# Kevros — Agentic Identity Trust (remote · governance.taskhawktech.com)

Agentic identity trust: precision decisioning, cryptographic release tokens, hash-chained proof

- Trust score: 18/100 (low)
- Change this week: −50
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- remote · `governance.taskhawktech.com`: 18/100 (this document), [markdown](https://verifymcp.io/servers/ndl-systems-kevros/governance.md), [page](https://verifymcp.io/servers/ndl-systems-kevros/governance)

## Channel facts

- Endpoint: `https://governance.taskhawktech.com/mcp/`
- Transports: `streamable-http`
- Auth: `none`
- Version: `0.3.6`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Endpoint Security**: 46/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation not fully verified: no authorisation is required to connect, but we couldn't read the tool list to see what that exposes.
  - HTTPS not yet verified: we couldn't determine whether a plaintext access path exists.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 0/100
  - Transport check failed: declared streamable-http, but the endpoint returned HTTP 503.
- **Schema Quality & AI Usability**: 0/100
  - Schema not yet verified: we couldn't read the endpoint's schema.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 0/100
  - Tool coverage not yet verified: we couldn't read the endpoint's tools.
- **Capabilities**: 0/100
  - Capabilities not yet verified: we couldn't read the endpoint's capabilities.

**Unverified: 4 categories.** Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.

## Install

### Claude

```bash
claude mcp add --transport http ndl-systems-kevros https://governance.taskhawktech.com/mcp/
```

### Codex

```toml
[mcp_servers.ndl-systems-kevros]
url = "https://governance.taskhawktech.com/mcp/"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "ndl-systems-kevros": {
      "type": "remote",
      "url": "https://governance.taskhawktech.com/mcp/",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add ndl-systems-kevros --url https://governance.taskhawktech.com/mcp/ --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  ndl-systems-kevros:
    url: "https://governance.taskhawktech.com/mcp/"
```

### Other

```json
{
  "mcpServers": {
    "ndl-systems-kevros": {
      "type": "http",
      "url": "https://governance.taskhawktech.com/mcp/"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-07-31 (score 18, +6)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 12, 0)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-29 (score 12, −57)

- [security regression] Endpoint reachability: reachable → not serving MCP
- [security regression] Authorization: partial → unverified
- [security regression] Stability: 0.07 → unverified
- [security regression] Transport: pass → fail
- [security regression] HSTS header: pass → fail
- [functional regression] Schema quality: 100 → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional regression] Capabilities: pass → unverified

### 2026-07-28 (score 69, +1)

No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-27 (score 68, 0)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-26 (score 68)

First indexed and scored.

## MCP tools (9)

### `verify` (~210 tokens)

Verify Action

Verify an action against policy bounds before executing it. Returns ALLOW (proceed), CONSTRAIN (proceed with modified values; emitted on the wire as the legacy value CLAMP - both refer to the same verdict, CONSTRAIN is the public name), or DENY (stop). Every verification is recorded in a hash-chained provenance ledger. Cost: $0.01 per call.

Input parameters:

- `action_payload` (object, required): Action parameters to verify against policy bounds
- `action_type` (string, required): Category of action to verify (e.g. 'deploy', 'trade', 'send_email')
- `agent_id` (string, required): Unique identifier of the agent requesting verification
- `idempotency_key`: Optional key for idempotent retries  -  same key returns cached result
- `policy_context`: Optional policy overrides such as max_values or forbidden_keys
- `template_id`: Named policy template (e.g. 'robotics-arm', 'financial-transaction'). Merged with policy_context.

Output parameters:

- `result` (string)

### `attest` (~113 tokens)

Attest Action

Create a hash-chained provenance record for an action you've taken. Each attestation extends the append-only evidence chain. The hash can be independently verified by any third party. Cost: $0.02 per call.

Input parameters:

- `action_description` (string, required): Human-readable description of the action taken
- `action_payload` (object, required): Structured data describing the action (hashed into provenance)
- `agent_id` (string, required): Unique identifier of the attesting agent
- `context`: Optional metadata such as environment, trigger, or session info

Output parameters:

- `result` (string)

### `bind` (~176 tokens)

Bind Intent to Command

Declare an intent and cryptographically bind it to a command. Proves that the command was issued in service of the declared intent. Use verify-outcome after execution to close the loop. Cost: $0.02 per call.

Input parameters:

- `agent_id` (string, required): Unique identifier of the agent declaring intent
- `command_payload` (object, required): The command that will be executed to fulfill this intent
- `goal_state`: Expected end state for outcome verification
- `intent_description` (string, required): Human-readable description of what the agent intends to do
- `intent_source` (string): Origin of intent: AI_PLANNER, HUMAN_OPERATOR, or SYSTEM
- `intent_type` (string, required): Category of intent (e.g. 'navigation', 'transaction', 'deployment')
- `parent_intent_id`: ID of parent intent for hierarchical intent chains

Output parameters:

- `result` (string)

### `verify-outcome` (~133 tokens)

Verify Outcome

Verify that an executed action achieved its declared intent. Closes the loop: intent -> command -> action -> outcome -> verification. Free (included with bind).

Input parameters:

- `actual_state` (object, required): Observed end state after action execution, compared against goal_state
- `agent_id` (string, required): Unique identifier of the agent whose outcome is being verified
- `binding_id` (string, required): ID of the intent-command binding from governance_bind
- `intent_id` (string, required): ID of the original intent from governance_bind
- `tolerance` (number): Numeric tolerance for goal matching (0.1 = 10% deviation allowed)

Output parameters:

- `result` (string)

### `bundle` (~178 tokens)

Generate Compliance Bundle

Generate a certifier-grade compliance evidence bundle. Contains hash-chained provenance, intent bindings, PQC attestations, and verification instructions. Independently verifiable without Kevros access. Cost: $0.05 per call.

Input parameters:

- `agent_id` (string, required): Agent whose provenance records to include in the bundle
- `include_intent_chains` (boolean): Include intent-command binding chains in the bundle
- `include_pqc_signatures` (boolean): Include post-quantum ML-DSA-87 block signatures
- `include_verification_instructions` (boolean): Include step-by-step verification procedure for auditors
- `max_records` (integer): Maximum number of provenance records to include
- `time_range_end`: ISO 8601 end time filter (inclusive)
- `time_range_start`: ISO 8601 start time filter (inclusive)

Output parameters:

- `result` (string)

### `health` (~35 tokens)

Health Check

Check the governance gateway health status. Free.

Input parameters:

- `verbose` (boolean): Return additional details such as chain length and PQC signing status

Output parameters:

- `result` (string)

### `status` (~49 tokens)

Trust Status

Check your current usage and quota: calls used, calls remaining, tier, rate limits, and billing status. Free.

Input parameters:

- `include_chain_details` (boolean): Include hash-chain integrity check and latest provenance epoch

Output parameters:

- `result` (string)

### `check-peer` (~59 tokens)

Check Peer Trust

Check another agent's trust score and governance history. Returns trust score (0-100), chain length, attestation count, and tier. Free, no API key needed.

Input parameters:

- `agent_id` (string, required): ID of the peer agent to look up

Output parameters:

- `result` (string)

### `verify-token` (~112 tokens)

Verify Release Token

Verify a release token from another agent. Confirms the token is authentic, was issued by the Kevros gateway, and remains currently authorized after any halt or mode transition. Free, no API key needed.

Input parameters:

- `release_token` (string, required): Release token string received from governance_verify
- `token_preimage`: Deprecated. The gateway now performs verification entirely server-side using the release_token alone; any value supplied here is ignored. Field retained for backward compatibility with v1 SDK callers…

Output parameters:

- `result` (string)

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/ndl-systems-kevros/governance#diagnostics

## Score history

- 2026-08-03: 18
- 2026-08-02: 18
- 2026-08-01: 18
- 2026-07-31: 18
- 2026-07-30: 12
- 2026-07-29: 12
- 2026-07-28: 69
- 2026-07-27: 68
- 2026-07-26: 68

## Links

- Remote endpoint: https://governance.taskhawktech.com/mcp/
- Repository: https://github.com/ndl-systems/kevros-sdk
- Changelog RSS feed: https://verifymcp.io/servers/ndl-systems-kevros/governance/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/ndl-systems-kevros/governance/changelog.json
- HTML version of this page: https://verifymcp.io/servers/ndl-systems-kevros/governance