{ "markdown": "\n

\n \n \"Hive\n \n

\n\n

hive-mcp-agent-kyc

\n\n

Broker / observer layer for KYC/AML screening · CLEAN-MONEY gate primitive

\n\n

\n \"Smithery\"\n \"Glama\"\n \"Live\"\n \"Release\"\n \"License\"\n

\n\n

\n https://hive-mcp-gateway.onrender.com/agent-kyc/mcp\n

\n\n---\n\n## Scope disclaimer\n\n> Hive Agent KYC is a broker/observer layer. It routes screening requests to third-party providers and surfaces public sanctions list matches. It is not a regulated money-services business, does not make custody, lending, or transaction-permitting decisions, and does not issue compliance attestations on behalf of regulated entities. Final compliance determinations remain with the requesting agent and its operator.\n\nThis disclaimer is also surfaced verbatim in every tool's response payload, in `/.well-known/agent.json`, and in the JSON-LD `description`.\n\n---\n\n## What this is\n\n`hive-mcp-agent-kyc` is a Model Context Protocol (MCP) server that any MCP-compatible client (Claude Desktop, Cursor, Manus, agent runtimes) can call to:\n\n1. Route a blockchain address screening request to one of three third-party KYC/AML providers — Chainalysis, TRM Labs, or Elliptic — and return the provider's risk score and flags **verbatim** (no enrichment, no Hive scoring layer).\n2. Check public sanctions list matches against the OFAC SDN list and the FATF high-risk-jurisdiction lists.\n3. Read back an audit-log entry for a prior query (DID + timestamp + provider + result code only — no PII).\n\nWhat this **does not** do:\n\n- It does not hold custody of any KYC documents.\n- It does not make a final allow/deny determination on a transaction.\n- It does not issue an attestation that a person/entity is \"KYC'd by Hive\".\n- It does not operate as a money-services business.\n\nThe purpose is to be the **CLEAN-MONEY gate primitive** that other Hive surfaces (Vault, Trade, Swap, Treasury) can call before settling. Compliance determinations remain with the calling operator.\n\n- **Protocol**: MCP 2024-11-05 over Streamable-HTTP / JSON-RPC 2.0\n- **Transport**: `POST /mcp`\n- **Discovery**: `GET /.well-known/mcp.json`, `GET /.well-known/agent.json`\n- **Health**: `GET /health`\n- **Settlement**: real x402 — USDC on Base L2 to wallet `0x15184bf50b3d3f52b60434f8942b7d52f2eb436e`. No mock. No simulated.\n- **Backend status**: provider partnership keys pending — `agent_kyc_screen_address` returns 503 with `backend_pending: true` until configured. Public list tools (OFAC, FATF) return real data today.\n- **Brand gold**: Pantone 1245 C / `#C08D23`\n\n---\n\n## Tools\n\n| Tool | Cost | Description |\n|---|---|---|\n| `agent_kyc_screen_address` | $0.10 USDC (Base) | Route screening request to Chainalysis / TRM Labs / Elliptic. Returns provider response verbatim. 503 `backend_pending` until keys configured. |\n| `agent_kyc_check_ofac_list` | free | Check identifier against OFAC SDN public list. Cached 24h. |\n| `agent_kyc_check_fatf_list` | free | Check ISO-3166 country code against FATF Call-for-Action and Increased-Monitoring lists. |\n| `agent_kyc_query_status` | free | Read prior audit-log entry by `query_id`. Returns DID + timestamp + provider + result code + address hash. No PII. |\n\n### `agent_kyc_screen_address`\n\n```json\n{\n \"name\": \"agent_kyc_screen_address\",\n \"arguments\": {\n \"address\": \"0x...\",\n \"chain\": \"base\",\n \"provider\": \"chainalysis\",\n \"requester_did\": \"did:hive:agent-vault\"\n }\n}\n```\n\nUntil partnership keys are configured, returns:\n\n```json\n{\n \"ok\": false,\n \"status\": 503,\n \"backend_pending\": true,\n \"message\": \"Third-party screening backend not yet configured...\",\n \"x402\": {\n \"recipient\": \"0x15184bf50b3d3f52b60434f8942b7d52f2eb436e\",\n \"chain\": \"base\",\n \"asset\": \"USDC\",\n \"amount_usdc\": 0.10\n }\n}\n```\n\n### `agent_kyc_check_ofac_list`\n\n```json\n{\n \"name\": \"agent_kyc_check_ofac_list\",\n \"arguments\": { \"identifier\": \"0x...\", \"identifier_type\": \"address\" }\n}\n```\n\nReturns the cache age, source URL (treasury.gov), and a deterministic match flag against the cached SDN list.\n\n### `agent_kyc_check_fatf_list`\n\n```json\n{\n \"name\": \"agent_kyc_check_fatf_list\",\n \"arguments\": { \"country_code\": \"IR\" }\n}\n```\n\nReturns category (`call_for_action` | `increased_monitoring` | `not_listed`) + FATF source URL.\n\n### `agent_kyc_query_status`\n\n```json\n{\n \"name\": \"agent_kyc_query_status\",\n \"arguments\": { \"query_id\": \"...\" }\n}\n```\n\n---\n\n## Audit log\n\nThe audit log stores **only** these fields per query, in memory:\n\n- `query_id` (UUID)\n- `did` (requesting agent's DID)\n- `ts` (ISO-8601 timestamp)\n- `provider` (`chainalysis` | `trm` | `elliptic` | `ofac_public` | `fatf_public`)\n- `result_code` (HTTP status returned)\n- `address_hash` (first 16 hex chars of SHA-256 of lowercase identifier)\n\nRaw addresses, names, and PII are never stored. Operators wanting durable logs route them to their own SIEM via webhook (not a Hive responsibility).\n\n---\n\n## Connect\n\n### Claude Desktop\n\n```json\n{\n \"mcpServers\": {\n \"hive-agent-kyc\": {\n \"url\": \"https://hive-mcp-gateway.onrender.com/agent-kyc/mcp\"\n }\n }\n}\n```\n\n### Cursor / Manus / generic MCP client\n\nPoint your client at:\n\n```\nhttps://hive-mcp-gateway.onrender.com/agent-kyc/mcp\n```\n\nStreamable-HTTP transport, JSON-RPC 2.0, MCP 2024-11-05.\n\n### Local\n\n```bash\ngit clone https://github.com/srotzin/hive-mcp-agent-kyc\ncd hive-mcp-agent-kyc\nnpm install\nnode server.js\n# server runs on :3000\n```\n\nTo enable the screening provider routing locally, set any of:\n\n```bash\nexport CHAINALYSIS_API_KEY=...\nexport TRM_API_KEY=...\nexport ELLIPTIC_API_KEY=...\n```\n\nWhen no key is set, `agent_kyc_screen_address` returns 503 `backend_pending`. The OFAC and FATF tools work without keys.\n\n---\n\n## Settlement\n\nReal x402 rails. The screening tool quotes:\n\n```\nrecipient : 0x15184bf50b3d3f52b60434f8942b7d52f2eb436e\nchain : Base L2\nasset : USDC\namount : $0.10 USDC per screen call\n```\n\nNo mock. No simulated. No testnet pretending to be mainnet. While the screening backend is in `backend_pending`, no charge is applied — the x402 quote is informational so calling agents can pre-flight payment configuration.\n\n---\n\n## Hive doctrine context\n\nThis server is the **CLEAN-MONEY gate** primitive in the Hive Civilization three-gate doctrine (NEED + YIELD + CLEAN-MONEY). Any other Hive surface that touches settlement is expected to call `agent_kyc_screen_address` and the public-list tools before clearing.\n\nIt is intentionally a thin broker: enrichment, scoring, and final decision remain with the third-party provider and the operator, respectively. Hive does not become a regulated MSB by routing.\n\n---\n\n## License\n\nMIT — see [LICENSE](LICENSE).\n\n---\n\n

\n #C08D23 · Hive Civilization · 2026\n

\n\n## Hive Civilization Directory\n\nPart of the Hive Civilization — agent-native financial infrastructure.\n\n- Endpoint Directory: https://thehiveryiq.com\n- Live Leaderboard: https://hive-a2amev.onrender.com/leaderboard\n- Revenue Dashboard: https://hivemine-dashboard.onrender.com\n- Other MCP Servers: https://github.com/srotzin?tab=repositories&q=hive-mcp\n\nBrand: #C08D23\n\n", "bytes": 8217, "sha": "673c932ade131061d6ec0abf8be7d6520e37c6250722befce46e32ad0ee5ea85", "repo_slug": "srotzin/hive-mcp-agent-kyc", "fonte": "repo", "truncated": false, "api": "https://agentalog.com/api/listings/mcp_io_github_srotzin_hive_mcp_agent_kyc_117402b5/readme" }