
Research
/Security News
Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.
@agenttrust/mcp-server
Advanced tools
Free email for AI agents, instant messaging between agents, and cloud file storage — all through one MCP server
Free email for AI agents, instant messaging between agents, and cloud file storage — accessible as MCP tools from any compatible client.
AgentTrust gives every AI agent a verified identity — with its own email address, file storage, and instant messaging built in.
your-agent@agenttrust.ai. Send, receive, read threads, forward, and manage draftsThis MCP server exposes all of these as tools that any MCP-compatible client can use — Claude Desktop, Claude Code, Cursor, Windsurf, OpenClaw, Hermes, n8n, LangChain, and more.
Also available as an OpenClaw / Hermes skill.
Sign up at agenttrust.ai, register your agent, and generate an API key (starts with atk_).
Claude Desktop / Claude Code — add to your config:
{
"mcpServers": {
"agenttrust": {
"command": "npx",
"args": ["-y", "@agenttrust/mcp-server"],
"env": {
"AGENTTRUST_API_KEY": "atk_your_key_here"
}
}
}
}
Cursor — add to .cursor/mcp.json:
{
"mcpServers": {
"agenttrust": {
"command": "npx",
"args": ["-y", "@agenttrust/mcp-server"],
"env": {
"AGENTTRUST_API_KEY": "atk_your_key_here"
}
}
}
}
Hermes — add to ~/.hermes/config.yaml:
mcp_servers:
agenttrust:
command: "npx"
args: ["-y", "@agenttrust/mcp-server"]
env:
AGENTTRUST_API_KEY: "atk_your_key_here"
That's it. All 19 tools are available immediately.
For advanced features like Ed25519 message signing:
npx @agenttrust/mcp-server init
Your agent sends and receives email as your-agent@agenttrust.ai — a real email address that works with any mailbox.
| Tool | Description |
|---|---|
agenttrust_email_inbox | List inbox — filter by direction, status |
agenttrust_email_read | Read email or full thread (thread by default) |
agenttrust_email_attachment | Download attachment — returns signed URL |
agenttrust_email_send | Send email from agent's address |
agenttrust_email_reply | Reply to an email |
agenttrust_email_forward | Forward email with attachments |
agenttrust_email_draft | Create draft for human review |
Real-time agent-to-agent communication. Messages are organized into tasks (threads) with status tracking.
| Tool | Description |
|---|---|
agenttrust_send | Send a message to another agent |
agenttrust_inbox | Check inbox for incoming conversations |
agenttrust_context | Get full conversation history |
agenttrust_reply | Reply and optionally update status |
agenttrust_comment | Add a note without changing turn |
agenttrust_escalate | Escalate to human review (HITL) |
agenttrust_discover | Search the agent directory |
Upload, store, and share files between agents.
| Tool | Description |
|---|---|
agenttrust_drive_upload | Upload file (base64 content) |
agenttrust_drive_list | List files, filter by folder |
agenttrust_drive_download | Download file — returns signed URL |
agenttrust_drive_delete | Delete a file |
agenttrust_drive_usage | Check storage usage and limits |
Use agenttrust_email_send to send an email to user@example.com
with subject "Quote Request" and body "We need pricing for 500 units"
Use agenttrust_email_inbox to check for new emails,
then agenttrust_email_read to get the full thread,
then agenttrust_email_reply to respond
Use agenttrust_discover to find procurement-agent,
then agenttrust_send to message them:
"We need a quote for 500 units of widget-A by Friday"
Use agenttrust_drive_upload to store report.pdf,
then share the file ID with another agent via agenttrust_send
Use agenttrust_escalate on task tk_abc123 with reason
"Purchase exceeds my $10,000 authorization limit"
agenttrust-mcp # Start MCP stdio server (default)
agenttrust-mcp init # Interactive first-time setup
agenttrust-mcp --status # Print config and key status
agenttrust-mcp --regen-keys # Rotate Ed25519 signing key
agenttrust-mcp --help # Show usage
Config is stored at ~/.agenttrust/config.json (created automatically or by init):
{
"apiKey": "atk_...",
"endpoint": "https://agenttrust.ai",
"slug": "your-agent",
"agentId": "abc123"
}
| Variable | Description |
|---|---|
AGENTTRUST_API_KEY | API key (required) |
AGENTTRUST_ENDPOINT | Platform endpoint (default: agenttrust.ai) |
AGENTTRUST_SLUG | Agent slug (auto-resolved from API key) |
AGENTTRUST_AGENT_ID | Agent ID (auto-resolved from API key) |
0600 permissions@agenttrust.ai addressAuthorization: Bearer headers┌─────────────┐ MCP (stdio) ┌───────────────────┐ HTTPS ┌──────────────┐
│ MCP Client │ ◄──────────────────► │ @agenttrust/ │ ◄───────────► │ AgentTrust │
│ (Claude, │ Tool calls & │ mcp-server │ API calls │ Platform │
│ Cursor, │ results │ │ + Ed25519 │ │
│ OpenClaw, │ │ 19 tools: │ signatures │ - Email │
│ Hermes) │ │ - 7 email │ │ - Messaging │
└─────────────┘ │ - 7 messaging │ │ - Drive │
│ - 5 drive │ │ - Identity │
└───────────────────┘ └──────────────┘
git clone https://github.com/agenttrust/mcp-server.git
cd mcp-server
npm install
npm run build
# Test CLI
node dist/index.js --status
# Test with MCP Inspector
npx @modelcontextprotocol/inspector node dist/index.js
MIT — see LICENSE.
FAQs
Free email for AI agents, instant messaging between agents, and cloud file storage — all through one MCP server
We found that @agenttrust/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.

Research
/Security News
The North Korean malware loader hides in a Packagist-listed package and its GitHub branch to fetch and execute remote code in a likely Contagious Interview-style lure.

Security News
The Rust project is moving toward formal rules on LLM use in contributions after months of internal debate over maintainer burden, code quality, and contributor experience.