VeriSwarm Self-Hosted MCP Server (veriswarm-mcp)

The VeriSwarm MCP Server (veriswarm-mcp) exposes the VeriSwarm platform to AI agents through the Model Context Protocol. This page documents the self-hosted server you run yourself (pip install veriswarm-mcp) — any MCP-compatible client, Claude Desktop, Cursor, or custom runtimes, can check trust scores, report events, manage agents, and interact with Guard, Passport, Vault, Cortex Workflows, A2A, and compliance/SRE tooling. For the hosted runtime and admin-managed MCP surfaces, see the MCP overview.

Installation

pip install veriswarm-mcp

Requires Python 3.10+.

Authentication

The server authenticates using environment variables:

Variable	Required	Description
VERISWARM_API_URL	No	API base URL (default: https://api.veriswarm.ai)
VERISWARM_API_KEY	Yes (or AGENT_KEY)	Platform API key for workspace operations
VERISWARM_AGENT_KEY	Yes (or API_KEY)	Agent-scoped key for self-reporting and credentials

For most setups, you only need VERISWARM_API_KEY. Set VERISWARM_AGENT_KEY when the server runs on behalf of a specific agent.

Available Tools (102)

Trust Scoring (6 tools)

check_trust, check_decision, get_my_score, get_score_history, get_score_breakdown, explain_score

Event Reporting (4 tools)

report_action, report_tool_call, report_interaction, report_incident

Guard Security (12 tools)

scan_tool, check_tool_allowed, get_findings, kill_agent, unkill_agent, tokenize_pii, rehydrate_pii, scan_injection, get_pii_session, revoke_pii_session, list_guard_policies, guard_scan_session

rehydrate_pii is available on the self-hosted server only; the hosted surfaces exclude it by design.

Passport Identity (4 tools)

get_credentials, verify_credential, verify_identity, check_delegation

Vault Audit (3 tools)

query_ledger, verify_chain, export_vault

Agent Management (5 tools)

register_agent, get_agent, list_agents, get_agent_timeline, get_agent_flags

Platform (10 tools)

platform_status, get_scoring_profile, set_scoring_profile, list_notifications, get_ip_allowlist, set_ip_allowlist, get_custom_domain, set_custom_domain, list_team_members, invite_team_member

Agent Runtime / Operations (12 tools)

get_agent_analytics, get_cost_recommendations, list_red_team_attacks, check_tool_permission, score_conversation_security, forget_contact, list_deletion_records, verify_deletion, get_agent_reputation, get_a2a_history, get_benchmark_history, get_provider_health

Cortex Workflows (12 tools)

list_workflows, get_workflow, create_workflow, run_workflow, get_execution, activate_workflow, deactivate_workflow, list_workflow_templates, deploy_template, workflow_stats, cancel_workflow_execution, retry_workflow_execution

A2A Protocol (6 tools)

list_a2a_catalog, get_a2a_agent_card, submit_a2a_task, invoke_a2a_agent, get_a2a_task, cancel_a2a_task

Approvals (5 tools)

create_approval, list_approvals, get_approval, approve_approval, reject_approval

Compliance & SRE (23 tools)

get_owasp_attestation, list_compliance_frameworks, get_compliance_report, list_cedar_policies, validate_cedar_policy, test_cedar_policy, get_sre_dashboard, get_circuit_breakers, reset_circuit_breaker, get_error_budget, get_context_dashboard, get_context_gaps, scan_mcp_tools, scan_ci, verify_response, provision_a2a_keys, label_content, get_content_provenance, get_agent_attributes, set_agent_attributes, request_jit_grant, revoke_jit_grant, list_jit_grants

For detailed parameter descriptions, see the Python SDK or Node.js SDK documentation.

Client Configuration

Add the following to your MCP client configuration:

{
  "mcpServers": {
    "veriswarm": {
      "command": "python",
      "args": ["-m", "veriswarm_mcp"],
      "env": {
        "VERISWARM_API_URL": "https://api.veriswarm.ai",
        "VERISWARM_API_KEY": "vs_your_platform_key"
      }
    }
  }
}

Config file locations:

• Claude Desktop (macOS): ~/Library/Application Support/Claude/claude_desktop_config.json
• Claude Desktop (Windows): %APPDATA%\Claude\claude_desktop_config.json
• Cursor: .cursor/mcp.json in your project, or Cursor Settings > MCP

If using a virtual environment, replace "python" with the full path to that environment's Python binary.

Usage Examples

Check trust and make decisions

"What is the current trust score for agent agt_abc123?"

"Can agent agt_abc123 perform a file_write action on production_db?"

Report events

"Report that agent agt_abc123 successfully called search_documents in 230ms."

"Report a high-severity prompt injection attempt from agent agt_xyz789."

Passport credentials

"Issue me a Passport credential."

"Verify this Passport credential: eyJhbGciOi..."

Guard and Vault

"Kill-switch agent agt_abc123 — suspected data exfiltration."

"Tokenize any PII in this text before sending it to the external tool."

"Rehydrate the tokenized response so I can read the original values."

"Verify the integrity of the last 200 Vault ledger entries."

Guard Proxy Mode

Agents can connect through a Guard Proxy MCP server instead of connecting directly to upstream tool servers. The proxy transparently intercepts every tool call to apply PII tokenization, policy enforcement, injection scanning, and audit logging before forwarding requests. Configure the proxy endpoint in your MCP client config just like any other MCP server.

Rate Limits

The MCP server inherits rate limits from the VeriSwarm REST API. Limits vary by plan tier — see your workspace billing settings for details. Rate-limited requests return HTTP 429.