agent-audit-logger-mcp 1.0.3

Hash-chained HMAC-signed audit log MCP for A2A (agent-to-agent) calls. Every tool-call, agent-handoff, decision gets a tamper-evident signed record. EU AI Act Art 12 automatic logs, DORA Art 17 ICT incident logs, ISO 42001 clause 9 monitoring — auditor-ready end-of-day attestations. By MEOK AI Labs.

Agent Audit Logger MCP

Buy Starter — £29/mo

Signed attestations + unlimited audits + email support. 👉 Subscribe at meok.ai — instant HMAC signing key + Stripe-managed billing.

Free tier remains MIT-licensed and zero-config. Upgrade only when you need signed compliance artefacts for audit.

Hash-chained, HMAC-signed audit log for A2A agent calls. Tamper-evident by construction. EU AI Act Art 12 / DORA Art 17 / ISO 42001 clause 9 auditor-ready.

By MEOK AI Labs.

Why

When agent A delegates to agent B who invokes tool C, the causal chain disappears the moment anything fails. Auditors need a record that proves:

• The event actually happened (cryptographic signature)
• The record wasn't modified after the fact (hash chain)
• The chain is continuous (no deletions)

Point every agent at this MCP's log tool. Each entry is HMAC-SHA256 signed and hash-chained to the previous entry.

Tools

• log — append a new (from_agent, to_agent, action, outcome) entry, signed + chained
• verify_chain — re-verify the entire chain for a tenant; flags the first break
• search — query by agent, operation, outcome
• daily_stats — per-day log volume
• sign_day_attestation — Pro: signed end-of-day evidence packet with tip hash

Install

pip install agent-audit-logger-mcp

Claude Desktop

{
  "mcpServers": {
    "audit": { "command": "agent-audit-logger-mcp" }
  }
}

Example

# In your orchestrator MCP, immediately after an A2A delegation:
log(
    tenant_id="acme-corp",
    from_agent="orchestrator",
    to_agent="compliance-scorer",
    action="score_dora_article_9",
    payload_hash=sha256(payload),
    outcome="success",
    context_csv="high-risk,financial"
)

# End of day: emit signed attestation for auditor
sign_day_attestation(
    tenant_id="acme-corp",
    date_utc="2026-04-23",
    api_key="meok_pro_..."
)

Tiers

• Free — 1,000 log entries/day, ephemeral, chain verification
• Pro £199/mo — unlimited + signed end-of-day attestations + chain integrity reports — subscribe
• Enterprise £1,499/mo — multi-tenant + SIEM webhook push + retention policy — subscribe

Related MEOK MCPs

• agent-rate-limiter-mcp — fleet-wide shared rate limiter
• agent-policy-enforcement-mcp — per-agent-pair IAM
• a2a-governance-bridge-mcp — map A2A to compliance frameworks
• meok-attestation-verify — verify signed certs anywhere

License

MIT — MEOK AI Labs, 2026.