An MCP server signs every AI agent tool call into a verifiable Merkle chain

Funky_Chicken_22 · reddit · 2026-07-22

A builder describes an MCP server that signs every tool call, prompt, and response from an AI coding agent into a per-project Merkle chain.

Every 1,024 entries, the chain is sealed with a hybrid Ed25519 + SLH-DSA post-quantum signature. The goal is to produce an offline-verifiable artifact an auditor can inspect in minutes, without trusting the vendor's servers. The author says regulated buyers increasingly need evidence such as whether customer PII ever reached the LLM, and asks for critique on the hybrid signing choice and the offline verifier as the trust root.

Original post →

More from coding & agent

coding & agent channel →