vorim-mcp-server

Vorim AI — MCP Server

  

Give every AI agent its own cryptographic identity, scoped permissions, and a tamper-evident audit trail — directly from Claude Desktop, Cursor, or any MCP-compatible client.

What is Vorim AI?

Vorim AI is the identity and trust layer for autonomous AI agents. It gives each agent its own Ed25519 keypair, time-bounded scoped permissions, hash-linked audit events, and a publicly verifiable trust score — so when an agent does something, you can prove who acted, what they were allowed to do, and what happened.

The protocol underneath (VAIP) is open, MIT-licensed, and submitted to IETF as draft-nyantakyi-vaip-agent-identity-01.

This package is the MCP (Model Context Protocol) server that exposes 19 Vorim tools to any MCP-compatible AI client.

Works with Claude Desktop, Cursor, VS Code, and any other MCP client.

Quick Start

npm install -g @vorim/mcp-server

Or run directly with npx:

VORIM_API_KEY=agid_sk_live_... npx @vorim/mcp-server

Configuration

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "vorim": {
      "command": "npx",
      "args": ["@vorim/mcp-server"],
      "env": {
        "VORIM_API_KEY": "agid_sk_live_..."
      }
    }
  }
}

Cursor

Add to .cursor/mcp.json in your project root:

{
  "mcpServers": {
    "vorim": {
      "command": "npx",
      "args": ["@vorim/mcp-server"],
      "env": {
        "VORIM_API_KEY": "agid_sk_live_..."
      }
    }
  }
}

VS Code

Add to your VS Code MCP settings with the same format.

Get an API Key

1. Sign up at vorim.ai (free, no credit card)
2. Go to Settings > API Keys
3. Create a key with agents:, audit:, trust:* scopes

Available Tools (19)

Health

| Tool | Description | |------|-------------| | vorim_ping | Check API health and connectivity |

Agent Identity

| Tool | Description | |------|-------------| | vorim_register_agent | Register a new agent with Ed25519 cryptographic identity | | vorim_register_ephemeral | Register a did:key ephemeral agent with TTL | | vorim_get_agent | Get agent details by ID | | vorim_list_agents | List all agents with pagination and filtering | | vorim_update_agent | Update agent metadata (name, description, status) | | vorim_revoke_agent | Permanently revoke an agent |

Permissions

| Tool | Description | |------|-------------| | vorim_check_permission | Check if agent has a permission scope (sub-5ms) | | vorim_grant_permission | Grant a permission with optional expiry and rate limits | | vorim_list_permissions | List all active permissions for an agent | | vorim_revoke_permission | Revoke a specific permission scope |

Credential Delegation

| Tool | Description | |------|-------------| | vorim_delegate_credential | Delegate OAuth credentials to an agent | | vorim_request_token | Agent requests a short-lived access token | | vorim_list_delegations | List active credential delegations |

Audit

| Tool | Description | |------|-------------| | vorim_emit_event | Log an audit event for an agent action | | vorim_export_audit | Export signed audit bundle with SHA-256 manifest |

Trust

| Tool | Description | |------|-------------| | vorim_verify_trust | Verify agent trust score (public, no auth required) |

Onboarding

| Tool | Description | |------|-------------| | vorim_onboard_start | Start device-authorization onboarding for a user with no API key; returns a user code and activation URL | | vorim_onboard_check | Check whether the user approved onboarding and retrieve the issued API key |

Example Usage

Once configured, use natural language in Claude, Cursor, or any MCP client:

• "Register an agent called invoice-processor with read and execute permissions"
• "Check if agent agid_acme_a1b2 has permission to execute"
• "Log a tool_call event for the agent: action=process_invoice, result=success"
• "What's the trust score for agent agid_acme_a1b2?"
• "Export the audit trail for the last 30 days"
• "Delegate my GitHub OAuth token to this agent for 24 hours"
• "Revoke agent agid_acme_a1b2"

Why Use Vorim AI

• Cryptographic identity — Ed25519 keypairs for every agent. Not a shared service account.
• Fine-grained permissions — 7 scopes with time bounds and rate limits, sub-5ms checks.
• Tamper-evident audit trails — SHA-256 hash-linked events, signed export bundles for compliance.
• Public trust scoring — anyone can verify any agent without auth (no shared secrets).
• Open protocol — VAIP submitted to IETF, MIT-licensed, freely implementable.
• Compliance-ready — EU AI Act, US Executive Order 14110, SOC 2, GDPR.

Environment Variables

| Variable | Required | Default | Description | |----------|----------|---------|-------------| | VORIM_API_KEY | Yes | — | Your Vorim API key (agid_sk_live_...) | | VORIM_BASE_URL | No | https://api.vorim.ai | API base URL (override for self-hosted) |

Links

• Platform: vorim.ai
• API Docs: vorim.ai/docs
• Protocol Spec (VAIP): github.com/Vorim-AI-Labs/vorim-protocol
• TypeScript SDK: @vorim/sdk on npm
• Python SDK: vorim on PyPI
• OpenClaw Skill: Vorim-AI-Labs/vorim-openclaw-skill
• Agent Discovery: vorim.ai/.well-known/agent.json

License

MIT — see LICENSE for details.

---

Built by Vorim AI. Questions or feedback: kwame@vorim.ai.