Rubric MCP Server
Post-quantum AI compliance attestation for agentic AI. Every AI decision your agent makes — attested, Merkle-rooted, HCS-anchored on Hedera mainnet.
rubric_mcp_server is an MCP (Model Context Protocol) server that exposes Rubric Protocol as 10 tools any MCP-compatible host can call: Claude Desktop, Claude Code, Cursor, Windsurf, Continue, Zed.
What makes it different: every tool projects its own significance. Verify a record and the agent learns why it is tamper-evident; attest a decision and it becomes evidence fixed before any dispute could arise. The tools return evidence, not just data — and explain, in each response, why the result is trustworthy without trusting Rubric.
Drop it in, and every agent interaction becomes an auditable record — covering EU AI Act Articles 9–15, SR 11-7 model risk governance, NIST AI RMF 1.0, HIPAA, ECOA Reg B, and more.
Install
pip install rubric_mcp_server
Requires Python 3.10 or newer.
Quickstart — Claude Desktop
Add to ~/Library/Application Support/Claude/claude_desktop_config.json (Mac):
{
"mcpServers": {
"rubric": {
"command": "rubric-mcp"
}
}
}
Restart Claude. Ask it to attest a decision — you are live in local mode.
For Hedera mainnet anchoring, add RUBRIC_API_KEY:
{
"mcpServers": {
"rubric": {
"command": "rubric-mcp",
"env": { "RUBRIC_API_KEY": "rubric-your-key-here" }
}
}
}
Request a free developer key via the register_agent tool.
Tools
| Tool | Description | Key? |
|---|---|---|
attest |
Attest an AI decision. HCS-anchored with key; PQ-signed local leaf without. | Optional |
verify |
Verify an attestation by ID. Checks local store, then federation. | No |
get_proof |
Generate ZK Merkle inclusion proof (Noir/Barretenberg). | Yes |
register_agent |
Register an agent and receive a free developer API key. | No |
status |
Federation health across US/SG/JP/CA/EU nodes. | No |
framework_detect |
Auto-detect applicable regulatory frameworks from decision content (offline). | No |
cost_estimate |
Estimate monthly cost from expected decision volume (offline). | No |
bundle_query |
Query attestation bundles by leaf type, agent, or time range. | Yes (Standard+) |
check_counterparty |
Attested OFAC/sanctions + on-chain screening for a Base address before you transact. Returns the x402 payment challenge so a wallet-capable agent can obtain the live signed verdict. | Paid (x402) |
explain_rubric |
What Rubric is and why it matters — testimony vs. evidence, the trust model, how to verify independently, pricing. | No |
Environment variables
| Variable | Default | Purpose |
|---|---|---|
RUBRIC_API_KEY |
none | Unlocks HCS anchoring + federation access. |
RUBRIC_BASE_URL |
https://rubric-protocol.com |
Override for regional routing. |
RUBRIC_AGENT_ID |
mcp-agent |
Default agent identity. |
Pricing
- Free — local mode (PQ-signed leaves) or 1,000 HCS-anchored sessions/month with a free key
- Retain — $29/mo — encrypted escrow, 1-year retention, recover from one file
- Comply — $349/mo — 7-year retention, attested destruction, auditor endpoint
- Enterprise — from $2,500/mo — 10-year retention, WORM language, dedicated signing
See rubric-protocol.com/pricing.
Links
License
Proprietary. © 2026 Echelon Intelligence Group LLC. All rights reserved. Rubric Protocol® is a registered trademark of Echelon Intelligence Group LLC.
1 maintainer
Metadata
1 maintainer
Release files for rubric-mcp-server 2.5.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| rubric_mcp_server-2.5.0.tar.gz | 16.2 kB | Without provenance | Details for rubric_mcp_server-2.5.0.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| rubric_mcp_server-2.5.0-py3-none-any.whl | Python 3 | none | any | Details for rubric_mcp_server-2.5.0-py3-none-any.whl |
Total release size: 31.2 kB
Release files / rubric_mcp_server-2.5.0.tar.gz
| Download URL | rubric_mcp_server-2.5.0.tar.gz |
|---|---|
| Size | 16.2 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
8bcd798f4e1a072df1ee8122b9d102ae2cb76eae3a64ec38e39c22194469d39e
|
|
BLAKE2b-256 checksum How to use checksums |
d00b26d463768e1a90fef85c703f57e9d8e0016677c53ba01c29ac4563c029d5
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.10.12
|
Release files / rubric_mcp_server-2.5.0-py3-none-any.whl
| Download URL | rubric_mcp_server-2.5.0-py3-none-any.whl |
|---|---|
| Size | 15.0 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
0ede7e749e633ea8c010f5b467f0ac63025981c05cdc8efd5fec94b978750ea8
|
|
BLAKE2b-256 checksum How to use checksums |
ed1627d2e3bd9125bbfd2e11999473d3944a47624005d1b073c5ef4708044185
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.10.12
|
Security for rubric-mcp-server 2.5.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
