AGTS MCP Server

Sovereign MCP Gateway — Governed Tool Invocation for Autonomous Agents

Model Context Protocol server that turns tool calls into cryptographically authorized, verifiable actions. 64 governed tools across 6 layers — hybrid Ed25519 + SLH-DSA signed and Merkle-anchored. Designed to support EU AI Act, GDPR, SOC 2, ISO 27001, DORA, NIS2, and FINRA compliance.

---

Server URL

https://agts-mcp.obligationsign.com/mcp

Transport	URL	Status
Streamable HTTP (primary)	https://agts-mcp.obligationsign.com/mcp	Active
SSE (deprecated)	https://agts-mcp.obligationsign.com/mcp/sse	Deprecated

Authentication

The gateway requires a Bearer token issued through the ObligationSign platform. All requests must include an Authorization header.

To obtain a token, register at obligationsign.com/start/.

Quick Start

Claude Desktop / Cursor / Windsurf

Add to your MCP configuration:

{
  "mcpServers": {
    "agts": {
      "url": "https://agts-mcp.obligationsign.com/mcp",
      "headers": {
        "Authorization": "Bearer YOUR_TOKEN"
      }
    }
  }
}

Programmatic (JSON-RPC over HTTP)

curl -X POST https://agts-mcp.obligationsign.com/mcp \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -d '{
    "jsonrpc": "2.0",
    "id": 1,
    "method": "tools/list",
    "params": {}
  }'

---

What is AGTS?

AGTS (Autonomous Governance Transparency Standard) is a transparency-backed governance protocol that converts validated machine decisions into append-only cryptographic records, independently verified by a network of witnesses and monitors.

decision → record → immutable history → verifiable truth

Every tool call passes through a five-gate firewall (Statistical, Causal, Regression, Evidence, Human-Compatible Explanation) before execution. Admitted actions are Merkle-anchored into an append-only transparency log and signed with hybrid post-quantum cryptography.

---

Tool Catalog (64 Tools)

Layer 1 — Infrastructure

VPN & Network

Tool	Description
create_tunnel	Establish an attested VPN tunnel (WireGuard/IPSec/TLS)
tunnel_status	Monitor uptime, transfer bytes, and attestation status
disconnect_tunnel	Terminate session and log the event
dns_query	Secure DNS resolution through the Sovereign resolver

Monitor

Tool	Description
system_health	Probe all mesh workers for status and latency
check_alerts	Fetch the monitor alert timeline
subscribe_alerts	Webhook subscription for real-time alerts
check_equivocations	Fetch conflicting Signed Tree Head proofs
gossip_status	Current state of gossip protocol and monitor identity

Layer 2 — Identity & Communications

Sovereign Mail

Tool	Description
send_sovereign_mail	Send encrypted (internal) or plaintext (external) messages
list_inbox	List message metadata from an inbox
read_message	Retrieve full message content by ID
lookup_recipient_keys	Retrieve public keys (ECDH P-384 / ML-KEM-512)

Sovereign Drive

Tool	Description
upload_file	Client-side encrypted upload with integrity anchoring
list_files	List file metadata, sizes, and sharing status
download_file	Retrieve ciphertext for client-side decryption
share_file	Share files using ECDH key wrapping
delete_file	Remove a file and create a death leaf in the log

OpenClaw (Agent Identity)

Tool	Description
register_claw	Create a cryptographic Claw Passport and identity keys
scan_skill	Scan agent skills through the five-gate firewall
claw_status	Return trust score, governance history, and quota
export_passport	Sec

... View full README on GitHub