Agent Audit MCP runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 28 Jul 2026.
Immutable audit trail for agent-to-agent interactions
What the code does
We read the source, 21 h ago · rules 3dff92dd89df
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
return execSync(cmd, {
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Alternatives to Agent Audit MCP
same job, measured the same wayIntent-bound action authorization for AI agents: policy, human approval, and a signed audit trail.
Identity, authorization, audit trails, and revocable permissions for AI agents accessing MCP tools.
Verifiable execution for AI agents: Ed25519-signed work contracts and audit trails.
MCP server for interactive visualizations: tables, images, trees, lists, master-detail
Tamper-evident, Sigstore-signed audit trail for Claude Code agents.
Guardrailed FHIR access for AI agents: PHI redaction, audit trail, step-up auth, tenant isolation
Pre-execution policy gate for consequential agent actions with durable trust receipts.
OAuth 2.0 for AI agents — scoped delegation tokens, audit trails, and revocation.
Agent Audit MCP — questions
Answers built from our own checks of this server.