# a2aidentitytoll-mcp

Remote gatekeeper for agent-to-agent interactions. It validates caller identity, enforces scope rules, and writes structured audit receipts.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI
- Author: clauxel
- License: MIT · policy=link-only · description only; the file stays with the author
- Source: https://github.com/clauxel/a2a-identity-toll-mcp
- Updated: 2026-05-20
- HTML: https://affpapa.org/en/nevibecode/mcp/a2aidentitytoll-mcp

## What it does

The server acts as a hosted gatekeeper between collaborating agents. When one assistant queries another, the tool verifies the caller credentials and task scope. It returns structured decisions in JSON alongside explanation details whenever a request gets rejected.

Five tools power the workflow: `evaluate_a2a_identity_policy`, `review_agent_scope`, `issue_identity_receipt`, `explain_denied_call`, and `export_a2a_audit_log`. They let your setup evaluate inbound calls, issue proof receipts, and extract audit records on demand.

This is a commercial remote service hosted at `https://a2aidentitytoll.clauxel.com/mcp`. Because the public repository contains guides rather than backend application code, running it requires an active paid account on the vendor platform.

## Requirements
- Remote server: `https://a2aidentitytoll.clauxel.com/mcp`

## Install

### Claude Code (native platform)

**Platform CLI: remote server**
```bash
claude mcp add --transport http a2aidentitytoll-mcp https://a2aidentitytoll.clauxel.com/mcp
```

### Codex

**Platform CLI: remote server**
```bash
codex mcp add a2aidentitytoll-mcp --url https://a2aidentitytoll.clauxel.com/mcp
```

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "a2aidentitytoll-mcp": {
            "url": "https://a2aidentitytoll.clauxel.com/mcp"
        }
    }
}
```

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "a2aidentitytoll-mcp": {
            "type": "http",
            "url": "https://a2aidentitytoll.clauxel.com/mcp"
        }
    }
}
```

### Gemini CLI

**Platform CLI: remote server**
```bash
gemini mcp add -t http a2aidentitytoll-mcp https://a2aidentitytoll.clauxel.com/mcp
```

## When to use it
- verify caller identity and task scope between interacting agents
- generate structured proof receipts for authorized calls
- diagnose why a specific agent call was denied
- export historical audit records for compliance inspection

## Example prompts
- Verify incoming agent permissions with `evaluate_a2a_identity_policy` before processing the payload.
- Check why the remote caller was rejected using `explain_denied_call`.
- Retrieve recent interaction logs with `export_a2a_audit_log`.

## Similar
- [access-control-rbac](https://affpapa.org/en/nevibecode/skills/access-control-rbac.md) — skill · 757 installs
- [security-guidance](https://affpapa.org/en/nevibecode/skills/owasp-security-guidance.md) — skill · 414 installs
- [node9](https://affpapa.org/en/nevibecode/mcp/node9.md) — MCP server · ★ 221
- [sanctuary](https://affpapa.org/en/nevibecode/mcp/sanctuary.md) — MCP server · ★ 9
- [iam-helper-for-privileged-access-management](https://affpapa.org/en/nevibecode/skills/iam-helper-for-privileged-access-management.md) — skill · 3900 installs
- [iam-helper-for-troubleshooting](https://affpapa.org/en/nevibecode/skills/iam-helper-for-troubleshooting.md) — skill · 2500 installs

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md