OpenWorkProof — Claude Code MCP server: install
OpenWorkProof gives AI-agent work a signed trail of permissions, actions, checks, and human acceptance. Use it when execution needs independent review.
claude mcp add openworkproof -- uvx openworkproofWhat OpenWorkProof does
OpenWorkProof models an agent task as a chain of signed records. A WorkOrder fixes the goal and boundaries, a CapabilityGrant limits the available authority, and a PolicyDecision allows or rejects an action before it runs. ActionReceipt connects the request, authorization, result, and evidence. A separate Verifier checks the chain, while an Acceptor makes the final acceptance decision.
The MCP server uses Ed25519 signatures, normalized JSON, an append-only ledger, and content digests. A completed job can be exported as a signed evidence package that another party verifies offline with the package and public key. Verification does not equal acceptance, so those decisions remain separate. If uvx is unavailable, the Claude Code launch command cannot start the server.
What it helps with
- record who authorized an agent task
- limit agent work by paths, tools, and time
- tie outputs and evidence to one execution
- verify a signed package without the source system
- keep result verification separate from human acceptance
Example prompts for the agent
- Create a work order for a repository change and record the allowed paths and tools.
- Check the execution evidence and prepare a package for offline verification.
- Show which planned actions require a human decision before they run.
How to install OpenWorkProof
Platform CLI
claude mcp add openworkproof -- uvx openworkproofuvx runs the command named after the package; if the README names another one, use uvx --from openworkproof <command>
Platform CLI
codex mcp add openworkproof -- uvx openworkproofuvx runs the command named after the package; if the README names another one, use uvx --from openworkproof <command>
Config file
{
"mcpServers": {
"openworkproof": {
"command": "uvx",
"args": [
"openworkproof"
]
}
}
}uvx runs the command named after the package; if the README names another one, use uvx --from openworkproof <command>
Config file
{
"servers": {
"openworkproof": {
"type": "stdio",
"command": "uvx",
"args": [
"openworkproof"
]
}
}
}uvx runs the command named after the package; if the README names another one, use uvx --from openworkproof <command>
Platform CLI
gemini mcp add openworkproof uvx openworkproofuvx runs the command named after the package; if the README names another one, use uvx --from openworkproof <command>
Step by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about OpenWorkProof
How do I install OpenWorkProof in Claude Code?
Run claude mcp add openworkproof -- uvx openworkproof. This adds the MCP server and starts it through uvx.
What does OpenWorkProof do?
It connects authorization, agent actions, evidence, independent verification, and human acceptance. The resulting signed package can be checked offline.
Which platforms can use OpenWorkProof?
The server is listed for Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, and Zed. Setup commands are provided for Claude Code, Codex, Cursor, GitHub Copilot, and Gemini CLI.
