NEW Claude Code plugin · MCP server · zero dependencies

A flight recorder for Claude Code.

Two commands, and every tool call your agent makes (every file edit, shell command, web fetch and MCP call) is signed with your own Ed25519 key into a hash-chained log. Edit or delete one entry and verification fails, for you or anyone you share your public key with.

✓ Signs every tool call✓ Stores hashes, not your code✓ Key never leaves your machine✓ Python 3, nothing to pip install

Claude Code

Install the plugin

Add the marketplace and install (inside Claude Code):
/plugin marketplace add https://agentproofchain.com/claude/agentproof.git /plugin install agentproof@agentproof
Restart Claude Code. From now on every tool call is signed into ~/.agentproof/agent.jsonl.
Check it any time: /agentproof:verify verifies the whole chain and prints the public key and command someone else can use to check it.

Any MCP client

Free public verifier

A hosted, read-only MCP server. Any assistant can verify an AgentProof log, or watch a live multi-agent system that's signed in real time.

claude mcp add --transport http agentproof-verify https://agentproofchain.com/mcp

Cursor, Windsurf, VS Code and other clients (JSON config):

{ "mcpServers": { "agentproof-verify": { "url": "https://agentproofchain.com/mcp" } } }

Tools: verify_log · lanturn_live · get_started. Listed in the official MCP Registry as com.agentproofchain/agentproof.

Local signer for any MCP agent

One file. Gives any MCP-capable agent tools to sign its own decisions and prove them later.

curl -fsSLO https://agentproofchain.com/dl/agentproof_local.py claude mcp add agentproof -- python3 "$PWD/agentproof_local.py" mcp

record_event	Sign a decision, approval or result into the agent's log
verify_log	Verify this log, or anyone's with their public key
recent_entries	Show the latest signed entries
share_proof	Public key plus the exact command for a third party to verify

What gets recorded

For every tool call: the tool name, a SHA-256 of the input, a SHA-256 of the output, the session id, tool-use id and duration. Raw inputs and outputs are not stored, so the log is safe to share. Set AGENTPROOF_RECORD=full to keep the input text too.

Your signing key is created on first use at ~/.agentproof/key.json (mode 600). Share only the public key: python3 agentproof_local.py pubkey.

Logs are byte-compatible with the agentproof Python library and the in-browser verifier. It proves what was signed and that nothing changed afterwards. It does not prove a tool told the truth.

See it running on 45 AI agents right now

A whole town of agents, every action signed within a minute. Your browser verifies it. Try to tamper with it.

Open the live chain Pilot for your team