDIT_HMAC_KEY=Tenant secret used to HMAC-SHA256 PII and prompts locally before sending. Generate once per tenant (e.g. node -e "console.log(require('crypto').randomBytes(32).toString('hex'))") and keep it in your environment. The key never leaves your process. If unset, the MCP falls back to plain SHA-256 for backwards compatibility and logs a one-time deprecation warning; set this to switch to keyed hashing, which regulators (ICO/EDPB) expect for pseudonymisation. · AUDIT_READ_KEY=Tenant read key for your deployed ledger. Required if AUDIT_API_URL is set and you want to call verify_decision or list_decisions. · AUDIT_RETRY_ATTEMPTS=Number of retry attempts on transient failures. Defaults to 3. · AUDIT_TIMEOUT_MS=HTTP timeout in milliseconds. Defaults to 5000. · AUDIT_WRITE_KEY=Tenant write key for your deployed ledger. Required if AUDIT_API_URL is set and you want to call record_decision. | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Icon formats (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Connection paths (source structure) | {"packages":[{"registryType":"npm","identifier":"audit-ledger-mcp","version":"0.3.1","transport":"stdio","environment":[{"name":"AUDIT_API_URL","description":"Your deployed audit-ledger API endpoint (e.g. https://.execute-api..amazonaws.com/prod). Leave unset to run in sandbox mode against the public shared tenant.","format":"string","required":false,"secret":false},{"name":"AUDIT_WRITE_KEY","description":"Tenant write key for your deployed ledger. Required if AUDIT_API_URL is set and you want to call record_decision.","format":"string","required":false,"secret":true},{"name":"AUDIT_READ_KEY","description":"Tenant read key for your deployed ledger. Required if AUDIT_API_URL is set and you want to call verify_decision or list_decisions.","format":"string","required":false,"secret":true},{"name":"AUDIT_TIMEOUT_MS","description":"HTTP timeout in milliseconds. Defaults to 5000.","format":"string","required":false,"secret":false},{"name":"AUDIT_RETRY_ATTEMPTS","description":"Number of retry attempts on transient failures. Defaults to 3.","format":"string","required":false,"secret":false},{"name":"AUDIT_HMAC_KEY","description":"Tenant secret used to HMAC-SHA256 PII and prompts locally before sending. Generate once per tenant (e.g. node -e \\"console.log(require('crypto').randomBytes(32).toString('hex'))\\") and keep it in your environment. The key never leaves your process. If unset, the MCP falls back to plain SHA-256 for backwards compatibility and logs a one-time deprecation warning; set this to switch to keyed hashing, which regulators (ICO/EDPB) expect for pseudonymisation.","format":"string","required":false,"secret":true}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | ## Links - Namespace: [[namensraum/io-github-shahidh68|io.github.shahidh68]] --- - Registry page: - Retrieved on: 2026-10-11