Agent Delegation Scope Chain Verifier MCP

A local evidence verifier for supplied root grants, delegation chains and action records. It checks that each child scope narrows its parent across identities, tools, resources, permissions, time, spend and depth, then evaluates actions against the effective scope.

What it creates

• result.json
• delegation-matrix.csv
• action-matrix.csv
• violations.jsonl
• DELEGATION_VERIFICATION.md
• evidence-receipt.json

Requirements

• Windows 11
• Python 3.11–3.14
• An MCP-compatible client
• MCP_LICENSE_KEY from the MCP Marketplace purchase
• Internet access for initial and periodic license verification

License verification sends only the license key and public product slug. Buyer evidence paths, contents and generated reports remain local.

Install from a purchased source checkout

python -m venv .venv
.\.venv\Scripts\python.exe -m pip install .

MCP client configuration

{
  "mcpServers": {
    "agent-delegation-verify": {
      "command": "agent-delegation-verify-mcp",
      "env": {"MCP_LICENSE_KEY": "PASTE_THE_KEY_FROM_YOUR_PURCHASE"}
    }
  }
}

Run the client from the folder containing buyer-authorized evidence. All supplied paths must be relative to that folder.

Tool

build_agent_delegation_verification_packet

• root_grant: Root-grant JSON
• delegations: Delegation JSONL
• actions: Action JSONL
• policy: Verifier policy JSON
• output_directory: new output directory

The tool returns structured JSON. ERROR means the request could not be processed.

CLI

The diagnostic command is unlicensed:

agent-delegation-verify --json doctor

Protected commands verify the marketplace license before reading buyer files:

agent-delegation-verify --json analyze --root-grant examples/sample-input/root_grant.json --delegations examples/sample-input/delegations.jsonl --actions examples/sample-input/actions.jsonl --policy examples/sample-input/policy.json --out packet
agent-delegation-verify --json show packet/result.json
agent-delegation-verify --json verify packet/evidence-receipt.json

Product boundary

It does not attest identity, verify signatures, issue grants, enforce policy, invoke agents, make payments or guarantee prevention. All accepted evidence stays local. Apart from license verification, the package performs no network activity and has no telemetry.