# HiveTrust (remote · hivetrust.onrender.com)

KYA identity verification, trust scoring, and performance bonds for AI agents

- Trust score: 73/100 (medium)
- Change this week: +7
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- remote · `hivetrust.onrender.com`: 73/100 (this document), [markdown](https://verifymcp.io/servers/srotzin-hivetrust/hivetrust.md), [page](https://verifymcp.io/servers/srotzin-hivetrust/hivetrust)

## Channel facts

- Endpoint: `https://hivetrust.onrender.com/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.0.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Endpoint Security**: 83/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation is enforced on tool calls, but the challenge carries no valid RFC 9728 metadata, so a client cannot discover where to get a token.
  - HTTPS is enforced; there's no plaintext access path.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 75/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 1960 tokens (~115/item across 17 items; 17 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 99/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 98% of tool parameters carry a description.
- **Capabilities**: 20/100
  - Spec-recency check failed: implements MCP spec 2024-11-05; the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add --transport http srotzin-hivetrust https://hivetrust.onrender.com/mcp
```

### Codex

```toml
[mcp_servers.srotzin-hivetrust]
url = "https://hivetrust.onrender.com/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "srotzin-hivetrust": {
      "type": "remote",
      "url": "https://hivetrust.onrender.com/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add srotzin-hivetrust --url https://hivetrust.onrender.com/mcp --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  srotzin-hivetrust:
    url: "https://hivetrust.onrender.com/mcp"
```

### Other

```json
{
  "mcpServers": {
    "srotzin-hivetrust": {
      "type": "http",
      "url": "https://hivetrust.onrender.com/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 73, +1)

No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-31 (score 72, +4)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 68, 0)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-29 (score 68, +1)

No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-28 (score 67, +1)

No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-27 (score 66, 0)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-26 (score 66)

First indexed and scored.

## MCP tools (17)

### `hivetrust_register_agent` (~291 tokens)

Register a new AI agent identity with HiveTrust KYA (Know Your Agent). Assigns a unique agent ID, anchors the public key, and initializes the trust score.

Input parameters:

- `capabilities` (array): List of capability tags (e.g. ["finance", "trading", "research"])
- `checksum` (string): SHA-256 checksum of the agent (system prompt + tools + model config)
- `delegation_scope` (array): Scope of delegated authority
- `description` (string): What this agent does
- `eu_ai_act_class` (string): EU AI Act risk classification
- `hiveagent_id` (string): Cross-reference ID from HiveAgent platform
- `metadata` (object): Additional key-value metadata
- `model_name` (string): e.g. gpt-4o, claude-3-5-sonnet
- `model_provider` (string): e.g. openai, anthropic, google
- `model_version` (string): Specific model version
- `name` (string, required): Human-readable agent name
- `owner_id` (string, required): ID of the owning organization or user
- `owner_type` (string)
- `public_key` (string): Ed25519 public key (base58 encoded)
- `public_key_format` (string): Encoding format of the public key
- `verticals` (array): Industry verticals this agent operates in

### `hivetrust_get_agent` (~60 tokens)

Retrieve a registered agent's full identity profile, including public key, checksum, trust tier, capabilities, and compliance status.

Input parameters:

- `agent_id` (string, required): Agent UUID or DID (e.g. "did:hivetrust:abc123")

### `hivetrust_verify_identity` (~99 tokens)

Verify an agent's cryptographic identity by checking public key ownership and checksum integrity. Returns a verification result with confidence score and reason codes.

Input parameters:

- `agent_id` (string, required): Agent UUID or DID to verify
- `challenge` (string): Optional challenge string to verify live key possession
- `checksum` (string): Current agent checksum to compare against registered value
- `signature` (string): Agent's signature of the challenge (base58 encoded)

### `hivetrust_get_trust_score` (~71 tokens)

Retrieve an agent's current multi-pillar trust score (0–1000 scale). Returns composite score, tier, per-pillar breakdown (identity, behavior, fidelity, compliance, provenance), verdict, and max recommended transaction value.

Input parameters:

- `agent_id` (string, required): Agent UUID or DID

### `hivetrust_verify_agent_risk` (~67 tokens)

Quick risk assessment for payment processors and marketplace operators. Returns verdict (ALLOW/REVIEW/BLOCK), trust tier, and max transaction limit. This is the free public endpoint — no API key required.

Input parameters:

- `agent_id` (string, required): Agent UUID or DID to assess

### `hivetrust_ingest_telemetry` (~62 tokens)

Bulk ingest behavioral telemetry events for an agent. These events feed into the trust scoring engine. Supports transaction completions, SLA violations, dispute events, tool calls, and more.

Input parameters:

- `events` (array, required): Array of behavioral events to ingest

### `hivetrust_issue_credential` (~116 tokens)

Issue a W3C-compatible verifiable credential to an agent. Credentials represent verified claims such as identity verification, compliance certification, or domain expertise.

Input parameters:

- `agent_id` (string, required): Agent UUID to issue the credential to
- `claims` (object, required): Credential claims (key-value pairs specific to the credential type)
- `credential_type` (string, required): Type of verifiable credential
- `expires_at` (string): ISO 8601 expiration date (optional)
- `issuer_id` (string, required): ID of the issuing entity

### `hivetrust_verify_credential` (~45 tokens)

Verify a previously issued verifiable credential. Checks signature validity, revocation status, and expiration.

Input parameters:

- `credential_id` (string, required): UUID of the credential to verify

### `hivetrust_revoke_credential` (~102 tokens)

Revoke a verifiable credential. Records the revocation in the registry. Revoked credentials immediately fail verification checks.

Input parameters:

- `agent_id` (string): Agent UUID that owns the credential
- `credential_id` (string, required): UUID of the credential to revoke
- `evidence` (object): Supporting evidence for the revocation
- `reason` (string, required): Reason for revocation (e.g. "compromised_key", "expired_compliance")

### `hivetrust_get_insurance_quote` (~99 tokens)

Get a dynamic insurance premium quote for an agent transaction. Premium is calculated based on trust score, transaction value, and risk tier. HiveTrust takes a 1.5% spread on insured transactions.

Input parameters:

- `agent_id` (string, required): Agent UUID being insured
- `counterparty_id` (string): ID of the counterparty agent or user (optional)
- `transaction_value` (number, required): Value of the transaction in USDC

### `hivetrust_bind_insurance` (~88 tokens)

Bind (activate) an insurance policy for an agent. Locks in the premium, creates the policy record, and deploys the escrow contract on Base L2.

Input parameters:

- `agent_id` (string, required): Agent UUID to insure
- `quote_details` (object): Quote object returned by hivetrust_get_insurance_quote
- `transaction_value` (number, required): Transaction value in USDC

### `hivetrust_file_claim` (~122 tokens)

File an insurance claim against an active policy. Triggers claims adjudication workflow. Payouts are made in USDC via the Base L2 escrow contract.

Input parameters:

- `amount` (number, required): Claim amount in USDC
- `claim_type` (string, required): Type of claim being filed
- `claimant_id` (string, required): ID of the entity filing the claim
- `description` (string): Detailed description of the claim
- `evidence` (object): Supporting evidence (transaction IDs, logs, screenshots)
- `policy_id` (string, required): Insurance policy UUID

### `hivetrust_file_dispute` (~115 tokens)

File a dispute or appeal against a trust score decision, credential revocation, or behavioral event. Initiates the dispute resolution workflow.

Input parameters:

- `agent_id` (string, required): Agent UUID filing the dispute
- `dispute_type` (string, required): Category of the dispute
- `evidence` (object): Supporting evidence for the dispute
- `reason` (string, required): Detailed reason for the dispute
- `target_id` (string, required): UUID of the resource being disputed
- `target_type` (string, required): Type of the resource being disputed

### `hivetrust_get_platform_stats` (~43 tokens)

Retrieve HiveTrust platform-wide statistics: total registered agents, verified count, average trust score, total insured value, active policies, claims filed, and more.

### `hivetrust_create_lease` (~161 tokens)

Create a Data Oracle Context Lease — "Sign Once, Settle Many". Grants unlimited access to a data stream for a fixed period (24h/72h/168h). Returns a cryptographic lease token (SHA-256) for zero-friction verification. Available streams: construction_pricing, simpson_catalog, compliance_feeds, market_data, pheromone_signals.

Input parameters:

- `data_stream` (string, required): The data stream to lease access to
- `duration_hours` (number, required): Lease duration in hours (24h, 72h, or 168h / 1 week)
- `lessee_did` (string, required): DID of the agent acquiring the lease (e.g. "did:hivetrust:abc123")

### `hivetrust_stake_bond` (~244 tokens)

Stake USDC to back an agent's reputation via HiveBond. Creates a trust bond with a specified tier (bronze/silver/gold/platinum) and lock period. Phase 1: declared stake amount tracked in-memory; flat $0.25 registration fee via x402. Longer lock periods earn higher simulated yield (2–5% APY). Slashing is permanent — if an agent fails, stake is slashed and paid to injured parties.

Input parameters:

- `agent_did` (string, required): DID of the agent staking (e.g. "did:hive:abc123")
- `amount_usdc` (number, required): Amount of USDC to stake. Must meet tier minimum: bronze $100, silver $500, gold $2000, platinum $10000.
- `lock_period_days` (number, required): Lock period in days. Longer lock = higher APY: 30d 2%, 90d 3%, 180d 4%, 365d 5%.
- `tier` (string, required): Bond tier. Determines max bounty access: bronze $1k, silver $10k, gold $50k, platinum unlimited.

### `hivetrust_verify_bond` (~99 tokens)

Quick bond verification — check if an agent is bonded and at what tier. Returns bonded status, tier, staked amount, slash count, and max bounty access. This is the key integration point — other services call this to check bond status before assigning bounties. Free endpoint, no x402 payment required.

Input parameters:

- `did` (string, required): DID of the agent to verify (e.g. "did:hive:abc123")

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/srotzin-hivetrust/hivetrust#diagnostics

## Score history

- 2026-08-03: 73
- 2026-08-02: 73
- 2026-08-01: 72
- 2026-07-31: 72
- 2026-07-30: 68
- 2026-07-29: 68
- 2026-07-28: 67
- 2026-07-27: 66
- 2026-07-26: 66

## Links

- Remote endpoint: https://hivetrust.onrender.com/mcp
- Repository: https://github.com/srotzin/hivetrust
- Website: https://www.hiveagentiq.com/
- Changelog RSS feed: https://verifymcp.io/servers/srotzin-hivetrust/hivetrust/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/srotzin-hivetrust/hivetrust/changelog.json
- HTML version of this page: https://verifymcp.io/servers/srotzin-hivetrust/hivetrust