AMR (Agent Mandate Registry) runs on your own machine — the client starts it, so there is no endpoint to ping. 770 installs a week from pypi. Last commit 7 Nov 2026.
Records who authorized an AI agent to do what, until when; signed tokens, hash-chained journal.
Today is the operative word: we check AMR (Agent Mandate Registry) every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add mandatia -- uvx mandatia
{
"mcpServers": {
"mandatia": {
"command": "uvx",
"args": [
"mandatia"
]
}
}
}
[mcp_servers.mandatia]
command = "uvx"
args = ["mandatia"]
{
"mcpServers": {
"mandatia": {
"command": "uvx",
"args": [
"mandatia"
]
}
}
}
{
"servers": {
"mandatia": {
"type": "stdio",
"command": "uvx",
"args": [
"mandatia"
]
}
}
}
Optional settings from the registry entry, left out of the block above:
AMR_DB_PATH (Absolute path of the SQLite registry file (default: amr_mandates.db in the client's current directory)), AMR_SIGNING_KEY_PATH (Absolute path of the registry's Ed25519 private key, created on first use; keep it out of version control), AMR_PUBLIC_KEY_PATH (Absolute path of the registry's public key file).
Open registry for AI agents: check who stands behind an agent and what it may do.
Hash-chained audit ledger for AI agent work — record, verify and replay what the agent did.
Credential broker that signs your AI agent up to SaaS dev tools, within a signed spending mandate.
Hash-chained local document store with signed receipts and an orient protocol for stale agent memory
Verify an AI agent's payment authority: signed mandates, allowlists, and tamper-proof receipts.
Signed, hash-chained provenance receipts for AI agent actions.
Read your recorded AI agent runs, and what changed when you swapped a model or prompt.
signed revocation lists for agent cards, keys, and mandates — one feed, every registry, revocation
Answers built from our own checks of this server.