# Kevros — Agentic Identity Trust MCP server

Agentic identity trust: precision decisioning, cryptographic release tokens, hash-chained proof

## Links
- Registry page: https://www.getdrio.com/mcp/io-github-ndl-systems-kevros
- Repository: https://github.com/ndl-systems/kevros-sdk

## Install
- Endpoint: https://governance.taskhawktech.com/mcp/
- Auth: Not captured

## Setup notes
- Remote endpoint: https://governance.taskhawktech.com/mcp/

## Tools
- verify (Verify Action) - Verify an action against policy bounds before executing it. Returns ALLOW (proceed), CONSTRAIN (proceed with modified values; emitted on the wire as the legacy value CLAMP - both refer to the same verdict, CONSTRAIN is the public name), or DENY (stop). Every verification is recorded in a hash-chained provenance ledger. Cost: $0.01 per call. Endpoint: https://governance.taskhawktech.com/mcp/
- attest (Attest Action) - Create a hash-chained provenance record for an action you've taken. Each attestation extends the append-only evidence chain. The hash can be independently verified by any third party. Cost: $0.02 per call. Endpoint: https://governance.taskhawktech.com/mcp/
- bind (Bind Intent to Command) - Declare an intent and cryptographically bind it to a command. Proves that the command was issued in service of the declared intent. Use verify-outcome after execution to close the loop. Cost: $0.02 per call. Endpoint: https://governance.taskhawktech.com/mcp/
- verify-outcome (Verify Outcome) - Verify that an executed action achieved its declared intent. Closes the loop: intent -> command -> action -> outcome -> verification. Free (included with bind). Endpoint: https://governance.taskhawktech.com/mcp/
- bundle (Generate Compliance Bundle) - Generate a certifier-grade compliance evidence bundle. Contains hash-chained provenance, intent bindings, PQC attestations, and verification instructions. Independently verifiable without Kevros access. Cost: $0.05 per call. Endpoint: https://governance.taskhawktech.com/mcp/
- health (Health Check) - Check the governance gateway health status. Free. Endpoint: https://governance.taskhawktech.com/mcp/
- status (Trust Status) - Check your current usage and quota: calls used, calls remaining, tier, rate limits, and billing status. Free. Endpoint: https://governance.taskhawktech.com/mcp/
- check-peer (Check Peer Trust) - Check another agent's trust score and governance history. Returns trust score (0-100), chain length, attestation count, and tier. Free, no API key needed. Endpoint: https://governance.taskhawktech.com/mcp/
- verify-token (Verify Release Token) - Verify a release token from another agent. Confirms the token is authentic and was issued by the Kevros gateway. Free, no API key needed. Endpoint: https://governance.taskhawktech.com/mcp/

## Resources
- kevros://agent-card - A2A agent card for the Kevros Governance API. MIME type: text/plain
- kevros://trust-status - Current governance chain status. MIME type: text/plain

## Prompts
- verify-before-act - Pre-flight governance check. Generates a verify request for an action before executing it. Arguments: action_type, action_description, agent_id
- governance-audit - Generate a compliance audit bundle for an agent's actions over a time range. Arguments: agent_id, time_range_start, time_range_end

## Metadata
- Owner: io.github.ndl-systems
- Version: 0.3.6
- Runtime: Streamable Http
- Transports: HTTP
- License: Not captured
- Language: Not captured
- Stars: Not captured
- Updated: Feb 25, 2026
- Source: https://registry.modelcontextprotocol.io