Wax Seal
WaxSeal MCP Server
WaxSeal is a cryptographic identity infrastructure for AI agents. Each seal is an Ed25519 keypair minted on-chain (Base, Ethereum, or BNB Chain) — giving agents a tamper-evident way to verify who they're talking to, authenticate documents, and enforce human approval before executing irreversible actions.
Tools
| Tool | Description |
|---|---|
waxseal.info | Overview of the platform — call this first |
waxseal.identity.verify | Look up any WaxSeal by 64-char hex fingerprint |
waxseal.signature.verify | Verify an Ed25519 signature against a WaxSeal |
waxseal.approval.verify | Verify a human-signed approval token |
waxseal.document.sign | Sign content with your WaxSeal key (requires key) |
waxseal.approval.create | Create a signed approval token for an agent (requires key) |
The first four tools require no configuration — anyone can verify a seal or signature without a key.
Human-in-the-loop
(1) Human: "Deploy when ready — here's my approval:" (2) Agent calls waxseal.approval.create({ action: "Deploy v2.1.0", expires_in_minutes: 10 }) (3) Agent stores the token (4) Before deploying: waxseal.approval.verify({ approval_token }) (5) Only proceeds if valid: true
The approval is cryptographically tied to an on-chain identity — unforgeable and auditable.
Setup
WAXSEAL_PRIVATE_KEY_PEM is only required for waxseal.document.sign and waxseal.approval.create. Verify-only tools work with no environment variables.
Get your seal at waxseal.id/create.
服务器配置
{
"mcpServers": {
"waxseal": {
"command": "npx",
"args": [
"-y",
"@waxseal/mcp"
],
"env": {
"WAXSEAL_PRIVATE_KEY_PEM": "<your-ed25519-private-key-pem>"
}
}
}
}