Cronozen Proof

Created By

cronozena day ago

Tamper-proof audit trail for AI decisions. Record, verify, and export cryptographic proof chains via MCP. 6 tools: proof_record, proof_verify, proof_chain_verify, proof_get, proof_export_jsonld, proof_public_verify.

# ai-governance

# audit-trail

Overview Content Tools Comments

Overview

@cronozen/mcp-server

Tamper-proof audit trail for AI decisions. Record, verify, and export cryptographic proof chains via MCP.

Overview

This MCP server exposes 6 tools for AI decision provenance — recording decisions, verifying cryptographic integrity, and exporting audit-ready evidence. AI clients such as Claude Desktop connect over Streamable HTTP transport and interact with decision proofs through a standard MCP interface.

Transport: Streamable HTTP (not SSE, not stdio)
Session model: Stateful per-session transport with UUID session IDs
Auth forwarding: Per-request Bearer token is forwarded to the underlying API

Tools

Tool	Description	Required Params	Optional Params
`proof_record`	Records an AI execution as a DPU. Creates a cryptographically chained proof record with SHA-256 hash chain.	`domain` (string), `purpose` (string), `final_action` (string)	`evidence_level` (DRAFT \| PARTIAL \| AUDIT_READY), `reviewed_by`, `reviewer_role`, `approved` (boolean), `tags` (string[]), `reference_type`, `reference_id`
`proof_verify`	Verifies a specific proof record's cryptographic integrity. Checks hash consistency.	`proofId` (string)	`data` (Record<string, unknown>)
`proof_chain_verify`	Verifies the entire SHA-256 hash chain for a domain. Reports the first broken index if tampering is detected.	`domain` (string)	`fromIndex` (number), `toIndex` (number), `batchSize` (number)
`proof_get`	Retrieves a DPU by ID with full details including hash chain position, evidence level, and compliance info.	`id` (string)	--
`proof_export_jsonld`	Exports a DPU as a JSON-LD v2.0 document conforming to Cronozen Evidence Ontology. Includes 6W extraction and policy snapshot.	`id` (string)	--
`proof_public_verify`	Publicly verifies a DPU's cryptographic integrity without authentication. Checks hash validity and chain link integrity.	`id` (string)	--

Quick Start

Install via Smithery (Recommended)

smithery mcp add cronozen/proof

Or connect directly: https://proof.cronozen.com

Self-hosted

Prerequisites

Node.js 18+
A running Cronozen API endpoint

Install

npm install

Configure

cp .env.example .env

Edit .env and set CRONOZEN_API_TOKEN to a valid JWT token.

Development

npm run dev

Production

npm run build
npm start

Docker

docker build -t cronozen-mcp-server .
docker run -p 3100:3100 \
  -e CRONOZEN_API_URL=https://mcp.cronozen.com \
  -e CRONOZEN_API_TOKEN=your-token \
  cronozen-mcp-server

Environment Variables

Variable	Description	Default
`CRONOZEN_API_URL`	Base URL of the Cronozen API	`http://localhost:3000`
`CRONOZEN_API_TOKEN`	JWT Bearer token for API authentication	(none -- required)
`MCP_PORT`	Port the MCP server listens on	`3100`

Claude Desktop Configuration

{
  "mcpServers": {
    "cronozen-proof": {
      "url": "https://mcp.cronozen.com/mcp",
      "headers": {
        "Authorization": "Bearer YOUR_JWT_TOKEN"
      }
    }
  }
}

Health Check

GET /health

{
  "status": "ok",
  "server": "cronozen-decision-proof",
  "version": "0.1.0",
  "tools": 6,
  "transport": "streamable-http",
  "activeSessions": 0
}

Authentication

The server supports two authentication modes:

Per-session Bearer token — Clients send an Authorization: Bearer <token> header on the initial MCP request. The token is forwarded to all subsequent API calls for that session.
Fallback to environment variable — If no Bearer token is provided in the request, the server uses the CRONOZEN_API_TOKEN environment variable.

The proof_public_verify tool calls the public verification endpoint which does not require authentication.

How It Works

Claude Desktop / AI Client
    |  HTTPS + Bearer token
    v
Cronozen MCP Server (Streamable HTTP)
    |  HTTP + Bearer forwarding
    v
Cronozen Decision Proof API
    |  SHA-256 hash chain
    v
Tamper-proof Evidence Store

Every AI decision is:

Recorded with structured metadata (domain, purpose, action, evidence level)
Chained via SHA-256 hash linking to the previous record
Verifiable — any record or entire chain can be cryptographically verified
Exportable as JSON-LD v2.0 for audit compliance

Use Cases

AI Agent Audit Trail — Track every decision an AI agent makes in production
Compliance Documentation — Auto-generate tamper-proof evidence for SOC2, EU AI Act, Korea AI Basic Act
Decision Provenance — Answer "why did the AI do this?" with cryptographic proof
Human-in-the-Loop Evidence — Record human approval/rejection alongside AI decisions

License

Apache-2.0

Server Config

{
  "mcpServers": {
    "cronozen-proof": {
      "url": "https://mcp.cronozen.com/mcp",
      "headers": {
        "Authorization": "Bearer <YOUR_TOKEN>"
      }
    }
  }
}

Recommend Servers

TraeBuild with Free GPT-4.1 & Claude 3.7. Fully MCP-Ready.

MCP AdvisorMCP Advisor & Installation - Use the right MCP server for your needs

EdgeOne Pages MCPAn MCP service designed for deploying HTML content to EdgeOne Pages and obtaining an accessible public URL.

AiimagemultistyleA Model Context Protocol (MCP) server for image generation and manipulation using fal.ai's Stable Diffusion model.

BlenderBlenderMCP connects Blender to Claude AI through the Model Context Protocol (MCP), allowing Claude to directly interact with and control Blender. This integration enables prompt assisted 3D modeling, scene creation, and manipulation.

Howtocook Mcp基于Anduin2017 / HowToCook （程序员在家做饭指南）的mcp server，帮你推荐菜谱、规划膳食，解决“今天吃什么“的世纪难题； Based on Anduin2017/HowToCook (Programmer's Guide to Cooking at Home), MCP Server helps you recommend recipes, plan meals, and solve the century old problem of "what to eat today"

Tavily Mcp

Amap Maps高德地图官方 MCP Server

Serper MCP ServerA Serper MCP Server

Jina AI MCP ToolsA Model Context Protocol (MCP) server that integrates with Jina AI Search Foundation APIs.

RedisA Model Context Protocol server that provides access to Redis databases. This server enables LLMs to interact with Redis key-value stores through a set of standardized tools.