Allows AI agents to issue and verify verifiable credentials using on-chain registries and IPFS backups.
Also known as csacanam/hashproof, hashproof-mcp
- Stars
- 1
- Tools
- —
- Downloads, 30 days
- —
- Latest version
- 0.1.2
- Last commit
- Oct 28, 2026
- License
- —
What is HashProof MCP?
HashProof allows AI agents to issue and verify verifiable credentials using on-chain registries and IPFS backups.
Summary generated from the project's README
About HashProof MCP server
HashProof provides a system for issuing and verifying credentials through a combination of on-chain registries and IPFS backups. It allows organizations and individuals to create verifiable credentials that are stored as JSON and registered via the CredentialRegistry smart contract on the Celo network. This infrastructure ensures that every credential can be validated through a public URL.
Developers can integrate these capabilities into AI agents using the hashproof-mcp server. The server supports local installation via stdio, where agents pay per credential using a funded wallet through x402 micropayments in USDC on Base or Celo. Alternatively, a remote HTTP transport option is available for those who prefer using a prepaid enterprise API key. The system includes specific tools such as preview_template for layout iteration, issue_credential for creation, and verify_credential for validation.
While issuing credentials requires payment, several functions remain free. Agents can use get_template_requirements to understand necessary fields, preview_template to generate watermarked PDFs, and verify_credential to perform full three-layer verification without cost.
What you can do with it
- 1Generate credential previewsAn AI agent can create a watermarked PDF preview of a credential template to check the layout before issuance.
- 2Issue verifiable credentialsA developer can instruct an agent to issue a new credential for a user using USDC micropayments.
- 3Verify credential authenticityAn agent can perform a three-layer verification of a credential using its unique identifier.
- 4Retrieve template requirementsAn AI can check which specific fields are required for a particular credential template.
Written from the project's README. Every use case is checked against a quote from it.
How to install HashProof MCP
Formats verified 10 Nov 2026Add to CursorAdd to GooseInstall HashProof MCP in Claude Code
$ claude mcp add --env 'HASHPROOF_API_KEY=<YOUR_HASHPROOF_API_KEY>' --env 'HASHPROOF_WALLET_PRIVATE_KEY=<YOUR_HASHPROOF_WALLET_PRIVATE_KEY>' hashproof -- npx -y hashproof-mcpInstall HashProof MCP in Cursor
~/.cursor/mcp.json
{
"mcpServers": {
"hashproof": {
"command": "npx",
"args": [
"-y",
"hashproof-mcp"
],
"env": {
"HASHPROOF_API_KEY": "<YOUR_HASHPROOF_API_KEY>",
"HASHPROOF_WALLET_PRIVATE_KEY": "<YOUR_HASHPROOF_WALLET_PRIVATE_KEY>"
}
}
}
}Install HashProof MCP in VS Code
.vscode/mcp.json
{
"servers": {
"hashproof": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"hashproof-mcp"
],
"env": {
"HASHPROOF_API_KEY": "<YOUR_HASHPROOF_API_KEY>",
"HASHPROOF_WALLET_PRIVATE_KEY": "<YOUR_HASHPROOF_WALLET_PRIVATE_KEY>"
}
}
}
}Install HashProof MCP in VS Code CLI
$ code --add-mcp '{"name":"hashproof","type":"stdio","command":"npx","args":["-y","hashproof-mcp"],"env":{"HASHPROOF_API_KEY":"<YOUR_HASHPROOF_API_KEY>","HASHPROOF_WALLET_PRIVATE_KEY":"<YOUR_HASHPROOF_WALLET_PRIVATE_KEY>"}}'Install HashProof MCP in Claude Desktop
claude_desktop_config.json
{
"mcpServers": {
"hashproof": {
"command": "npx",
"args": [
"-y",
"hashproof-mcp"
],
"env": {
"HASHPROOF_API_KEY": "<YOUR_HASHPROOF_API_KEY>",
"HASHPROOF_WALLET_PRIVATE_KEY": "<YOUR_HASHPROOF_WALLET_PRIVATE_KEY>"
}
}
}
}Install HashProof MCP in Codex
$ codex mcp add hashproof --env 'HASHPROOF_API_KEY=<YOUR_HASHPROOF_API_KEY>' --env 'HASHPROOF_WALLET_PRIVATE_KEY=<YOUR_HASHPROOF_WALLET_PRIVATE_KEY>' -- npx -y hashproof-mcpInstall HashProof MCP in Codex config.toml
~/.codex/config.toml
[mcp_servers.hashproof] command = "npx" args = ["-y", "hashproof-mcp"] [mcp_servers.hashproof.env] HASHPROOF_API_KEY = "<YOUR_HASHPROOF_API_KEY>" HASHPROOF_WALLET_PRIVATE_KEY = "<YOUR_HASHPROOF_WALLET_PRIVATE_KEY>"
Install HashProof MCP in Gemini CLI
$ gemini mcp add -s user -e 'HASHPROOF_API_KEY=<YOUR_HASHPROOF_API_KEY>' -e 'HASHPROOF_WALLET_PRIVATE_KEY=<YOUR_HASHPROOF_WALLET_PRIVATE_KEY>' hashproof npx -- -y hashproof-mcpInstall HashProof MCP in Gemini settings.json
~/.gemini/settings.json
{
"mcpServers": {
"hashproof": {
"command": "npx",
"args": [
"-y",
"hashproof-mcp"
],
"env": {
"HASHPROOF_API_KEY": "<YOUR_HASHPROOF_API_KEY>",
"HASHPROOF_WALLET_PRIVATE_KEY": "<YOUR_HASHPROOF_WALLET_PRIVATE_KEY>"
}
}
}
}Configuration
HASHPROOF_API_KEYSecretPrepaid API key (alternative to wallet). One of the two payment methods is required only for issue_credential.
HASHPROOF_WALLET_PRIVATE_KEYSecretEVM private key of a dedicated wallet holding USDC on Base or Celo — pays $0.10 per issuance via x402.
HASHPROOF_X402_NETWORKbase (default) or celo
| Name | Description | |
|---|---|---|
| HASHPROOF_API_KEY | Prepaid API key (alternative to wallet). One of the two payment methods is required only for issue_credential. | Secret |
| HASHPROOF_WALLET_PRIVATE_KEY | EVM private key of a dedicated wallet holding USDC on Base or Celo — pays $0.10 per issuance via x402. | Secret |
| HASHPROOF_X402_NETWORK | base (default) or celo |
Automated checks
Ran Nov 14, 2026Full report →Passed our automated checks. That is not a security audit: read the code and give the server the narrowest access it needs. How checks work · What to fix for more points
- Source repository linked and reachablecsacanam/hashproof is public and reachablegithub.com/csacanam/hashproof ↗Pass
- Package names this repository as its sourcehashproof-mcp names csacanam/hashproof as sourcenpmjs.com/package/hashproof-mcp ↗Pass
- Build provenance (Sigstore attestation)No build attestation published for this releaseNot checked
- Open source license (OSI)No licenseFinding
- Commit or release in the last yearLast commit or release 2026-10-28github.com/csacanam/hashproof ↗Pass
- OpenSSF ScorecardNot checked
- Package name not close to a popular packageNo popular package one edit away from hashproof-mcpPass
- No critical advisory in the package or its dependencies117 resolved dependencies checked; no critical advisoryosv.dev ↗Pass
- No hidden instructions to the model0 tool descriptions and the README read; no override phrases, credential paths or hidden charactersPass
- Destructive tools are labelledNot checked
- Remote endpoint answers the MCP handshakeNot checked
README
View on GitHubHashProof
Verifiable credentials with IPFS backup, on-chain registry, and pay-per-call API via x402.
What it is
HashProof is a credential issuance API. Organizations and Individuals (entities) issue verifiable credentials to people. Each credential is:
- Stored as a JSON in the database and backed up on IPFS (Pinata)
- Registered on-chain in the
CredentialRegistrycontract on Celo - Verifiable via a public URL:
https://hashproof.dev/verify/:id
Two ways to pay: micropayment in USDC via x402 (Base or Celo) — no API keys, no subscriptions — or a prepaid API key for enterprise clients (no crypto needed). AI agents can call the API directly using a funded wallet.
Project structure
backend/ Express API — credential issuance, verification, payments
frontend/ React app — landing page, credential verification, entity pages
contracts/ CredentialRegistry smart contract (Celo)
mcp/ MCP server (hashproof-mcp on npm) — use HashProof from any AI agent
skills/ Agent skill (npx skills add csacanam/hashproof)
docs/ Architecture and flow documentation
Deployed contracts
| Network | Contract | Address |
|---|---|---|
| Celo mainnet | CredentialRegistry | 0x7a1B759A602Aba72a70f99Dffd0a386d7504ce9B |
Paid API endpoints
| Endpoint | Price | Description |
|---|---|---|
POST /issueCredential |
$0.10 USDC | Issue one verifiable credential |
POST /entities/:id/verificationRequests |
$49 USDC | Submit a verification request |
Payment is in USDC on Base or Celo via x402. The client signs an off-chain authorization — no gas required.
Free endpoints
| Endpoint | Description |
|---|---|
GET /verify/:id |
Full 3-layer verification |
GET /templates/:ref/requirements |
Get required fields for a template |
POST /templates/:ref/preview |
Generate a preview PDF with watermark (no cost) |
GET /stats |
On-chain credential counters |
For AI agents
HashProof is fully agent-usable — no account, no human onboarding. Three ways in:
-
MCP server, local or remote (listed on the official MCP registry as
io.github.csacanam/hashproof):# local (stdio) — pays per credential with your own wallet via x402, or an API key claude mcp add hashproof -- npx -y hashproof-mcp # remote (Streamable HTTP) — nothing to install, API key required to issue claude mcp add --transport http hashproof https://api.hashproof.dev/mcpTools:
preview_template(free — iterate custom layouts),issue_credential($0.10 via x402 or API key),verify_credentialandget_template_requirements(free). The remote server has no wallet, so it can't do x402 — it needsAuthorization: Bearer <api-key>. Seemcp/README.md. -
Agent skill:
npx skills add csacanam/hashproof— or read it at hashproof.dev/skill.md. -
Plain HTTP + x402:
POST /issueCredentialreturns a 402 challenge any x402-v2 client can pay (USDC on Base or Celo). LLM index: hashproof.dev/llms.txt.
Agent identity metadata (ERC-8004 registration-v1): hashproof.dev/metadata.json.
Quick start
See backend/README.md and frontend/README.md for setup instructions.
See docs/README.md for the full documentation index.
HashProof MCP questions
How do I add HashProof MCP to Claude Code?
Run claude mcp add --env 'HASHPROOF_API_KEY=<YOUR_HASHPROOF_API_KEY>' --env 'HASHPROOF_WALLET_PRIVATE_KEY=<YOUR_HASHPROOF_WALLET_PRIVATE_KEY>' hashproof -- npx -y hashproof-mcp in your terminal. Add --scope user to make it available in every project.
How do I add HashProof MCP to Cursor?
Open ~/.cursor/mcp.json and add the server under mcpServers, using the Cursor config shown in the install section above.
How much does it cost to issue a credential?
Issuing one verifiable credential costs $0.10 USDC via x402.
Can AI agents use HashProof without human onboarding?
Yes, HashProof is fully agent-usable without an account or human onboarding via MCP or agent skills.
What are the payment methods available?
You can pay via micropayments in USDC using x402 on Base or Celo, or use a prepaid API key for enterprise clients.
Where are the credentials stored?
Credentials are stored as JSON in a database, backed up on IPFS, and registered on the Celo blockchain.