Skip to content
Agentmart
Submit a tool

OpenWorkProof

Verifiable execution for AI agents: Ed25519-signed work contracts and audit trails.

Connector by dengyier · GitHub account verified by the MCP Registry

IndexedApache-2.0Local (stdio)★ 262
Write a review

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/dengyier-openworkproof

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Verifiable execution for AI agents: Ed25519-signed work contracts and audit trails.

Use cases: identity-access, agent-orchestration

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools
23 read · 4 write · 0 delete · 2 not yet classified
Secrets
None asked for
Install scripts
Not scanned yet
Runs as
Python package

Tools by what they do 29

Read from the source code; the running server may list different tools.

Read 23 · Look things up without changing anything.

  • owp_analyze_repo
  • owp_compute_digest
  • owp_compute_key_id
  • owp_control_observation_validate
  • owp_explain_binding_decision
  • owp_get_binding_status
  • owp_get_decision
  • owp_get_schema
  • owp_get_schema_digest
  • owp_get_settlement_readiness
  • owp_integrity_observation_validate
  • owp_list_domains
Show 11 more tools
  • owp_render_surface_report
  • owp_scope_compare
  • owp_scope_validate
  • owp_status
  • owp_validate_action_binding_manifest
  • owp_validate_judgment_commitment
  • owp_validate_profile
  • owp_verify_nested_claim
  • owp_verify_signature
  • owp_verify_surface_bundle
  • owp_verify_work_order

Write 4 · Create, change, send or run things.

  • owp_build_delivery_package
  • owp_run_tests
  • owp_run_verification
  • owp_sign_payload

Not yet classified 2 · We could not tell from the name and description.

  • owp_generate_keypair
  • owp_repo_read

Files it touches

  • Any path the agent passes to its tools

Tools (29)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

  • owp_analyze_repo

    Analyse a repository's structure: file count, languages, dependencies. Args: source: Local path or remote Git URL to the repository. clone_enabled: If ``True`` and *source* is a URL, clone it to a temporary directory first (default ``True``). Returns: Repository analysis including file entries, language stats, line counts, and dependency information.

  • owp_build_delivery_package

    Export a public, diagnostic, or customer-private delivery package.

  • owp_compute_digest

    Compute the canonical SHA-256 digest of an OpenWorkProof payload. The digest is computed over the RFC 8785 JCS canonicalisation of ``{"domain": "openworkproof/<object_type>/v0.1", "payload": <payload>}`` (with ``digest`` and ``signature`` fields stripped from the payload at the top level). Args: object_type: One of the allowed canonical domains. payload: JSON string of the payload object.

  • owp_compute_key_id

    Compute the OpenWorkProof ``key_id`` for a given Ed25519 public key. Args: public_key_b64url: The raw public key bytes encoded as unpadded base64url (43 characters).

  • owp_control_observation_validate

    Assess one v0.5 control observation set against its contracts. This read-only tool never signs, commits, accepts, or settles anything. Signer authority is reported as ``not_checked``, never as authorized.

  • owp_explain_binding_decision

    Verify and explain one BindingDecision (read-only).

  • owp_generate_keypair

    Generate a new Ed25519 key pair for signing OpenWorkProof objects. Returns the private key as a hex string and the public key as base64url, along with the derived ``key_id``.

  • owp_get_binding_status

    Read the current binding decision head from a ledger (read-only).

  • owp_get_decision

    Prepare, but do not sign or commit, a versioned decision draft.

  • owp_get_schema

    Get the authoritative JSON Schema for an OpenWorkProof object type. Args: object_type: One of ``work-order``, ``capability-grant``, ``action-receipt``, ``acceptance-receipt``, ``acceptance-rejection-receipt``. version: Schema version (default ``0.1``).

  • owp_get_schema_digest

    Get the frozen SHA-256 digest of an authoritative JSON Schema. This digest is a protocol-review anchor: changing it requires an explicit version-bump decision. Args: object_type: One of the five schema-bearing object types. version: Schema version (default ``0.1``).

  • owp_get_settlement_readiness

    Derive readiness only; this does not prove payment or settlement.

  • owp_integrity_observation_validate

    Assess one v0.5 population observation set against its contracts. This read-only tool never signs, commits, accepts, or settles anything. Signer authority is reported as ``not_checked``, never as authorized.

  • owp_list_domains

    List all allowed canonical domains for OpenWorkProof objects. Returns: A dict with ``canonical_domains`` (all 9) and ``signed_domains`` (8 — excludes ``sidecar-event`` which cannot be signed).

  • owp_render_surface_report

    Return the verified derived report, never payment or acceptance.

Show 14 more tools
  • owp_repo_read

    Forward a repo-read execution to the ledger coordinator. Args: ledger: Path to the SQLite ledger file. payload: JSON string of the repo-read execution payload.

  • owp_run_tests

    Forward a run-tests execution to the ledger coordinator. Args: ledger: Path to the SQLite ledger file. payload: JSON string of the run-tests execution payload (must include the signed ``AgentRequest`` and typed arguments).

  • owp_run_verification

    Run exactly one explicit v0.2, v0.3, or v0.5 verification operation. ``operation`` must be ``commit_arm``, ``prepare_decision``, or ``commit_decision``. The tool never retries an indeterminate commit.

  • owp_scope_compare

    Compare a signed v0.3 scope with one verifier observation.

  • owp_scope_validate

    Intrinsically validate a v0.3 scope without checking authority. This read-only tool does not accept a ledger, private key, or signature instruction. Full Manager authority is checked only by the non-MCP commit boundary.

  • owp_sign_payload

    Sign a canonical OpenWorkProof payload with an Ed25519 private key. Args: object_type: One of the allowed signed domains (call ``owp_list_domains`` to see the list). payload: JSON string of the unsigned payload object. private_key_hex: The Ed25519 private key as a hex string. Returns: The signed payload dict with ``signature_alg``, ``signer_key_id``, ``digest``, and ``signature`` fields added.

  • owp_status

    Replay an OpenWorkProof ledger and return its authoritative state. Args: ledger: Path to the SQLite ledger file.

  • owp_validate_action_binding_manifest

    Validate one signed ActionBindingManifest (read-only, no authority).

  • owp_validate_judgment_commitment

    Validate one signed JudgmentCommitment (read-only, no authority). Without a ledger or trusted key context the authority is reported as ``not_checked``; this tool never signs and never commits.

  • owp_validate_profile

    Validate a signed Evidence Lifecycle v0.2, v0.3, or v0.5 profile.

  • owp_verify_nested_claim

    Verify a nested claim (AgentRequest or HumanDecision) against a WorkOrder. This checks that: - The WorkOrder identity bindings are valid. - The claim's ``work_order_digest`` matches the WorkOrder. - The claim's actor is bound to a matching key in the WorkOrder. - The claim's Ed25519 signature is valid. Args: claim_json: JSON string of the AgentRequest or HumanDecision. work_order_json: JSON string of the parent WorkOrder. Returns: ``{"valid": true}`` if the nested claim passes all checks.

  • owp_verify_signature

    Verify an Ed25519 signature on a signed OpenWorkProof payload. Args: object_type: The canonical domain of the object. signed_payload: JSON string of the signed payload (must contain ``signature_alg``, ``signer_key_id``, ``digest``, and ``signature``). public_key_b64url: The signer's public key as base64url. Returns: ``{"valid": true}`` if the signature is valid, ``{"valid": false}`` otherwise.

  • owp_verify_surface_bundle

    Verify and replay one surface bundle without writing or signing.

  • owp_verify_work_order

    Verify a WorkOrder's identity bindings and maintainer signature. Args: work_order_json: JSON string of the WorkOrder object. Returns: ``{"valid": true}`` if all six key bindings are well-formed, distinct, and the maintainer's signature is valid.

Signals

Stars
262
Forks
0
Open issues
2
Weekly downloads
45
Last commit
Sep 12, 2026 (1 month ago)
Last release
Oct 25, 2026 (3 days ago)
Last package publish
Aug 30, 2026 (2 months ago)

From GitHub (fetched Oct 24, 2026) and the package registry.

Details

Registry name
io.github.dengyier/OpenWorkProof
Version
1.4.2
Auth
No auth
Packages
pypi openworkproof
License
Apache-2.0
Repository
github.com/dengyier/OpenWorkProof
Website
github.com/dengyier/OpenWorkProof
First seen
Oct 24, 2026
Last checked
Oct 26, 2026
Source
Official MCP Registrygithub-graphql
Cite this page

OpenWorkProof MCP server. Agent Mart. https://agentmart.dev/connectors/dengyier-openworkproof (last updated 2026-10-26)