{ "markdown": "# Living Stack MCP\n\n

\n \"Living\n

\n\n

Make agent work prove itself.

\n\n

\n \"CI\"\n \"MCP\n \"Smithery\n

\n\nLiving Stack MCP gives MCP-capable AI agents a bounded control-and-proof plane:\nscoped continuity, action authorization, budget reservations, typed outcome\nevidence, claim gates, durable checkpoints, and cryptographically signed trace\nexports. It does not replace the model or execute the customer's actions.\n\n**Try the complete Community edition free:**\n\n```bash\nnpx -y github:equinoxaifinance-rgb/living-stack-mcp#v0.3.4-beta.1 --self-test\n```\n\nThat sixty-second local proof sends nothing. If one private workspace needs to\ncoordinate up to five installations, [Team Local is $19 once](https://living-stack-agent-checkout-live.neoaethel.workers.dev/go/team-local).\n\nThe repository is also a portable [Agent Plugins 1.0](https://agent-plugins.org/)\nbundle: compatible clients can install the MCP server and its operating skill\ntogether from the same pinned release.\n\n## What ships in 0.3 public beta\n\n- 15 bounded MCP tools and three guided lifecycle prompts over local stdio.\n- Per-session state with append-only SHA-256-linked evidence ledgers.\n- Server-owned risk policy; `external` and `destructive` actions are denied by default.\n- Cost reservation and reconciliation against a session ceiling.\n- Credential-shaped value redaction before persistence or protocol output.\n- Scope-, state-, expiry-, and lineage-bound recovery checkpoints.\n- Ed25519-signed trace exports tied to one local installation.\n- An explicit-consent, minimal signed adoption receipt; no session or task payload is accepted.\n- Optional offline entitlement grants; billing secrets never enter the MCP.\n\n## Install\n\nRequires Node.js 22 or later.\n\n### MCP bundle\n\nDownload the SHA-256-release-bound\n[Living Stack MCP bundle](https://github.com/equinoxaifinance-rgb/living-stack-mcp/releases/download/v0.3.4-beta.1/living-stack-mcp-0.3.4-beta.1.mcpb)\nand import it into an MCPB-compatible client. Verify downloaded bytes against\nthe `SHA256SUMS.txt` asset attached to that exact GitHub release.\n\nThe same bundle and hash are active in the\n[official MCP Registry](https://registry.modelcontextprotocol.io/v0.1/servers/io.github.equinoxaifinance-rgb%2Fliving-stack/versions/latest).\nThe indexed tool surface is also live on\n[Glama](https://glama.ai/mcp/servers/equinoxaifinance-rgb/living-stack-mcp) and\n[Smithery](https://smithery.ai/servers/neoaethel/living-stack-mcp).\n\nThe live remote commerce MCP is separately available through the\n[official MCP Registry](https://registry.modelcontextprotocol.io/v0.1/servers/io.github.equinoxaifinance-rgb%2Fliving-stack-commerce/versions/latest)\nand its [Smithery gateway](https://smithery.ai/servers/neoaethel/living-stack-commerce).\n\n[Install in VS Code](vscode:mcp/install?%7B%22name%22%3A%22living-stack%22%2C%22command%22%3A%22npx%22%2C%22args%22%3A%5B%22-y%22%2C%22github%3Aequinoxaifinance-rgb%2Fliving-stack-mcp%23v0.3.4-beta.1%22%5D%7D),\n[add it to Cursor](https://cursor.directory/plugins/living-stack), or follow\nthe exact-version [Codex, Claude Code, VS Code, Cursor, and desktop client\nguide](CLIENTS.md).\n\n### Command line\n\n```bash\nnpx -y github:equinoxaifinance-rgb/living-stack-mcp#v0.3.4-beta.1\n```\n\nProve the package locally before configuring a host:\n\n```bash\nnpx -y github:equinoxaifinance-rgb/living-stack-mcp#v0.3.4-beta.1 --self-test\n```\n\nThat command exercises a new bounded session, authorization, typed outcome,\nclaim gate, checkpoint round trip, signed trace, and clean session close. It\ndoes not contact Living Stack. To send one minimal signed first-run receipt,\nthe user must deliberately add `--report-first-run --host=`; the exact\nfields are listed in the Privacy section below.\n\nOr install globally:\n\n```bash\nnpm install -g github:equinoxaifinance-rgb/living-stack-mcp#v0.3.4-beta.1\nliving-stack-mcp\n```\n\nMinimal MCP configuration:\n\n```json\n{\n \"mcpServers\": {\n \"living-stack\": {\n \"command\": \"npx\",\n \"args\": [\"-y\", \"github:equinoxaifinance-rgb/living-stack-mcp#v0.3.4-beta.1\"]\n }\n }\n}\n```\n\nState defaults to `~/.living-stack-mcp/state`. Set `LIVING_STACK_STATE_DIR`\nto a dedicated directory. Set `LIVING_STACK_ALLOWED_ROOTS` to explicit roots\nif release-manifest verification is needed.\n\n## First agent run\n\nAsk the connected agent to use the native `livingstack.prove_task` prompt, or\ncopy the concise workflow in [QUICKSTART.md](QUICKSTART.md). The guided path\nfreezes scope and budget before action, authorizes an exact target, records\ntyped evidence references afterward, retains explicit outcome IDs, and blocks\nunsupported completion language unless the identical subject and selected\nfresh outcomes support it—without taking over the host's tools.\n\n## Lifecycle\n\n1. `livingstack.session_start` freezes scope, goal, retention, and budget.\n2. `livingstack.context_put` stores provenance-labeled context.\n3. `livingstack.authorize_action` checks risk and reserves cost.\n4. The MCP host performs the action with its own tools and permissions.\n5. `livingstack.record_outcome` consumes authorization and records evidence.\n6. `livingstack.check_claim` tests a claim only against explicit fresh successful `outcome_ids` bound to the exact authorization target supplied again as `subject`; unrelated session evidence cannot satisfy it.\n7. Checkpoint tools preserve and verify bounded recoverable state.\n8. Trace tools expose redacted reports and workspace-signed exports.\n\n## Security boundaries\n\nLiving Stack MCP has no arbitrary shell, browser, database, deployment, or\npublication tools and no arbitrary HTTP capability. Its single publisher\nnetwork action is a fixed-schema, fixed-origin adoption receipt that remains\ninert unless the user explicitly sets consent. It does not inspect personal\nCodex or Claude state. A\nworkspace signature proves that an export came from one local installation; it\ndoes not by itself prove publisher or user identity. The host remains the\nauthority and executor.\n\nThe complete Community edition is local-first and free. Team Local is available\nseparately for $19 once; it coordinates one private workspace and up to five\nregistered installations without changing the model or uploading Community\nsession state. Exact scope, purchase paths, and boundaries are documented in\n[COMMERCIAL.md](COMMERCIAL.md).\n\nSee [PRODUCT.md](PRODUCT.md), [SECURITY.md](SECURITY.md), and\n[CHANGELOG.md](CHANGELOG.md). Installation paths are collected in\n[CLIENTS.md](CLIENTS.md).\n\n## Development\n\n```bash\nnpm ci\nnpm test\nnpm run verify\n```\n\nLicense: Apache-2.0.\n\nBrand assets and their meaning are documented in [BRAND.md](BRAND.md).\n\n## Privacy Policy\n\nLiving Stack Community runs locally and never sends session state, context,\nledgers, checkpoints, private signing keys, or agent payloads to Living Stack.\nAn optional first-run receipt is sent only after explicit consent and contains\nthe package version, milestone, coarse host category, installation public-key\nhash, timestamp, and signature. The endpoint rejects arbitrary metadata. The\ncomplete policy covers collection, local use and storage,\nthird-party sharing, retention, and contact information at\n[living-stack-mcp.pages.dev/privacy.html](https://living-stack-mcp.pages.dev/privacy.html).\n", "bytes": 7976, "sha": "d6dbf03a235717890a40bdfe4b89eb032e24037488f82b44cf80a004a14a3f36", "repo_slug": "equinoxaifinance-rgb/living-stack-mcp", "fonte": "repo", "truncated": false, "api": "https://agentalog.com/api/listings/mcp_io_github_equinoxaifinance_rgb_living_st_34e64a78/readme" }