home / mcp / agntor mcp server
Provides an MCP server for agent discovery, certification, trust scoring, and governance with hosted and local development options.
Configuration
View docs{
"mcpServers": {
"agntor-mcp": {
"url": "https://mcp.agntor.com/mcp",
"headers": {
"PORT": "3100",
"NODE_ENV": "production",
"AGNTOR_API_KEY": "YOUR_API_KEY",
"AGNTOR_SECRET_KEY": "your-secret"
}
}
}
}You can run and consume the Agntor MCP Server to enable secure agent discovery, certification, and trusted interactions within your applications. This server provides tools to verify agent status, compute trust scores, issue signed tickets, manage registrations, and enforce safety checks, all accessible via HTTP or local stdio configurations for development and production workflows.
You will connect MCP clients to the Agntor MCP Server either over HTTP for hosted endpoints or via local stdio for development and testing. From there you can query agent certification, check trust levels, issue audit tickets, search agents, and perform emergency actions like kill switches. Use the hosted MCP URL for production deployments and run the local server in development to test integrations before going live.
Prerequisites you need before installation: a modern Node.js runtime (recommended LTS) and npm. Ensure you have network access to install global packages.
# Install the MCP server globally
npm install -g @agntor/mcpYou can access a hosted MCP endpoint or run a local server for development. The hosted endpoint is available at the MCP URL below and can be secured with an API key if enabled.
Hosted MCP URL (production): https://mcp.agntor.com/mcp. If enabled, include the API key header X-AGNTOR-API-KEY: <your_key> when calling endpoints.
Use the following environment variables to configure the server in production and development environments.
- PORT: HTTP server port (default 3100) - AGNTOR_SECRET_KEY: JWT signing key (required for secure operations) - AGNTOR_API_KEY: Optional API key for hosted MCP access - NODE_ENV: Environment indicator (development, production)
The server exposes a suite of tools to manage and assess agents. You can verify certification status, compute trust scores, generate signed audit tickets, search for agents, activate kill switches, and implement safety guards for inputs and tool usage.
If you encounter connectivity issues, verify that the MCP HTTP URL is reachable and that any required API keys are correctly configured. For local development, ensure you are running the server from the correct package context and that environment variables are provided for the production-like setup if needed.
Rotate the AGNTOR_SECRET_KEY regularly and enable TLS in production. Protect the MCP endpoints with proper authentication and implement rate limiting to prevent abuse. Monitor tool usage and latency to detect anomalies.
1. Set up a custom agent registry backend (database-backed) for persistence. 2. Integrate with downstream systems (x402 payment gateways, external identity providers). 3. Add webhooks for kill switch notifications and auditing. 4. Develop a behavioral scoring model to enhance trust assessments. 5. Build an onboarding dashboard for agents to manage their certifications.
Run the server in development mode to iterate quickly. Use your environment file or shell exports to provide the necessary keys and settings, then start the server and connect MCP clients to test tool calls.
Return a boolean indicating whether a given agent is certified, along with audit level, expiry, and kill switch status.
Compute a comprehensive trust score for an agent, including multiple contributing factors and a recommended action.
Generate a signed JWT ticket for a specific agent with a defined validity period for x402 transactions.
Search for agents by criteria such as trust score, audit level, and capabilities, returning matched results.
Emergency action to disable an agent, with optional ticket revocation and timestamp.
Validate inputs to detect prompt injections or unsafe instructions and classify potential violations.
Redact sensitive information from outputs according to defined redaction policies.
Authorize or block the execution of tools based on policy and risk assessments.
Provide an ERC-8004 compatible registration file for agent discovery