{"name":"io.github.emiliaprotocol/mcp-server","slug":"emiliaprotocol-mcp-server","title":"Emilia Protocol","description":"Exact-action approval for consequential agent actions: request, track, and verify signed receipts.","url":"https://mcp.market/server/emiliaprotocol-mcp-server","rating":null,"grade":"B","score":74,"certified":false,"status":"active","category":"ai","tags":["ai"],"presence":{"score":54,"stars":617,"forks":16,"downloads_week":75,"last_push_at":"2026-09-21T09:22:01.000Z","license":"Apache-2.0"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/emiliaprotocol/emilia-protocol","website":"https://www.emiliaprotocol.ai/mcp","version":"2.1.1","remotes":[],"packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"@emilia-protocol/mcp-server","version":"2.1.1","runtimeHint":"npx","transport":{"type":"stdio"},"environmentVariables":[{"description":"API key for live action-guard, signoff, and write operations. Public receipt lookup may work without it.","isSecret":true,"name":"EP_API_KEY"},{"description":"Set to true to advertise handshake, commit, and delegation tools in addition to the default three-tool action front door.","name":"EP_INCLUDE_PROTOCOL_TOOLS"},{"description":"Set to true to advertise the complete 36-tool legacy registry and reputation catalog.","name":"EP_INCLUDE_REGISTRY_TOOLS"}]}],"tools":[{"name":"ep_add_presentation","description":"Add an identity presentation (proof) to an active handshake. WRITE: appends the party's identity claims to the handshake for evaluation against its policy; supports full, selective, or zero-knowledge disclosure. Requires auth. Returns the updated presentation count and handshake state. Call after ep_initiate_handshake and before ep_verify_handshake.","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_appeal_dispute","description":"Appeal a dispute resolution. Only dispute participants can appeal. Requires the dispute to be in upheld, reversed, or dismissed state. \"Trust must never be more powerful than appeal.\"","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_batch_submit","description":"Submit multiple receipts atomically. All receipts share the same submitter (your API key). Useful for bulk reconciliation or recording a session of agent-entity interactions. Returns per-receipt success/failure. Max 50 receipts per batch.","write_action":true,"price_micros":0,"input_schema":null},{"name":"ep_bind_receipt_to_commit","description":"Bind a post-action receipt to a commit, completing the commit-execute-receipt cycle. Links the behavioral outcome back to the signed authorization token.","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_check_signoff","description":"Poll a pending authorization after ep_guard_action returns BLOCKED. Pass the receipt_id. Returns PENDING, APPROVED_PENDING_CONSUME, CONSUMED, or DENIED. Approval alone is not permission to execute: the executor must match action_hash and atomically consume the receipt at its own choke point.","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_configure_auto_receipt","description":"Enable or disable automatic receipt generation for this session. When enabled, every EP tool call generates a behavioral receipt automatically. Privacy-preserving: sensitive fields (passwords, tokens, API keys) are redacted before storage. Receipts are marked unilateral \\u2014 they cannot be bilateral without counterparty confirmation. Auto-receipt is opt-in and disabled by default.","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_create_delegation","description":"Create a delegation record. WRITE: persists to the EP ledger that a human or principal authorizes an agent to act on their behalf, with scope, expiry, and optional constraints. Requires auth. Returns a delegation_id that later actions reference (via ep_verify_delegation) to prove authorization. Use when a principal grants an agent standing authority for a bounded set of actions.","write_action":true,"price_micros":0,"input_schema":null},{"name":"ep_delegation_judgment","description":"Get a principal's delegation authority \\u2014 how well they choose and authorize agents. High judgment principals consistently authorize well-behaved agents. Low judgment principals frequently authorize agents that fail, dispute, or abandon tasks. This signal is deliberately weak (0.15 weight per outcome): a single bad delegation should not define a principal, but a pattern of them should be legib","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_dispute_file","description":"File a dispute against a receipt. Any affected party can challenge. Reasons: fraudulent_receipt, inaccurate_signals, identity_dispute, context_mismatch, duplicate_transaction, coerced_receipt, other. The receipt submitter has 7 days to respond.","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_dispute_status","description":"Look up the current state of a dispute by id. Read-only, public (no auth) \\u2014 transparency is a protocol value. Returns the dispute status (open, under_review, upheld, rejected), the entity it concerns, and any resolution.","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_domain_score","description":"Get an entity's trust score broken down by behavioral domain. Trust is not a scalar \\u2014 an agent excellent at financial transactions may be unreliable at creative tasks. Domains: financial, code_execution, communication, delegation, infrastructure, content_creation, data_access. Returns per-domain confidence, evidence count, and behavioral rates.","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_generate_zk_proof","description":"Generate a privacy-preserving commitment proof. Proves a trust claim (e.g., score > 0.85 in the financial domain, or > 50 verified receipts) WITHOUT revealing receipt contents, counterparty identities, or transaction details. Uses HMAC-SHA256 commitments + Merkle trees. Returns a proof_id you can share publicly \\u2014 verifiers call ep_verify_zk_proof with only the proof_id and learn nothing about","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_get_commit_status","description":"Get the current state of a pre-action commit by id. Read-only. Returns one of active, revoked, expired, or fulfilled, plus the bound action hash and expiry \\u2014 poll this to learn whether a commit may still be consumed.","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_get_handshake","description":"Get the full state of a handshake including parties, presentations, binding, and result. Use this to check handshake progress or review completed exchanges.","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_guard_action","description":"Request authorization before an irreversible action: payments, wire transfers, fund releases, deletions, record or account changes, or sending messages with real-world effect. Submits the exact action for policy evaluation and human authorization. This MCP tool does not itself sit at the executor choke point: even after approval, the executor MUST match the returned action_hash and atomically cons","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_initiate_handshake","description":"Initiate an EP Handshake \\u2014 a structured identity exchange between parties. The handshake coordinates mutual presentation of identity proofs before a trust decision. Requires at least 2 parties and a governing trust policy.","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_install_preflight","description":"BEFORE installing or enabling third-party software an agent depends on \\u2014 an npm package, GitHub app, browser extension, or MCP server \\u2014 check it here. Evaluates the software against a fit-for-purpose trust policy and returns allow / review / deny with reasons covering publisher, requested permissions, provenance, and trust history.","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_issue_commit","description":"Issue a signed EP Commit before a high-stakes action. Returns a commit_id, decision (allow/deny/review), expiry, scope, and appeal path. The commit binds the agent to a specific action type, entity, and policy before execution.","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_leaderboard","description":"List the top entities ranked by trust confidence. Read-only. Returns up to the requested limit (default 10, max 50) with scores, optionally filtered by entity_type. For discovery and benchmarking \\u2014 for a go/no-go decision on a specific action, use ep_guard_action instead.","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_lineage","description":"View entity lineage \\u2014 predecessors, successors, continuity decisions, and whitewashing flags. Use to check if an entity has suspicious continuity gaps.","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_list_policies","description":"List all available trust policies with their requirements and families. Use to discover which policy to evaluate against.","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_principal_lookup","description":"Look up a principal \\u2014 the enduring actor behind entities. Returns bindings, controlled entities, and continuity history.","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_register_entity","description":"Create a new entity in the EP registry. SIDE EFFECT: persists the entity and returns its API key once \\u2014 store it, it cannot be retrieved later. Public, no auth required. Use to onboard an agent or service before it submits receipts or is evaluated.","write_action":true,"price_micros":0,"input_schema":null},{"name":"ep_report_trust_issue","description":"Report a trust issue as a human. No authentication required. For when someone is wrongly downgraded, harmed by a trusted entity, or sees fraud. EP must never make trust more powerful than appeal.","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_revoke_commit","description":"Revoke an active pre-action commit before it is fulfilled or expires. SIDE EFFECT: terminally cancels the commit \\u2014 it can never be consumed after this, and the change is irreversible. Requires auth. Returns the revoked status; use when a pending action should be called off.","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_revoke_handshake","description":"Revoke an active handshake. Only parties to the handshake may revoke it. Revocation is terminal \\u2014 the handshake cannot be reopened.","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_search_entities","description":"Search the EP registry for entities by name, capability, or category. Read-only, no side effects. Returns a list of matching entities with their ids, types, and current trust scores \\u2014 use it to discover an entity before evaluating or referencing it.","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_submit_receipt","description":"Submit a transaction receipt to the EP ledger. Requires an API key. Receipts are append-only, cryptographically hashed, and chain-linked. transaction_ref is REQUIRED. agent_behavior is the strongest signal.","write_action":true,"price_micros":0,"input_schema":null},{"name":"ep_trust_evaluate","description":"Evaluate an entity against a trust policy. Returns a Trust Decision (allow/review/deny) with specific failure reasons. Built-in policies: \"strict\" (high-value), \"standard\" (normal), \"permissive\" (low-risk), \"discovery\" (allow unevaluated). Accepts optional context for context-aware evaluation. Use this to make routing and payment decisions.","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_trust_gate","description":"Trust gate: check if an entity meets the required trust threshold BEFORE executing a high-stakes action. This is the canonical pre-action check. Always call this before: payments, sending messages on behalf of users, installing software, or any irreversible action. Returns allow/review/deny with reason.","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_trust_profile","description":"Get an entity's full trust profile. This is the CANONICAL way to check trust in EP. Returns behavioral rates (completion, retry, abandon, dispute), signal breakdowns, provenance composition, consistency, anomaly alerts, current confidence, historical establishment, and dispute summary. Use this before transacting with any counterparty or installing any software.","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_verify_commit","description":"Verify a pre-action commit \\u2014 read-only, no side effects. Checks its signature, status, and validity and returns valid/invalid plus the current status, decision, and expiry. Use before relying on or consuming a commit to confirm it is genuine and still active.","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_verify_delegation","description":"Verify that an agent currently holds a valid delegation from a principal for a specific action. Use this before accepting a task from an agent claiming to act on behalf of a human. Returns: valid/expired/not_found with scope details.","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_verify_handshake","description":"Evaluate all presentations in a handshake against its governing policy \\u2014 read-only, no mutation. Returns accepted (all requirements met), rejected (policy violations), or partial (awaiting presentations), each with reason_codes explaining the outcome. Call after the parties have added their presentations to decide whether the handshake clears.","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_verify_receipt","description":"Ask the configured EMILIA service to verify a stored trust receipt and report its hash and anchor status. Read-only, but not an offline verifier: the result is the service response for the supplied receipt_id.","write_action":false,"price_micros":0,"input_schema":null},{"name":"ep_verify_zk_proof","description":"Verify a privacy-preserving commitment proof by proof_id. Returns whether the claim is currently valid \\u2014 without revealing anything about the entity's transaction history, counterparties, or receipt contents. The proof holder shares only the proof_id. You verify without learning who they transacted with. Use this to accept trust claims from entities in privacy-sensitive industries (healthcare","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":74,"grade":"B","scanned_at":"2026-09-21T22:08:40.899Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-21T22:08:40.867Z","components":{"code":{"score":20,"max":25,"notes":["3 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":6,"max":15,"notes":["static API keys via environment variables"]},"maintenance":{"score":15,"max":15,"notes":["last push 1 days ago"]},"identity":{"score":7,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"bundle.js: …cess(sourceCode,sch);const makeValidate=new Function(`${names_1.default.self}`,`${names_1.def…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"@emilia-protocol/mcp-server","version":"2.1.1","found":true,"license":"Apache-2.0","hasInstallScripts":false,"dependencyCount":1,"publishedAt":"2026-08-21T22:31:59.354Z","repositoryUrl":"git+https://github.com/emiliaprotocol/emilia-protocol.git","weeklyDownloads":75}],"repo":{"found":true,"owner":"emiliaprotocol","repo":"emilia-protocol","archived":false,"pushedAt":"2026-09-21T09:22:01Z","stars":617,"forks":16,"openIssues":21,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/267847988?v=4","ownerCreatedAt":"2026-03-13T05:50:48Z","license":"Apache-2.0"},"icon":{"url":"https://avatars.githubusercontent.com/u/267847988?v=4&s=128","source":"github"},"presence":{"stars":617,"forks":16,"downloadsWeek":75,"license":"Apache-2.0","lastPushAt":"2026-09-21T09:22:01.000Z","score":54}}}},"grade_history":[],"reviews":[]}