io.github.shahidh68/audit-ledger-mcp

io.github.shahidh68/audit-ledger-mcp

Record AI decisions to a tamper-evident audit ledger from any MCP-compatible agent.

Connect this server

Add this to your MCP client config — claude_desktop_config.json (Claude Desktop) or .cursor/mcp.json (Cursor).Suits: Claude Desktop · Cursor.

{
  "mcpServers": {
    "audit-ledger-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "audit-ledger-mcp@0.3.1"
      ],
      "env": {
        "AUDIT_WRITE_KEY": "<your AUDIT_WRITE_KEY>",
        "AUDIT_READ_KEY": "<your AUDIT_READ_KEY>",
        "AUDIT_HMAC_KEY": "<your AUDIT_HMAC_KEY>"
      }
    }
  }
}
Environment variables
  • AUDIT_WRITE_KEYsecretTenant write key for your deployed ledger. Required if AUDIT_API_URL is set and you want to call record_decision.
  • AUDIT_READ_KEYsecretTenant read key for your deployed ledger. Required if AUDIT_API_URL is set and you want to call verify_decision or list_decisions.
  • AUDIT_HMAC_KEYsecretTenant secret used to HMAC-SHA256 PII and prompts locally before sending. Generate once per tenant (e.g. node -e "console.log(require('crypto').randomBytes(32).toString('hex'))") and keep it in your environment. The key never leaves your process. If unset, the MCP falls back to plain SHA-256 for backwards compatibility and logs a one-time deprecation warning; set this to switch to keyed hashing, which regulators (ICO/EDPB) expect for pseudonymisation.

A starting point — check the repository for exact arguments and setup. Restart your client after editing the config.

Category
Developer Tools
Version
0.3.1
Registry
active
Published
6/5/2026
Browse all Developer Tools →

Add the badge to your site

Show visitors that io.github.shahidh68/audit-ledger-mcp is listed here — it’s also the link we check for a free listing.

io.github.shahidh68/audit-ledger-mcp — listed on Serverdex

HTML — for your website

<a href="https://serverdex.io/server/io-github-shahidh68-audit-ledger-mcp?utm_source=badge"><img src="https://serverdex.io/brand/badge.svg" alt="io.github.shahidh68/audit-ledger-mcp — listed on Serverdex" width="123" height="40" loading="lazy"></a>

Recommended. A dofollow link from your own domain is the one that counts for search engines, and it's the link we check for a free listing.

Markdown — for your README

[![io.github.shahidh68/audit-ledger-mcp — listed on Serverdex](https://serverdex.io/brand/badge.svg)](https://serverdex.io/server/io-github-shahidh68-audit-ledger-mcp?utm_source=badge)

Nice for visibility, but GitHub marks README links nofollow, so it doesn't pass authority. Use the HTML badge on your site as well.