Agent Attestation MCP (codename: DELBOY)
Neutral, model-agnostic, rail-agnostic provenance & attestation layer for agentic
finance and agentic commerce. It witnesses what an AI agent did on a human's behalf —
signs (Ed25519), hash-chains, and timestamps each consequential action into one
regulator-readable evidence envelope (delboy/v1.0).
It never holds funds, routes orders, recommends trades, custodies assets, or executes. Witness only — it touches the evidence of a transaction, never the transaction.
Maps to EU AI Act · UK FCA · US SEC/FINRA · EU MiCA · Singapore MAS.
Companion-MCP pattern
The agent connects to both the upstream MCP (e.g. a broker) and this server. Around any
consequential call it calls attest_pending_action → performs the upstream call itself →
attest_completed_action. On guardrail failure, attest_terminal. verify_chain checks
link integrity + every signature.
Install
pip install -e .
delboy-mcp # starts the FastMCP server (stdio)
Env: DELBOY_LEDGER, DELBOY_KEY, DELBOY_KEY_ID.
Full standard, regulator clause-mapping, and the four conflict-fixes: see the project README
and v1.0/regime-mapping.json.
Apache-2.0 · MEOK AI Labs
mcp-name: io.github.CSOAI-ORG/delboy-mcp
Metadata
Release files for delboy-mcp 1.0.2
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| delboy_mcp-1.0.2.tar.gz | 13.7 kB | Without provenance | Details for delboy_mcp-1.0.2.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| delboy_mcp-1.0.2-py3-none-any.whl | Python 3 | none | any | Details for delboy_mcp-1.0.2-py3-none-any.whl |
Total release size: 29.1 kB
Release files / delboy_mcp-1.0.2.tar.gz
| Download URL | delboy_mcp-1.0.2.tar.gz |
|---|---|
| Size | 13.7 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
e80229f8d7fd1fc40909e6ab806897c1c1f9635234339860acb980bcb74037d3
|
|
BLAKE2b-256 checksum How to use checksums |
8d65f10c50d00a2036468c9576df15b392df9d6904c84cd5351d89b2f02de65c
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
uv/0.10.3 {"installer":{"name":"uv","version":"0.10.3","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"macOS","version":null,"id":null,"libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":null}
|
Release files / delboy_mcp-1.0.2-py3-none-any.whl
| Download URL | delboy_mcp-1.0.2-py3-none-any.whl |
|---|---|
| Size | 15.4 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
ed15daba13b960a064e2356322845d32c823b5a2356834f79c7946a9ceecdf8d
|
|
BLAKE2b-256 checksum How to use checksums |
ccb484b87504ede012edc485d31fe4471be6890b6e5f18e81e1111a356ef983c
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
uv/0.10.3 {"installer":{"name":"uv","version":"0.10.3","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"macOS","version":null,"id":null,"libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":null}
|
Security for delboy-mcp 1.0.2
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.