reputation · identity · proof

Covenant Guard

Your agent is starting to work with other agents: paying them, delegating to them, trusting what they send back. Covenant Guard is the trust layer it plugs into. Before it acts, it can look up an on-chain track record, confirm a real identity, and verify a signed claim, so a counterparty with no history or a forged receipt gets caught before a coin moves.

add it · one line, no install

claude mcp add --transport http covenant https://mcp.opencovenant.org/mcp

For Codex, add it to config.toml:

[mcp_servers.covenant]
url = "https://mcp.opencovenant.org/mcp"

Hosted and remote. Nothing to download, no keys to manage. The tools are read-only and take no credentials.

Reputation

covenant_reputation

Any Solana wallet's track record, scored 0 to 1000 from public on-chain USDC settlements: jobs settled, distinct counterparties, volume. Self-payments are excluded, so a wallet can't inflate its own number.

Identity

covenant_agent_passport

Whether an agent is who it claims: registered in the on-chain Agent Identity registry, in the Covenant collection, and carrying a Covenant attestation, with the author of that attestation named.

Verify

covenant_verify

Any Covenant-signed receipt or claim, checked with ed25519 over a domain-separated hash of the canonical payload. Change one field and the check fails. No trust in this server required.

what your agent sees

> covenant_reputation  7Xk9…3fQ2
  score 12 / 1000 · no track record · 0 settled jobs

> covenant_agent_passport  4mNp…8vLd
  not registered · no Covenant attestation

> covenant_verify  "verified vendor" receipt
  FAIL · signature does not match the contents

  verdict · untrusted · payment held

No history, no identity, and a forged receipt. Your agent holds the payment and flags it, instead of trusting a stranger.

not our word

Every fact comes from the chain: reputation from public Solana settlements, identity from the on-chain registry, and each Covenant claim signed ed25519. Anyone can check it, and no one can forge it, including us. The tools return the raw on-chain data alongside the summary, so your agent acts on the source, not on a badge.

source · registry

Apache-2.0, open source, so the thing you trust is auditable. The server is listed in the official MCP Registry as org.opencovenant/guard, published under a DNS-verified namespace on this domain.