
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@provenonce/mcp
Advanced tools
Provenonce Skill — MCP server giving any AI agent cryptographic identity, SIGIL, heartbeat, passport, and beats proofs.
Provenonce Skill — Give any AI agent cryptographic identity in under 60 seconds.
Add this skill to your agent and it gets:
Add to ~/.claude/claude_desktop_config.json:
{
"mcpServers": {
"provenonce": {
"command": "npx",
"args": ["-y", "@provenonce/mcp"]
}
}
}
That's it. On first use, your agent calls provenonce_register and gets a permanent identity.
{
"mcpServers": {
"provenonce": {
"command": "npx",
"args": ["-y", "@provenonce/mcp"],
"env": {
"PROVENONCE_API_KEY": "pvn_...",
"PROVENONCE_AGENT_HASH": "0x..."
}
}
}
}
If you're a developer embedding this skill in your framework, include your partner ref token:
{
"env": {
"PROVENONCE_SKILL_REF": "your16hextoken"
}
}
You earn 30% of every SIGIL purchased by agents you deploy. Register at POST /api/v1/skill/register.
| Tool | What it does | Auth needed |
|---|---|---|
provenonce_register | Auto-register agent, get hash + API key | None |
provenonce_status | Full current state (SIGIL, balance, hints) | Yes |
provenonce_purchase_sigil | Buy SIGIL, unlock heartbeat + passport | Yes + SOL tx |
provenonce_heartbeat | Submit liveness proof | Yes + SOL tx |
provenonce_batch_heartbeat | Heartbeat multiple children in one call | Yes + SOL tx |
provenonce_get_passport | Get signed identity document | Yes |
provenonce_beats_proof | Compute work proof, get receipt (for spawn/resync) | None |
provenonce_submit_beats | Compute VDF beats and credit lifetime beat count | Yes |
provenonce_verify_agent | Check another agent's identity | None |
provenonce_spawn | Spawn a child agent | Yes |
provenonce_get_lineage | Get full ancestry chain | None |
User prompt: "Register with Provenonce and show me my identity."
Expected behavior:
provenonce_register with an optional name0xabcd...) and API key~/.provenonce/config.jsonprovenonce_status to display identity, balance, and next steps_hint suggesting the agent purchase a SIGILUser prompt: "Check if agent 0xf7dad8f4...b6fd is legitimate."
Expected behavior:
provenonce_verify_agent with the target hashUser prompt: "Get me a SIGIL, send a heartbeat, and export my passport."
Expected behavior:
provenonce_purchase_sigil without payment_tx to get fee instructions (amount in SOL + ops wallet address)provenonce_purchase_sigil again with the payment_tx to complete the purchaseprovenonce_heartbeat (same payment flow) to prove livenessprovenonce_get_passport to receive a cryptographically signed identity documentDay 1: provenonce_register → hash minted, credentials saved
provenonce_beats_proof → works immediately, no SIGIL needed
provenonce_status → { sigil: null, _hint: "Call provenonce_purchase_sigil..." }
Day 7: provenonce_purchase_sigil → pay SOL, SIGIL issued
provenonce_heartbeat → now unlocked
provenonce_get_passport → signed identity doc, share with anyone
provenonce_verify_agent → verify a counterparty before trusting them
| Variable | Description | Default |
|---|---|---|
PROVENONCE_API_KEY | Agent API key (pvn_...) | Read from ~/.provenonce/config.json |
PROVENONCE_AGENT_HASH | Agent hash (0x...) | Read from ~/.provenonce/config.json |
PROVENONCE_SKILL_REF | Your partner ref token (for rev share) | None |
PROVENONCE_REGISTRY_URL | Registry URL override | https://provenonce.io |
import { PROVENONCE_TOOLS } from '@provenonce/mcp/tools';
// OpenAI
const tools = PROVENONCE_TOOLS.map(t => ({ type: 'function', function: t }));
// LangChain / custom — use PROVENONCE_TOOLS for schema, implement handlers yourself
Credentials are stored in ~/.provenonce/config.json with chmod 600 permissions (Unix).
On Windows, use environment variables (PROVENONCE_API_KEY + PROVENONCE_AGENT_HASH) — file permissions are not enforced.
Provenonce collects the minimum data necessary to provide cryptographic identity services:
Full privacy policy: provenonce.dev/legal/privacy
provenonce_kyc — KYC / identity class upgradeprovenonce-py)MIT — see LICENSE
FAQs
Provenonce Skill — MCP server giving any AI agent cryptographic identity, SIGIL, heartbeat, passport, and beats proofs.
The npm package @provenonce/mcp receives a total of 36 weekly downloads. As such, @provenonce/mcp popularity was classified as not popular.
We found that @provenonce/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.