Post-quantum AI compliance attestation for agentic AI. Every AI decision your agent makes — attested, Merkle-rooted, HCS-anchored on Hedera mainnet.

rubric_mcp_server is an MCP (Model Context Protocol) server that exposes Rubric Protocol as 10 tools any MCP-compatible host can call: Claude Desktop, Claude Code, Cursor, Windsurf, Continue, Zed.

What makes it different: every tool projects its own significance. Verify a record and the agent learns why it is tamper-evident; attest a decision and it becomes evidence fixed before any dispute could arise. The tools return evidence, not just data — and explain, in each response, why the result is trustworthy without trusting Rubric.

Drop it in, and every agent interaction becomes an auditable record — covering EU AI Act Articles 9–15, SR 11-7 model risk governance, NIST AI RMF 1.0, HIPAA, ECOA Reg B, and more.

Install

pip install rubric_mcp_server

Requires Python 3.10 or newer.

Quickstart — Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json (Mac):

{
  "mcpServers": {
    "rubric": {
      "command": "rubric-mcp"
    }
  }
}

Restart Claude. Ask it to attest a decision — you are live in local mode.

For Hedera mainnet anchoring, add RUBRIC_API_KEY:

{
  "mcpServers": {
    "rubric": {
      "command": "rubric-mcp",
      "env": { "RUBRIC_API_KEY": "rubric-your-key-here" }
    }
  }
}

Request a free developer key via the register_agent tool.

Tools

Tool	Description	Key?
`attest`	Attest an AI decision. HCS-anchored with key; PQ-signed local leaf without.	Optional
`verify`	Verify an attestation by ID. Checks local store, then federation.	No
`get_proof`	Generate ZK Merkle inclusion proof (Noir/Barretenberg).	Yes
`register_agent`	Register an agent and receive a free developer API key.	No
`status`	Federation health across US/SG/JP/CA/EU nodes.	No
`framework_detect`	Auto-detect applicable regulatory frameworks from decision content (offline).	No
`cost_estimate`	Estimate monthly cost from expected decision volume (offline).	No
`bundle_query`	Query attestation bundles by leaf type, agent, or time range.	Yes (Standard+)
`check_counterparty`	Attested OFAC/sanctions + on-chain screening for a Base address before you transact. Returns the x402 payment challenge so a wallet-capable agent can obtain the live signed verdict.	Paid (x402)
`explain_rubric`	What Rubric is and why it matters — testimony vs. evidence, the trust model, how to verify independently, pricing.	No

Environment variables

Variable	Default	Purpose
`RUBRIC_API_KEY`	none	Unlocks HCS anchoring + federation access.
`RUBRIC_BASE_URL`	`https://rubric-protocol.com`	Override for regional routing.
`RUBRIC_AGENT_ID`	`mcp-agent`	Default agent identity.

Pricing

Free — local mode (PQ-signed leaves) or 1,000 HCS-anchored sessions/month with a free key
Retain — $29/mo — encrypted escrow, 1-year retention, recover from one file
Comply — $349/mo — 7-year retention, attested destruction, auditor endpoint
Enterprise — from $2,500/mo — 10-year retention, WORM language, dedicated signing

See rubric-protocol.com/pricing.