# OpenWorkProof

OpenWorkProof gives AI-agent work a signed trail of permissions, actions, checks, and human acceptance. Use it when execution needs independent review.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 262
- Author: dengyier
- License: Apache-2.0 · policy=link-only · description only; the file stays with the author
- Source: https://github.com/dengyier/OpenWorkProof
- Updated: 2026-09-12
- HTML: https://affpapa.org/en/nevibecode/mcp/openworkproof

## What it does

OpenWorkProof models an agent task as a chain of signed records. A WorkOrder fixes the goal and boundaries, a CapabilityGrant limits the available authority, and a PolicyDecision allows or rejects an action before it runs. ActionReceipt connects the request, authorization, result, and evidence. A separate Verifier checks the chain, while an Acceptor makes the final acceptance decision.

The MCP server uses Ed25519 signatures, normalized JSON, an append-only ledger, and content digests. A completed job can be exported as a signed evidence package that another party verifies offline with the package and public key. Verification does not equal acceptance, so those decisions remain separate. If `uvx` is unavailable, the Claude Code launch command cannot start the server.

## Requirements
- Needs: Python and uv (commands run via uvx)

## Install

### Claude Code (native platform)

**Platform CLI**
```bash
claude mcp add openworkproof -- uvx openworkproof
```
uvx runs the command named after the package; if the README names another one, use uvx --from openworkproof <command>

### Codex

**Platform CLI**
```bash
codex mcp add openworkproof -- uvx openworkproof
```
uvx runs the command named after the package; if the README names another one, use uvx --from openworkproof <command>

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "openworkproof": {
            "command": "uvx",
            "args": [
                "openworkproof"
            ]
        }
    }
}
```
uvx runs the command named after the package; if the README names another one, use uvx --from openworkproof <command>

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "openworkproof": {
            "type": "stdio",
            "command": "uvx",
            "args": [
                "openworkproof"
            ]
        }
    }
}
```
uvx runs the command named after the package; if the README names another one, use uvx --from openworkproof <command>

### Gemini CLI

**Platform CLI**
```bash
gemini mcp add openworkproof uvx openworkproof
```
uvx runs the command named after the package; if the README names another one, use uvx --from openworkproof <command>

## When to use it
- record who authorized an agent task
- limit agent work by paths, tools, and time
- tie outputs and evidence to one execution
- verify a signed package without the source system
- keep result verification separate from human acceptance

## Example prompts
- Create a work order for a repository change and record the allowed paths and tools.
- Check the execution evidence and prepare a package for offline verification.
- Show which planned actions require a human decision before they run.

## Similar
- [REA](https://affpapa.org/en/nevibecode/mcp/rea.md) — MCP server · ★ 386989
- [GitHub](https://affpapa.org/en/nevibecode/mcp/github.md) — MCP server · ★ 33918
- [World Monitor](https://affpapa.org/en/nevibecode/mcp/world-monitor.md) — MCP server · ★ 89408
- [Netdata](https://affpapa.org/en/nevibecode/mcp/netdata.md) — MCP server · ★ 81115
- [Front-End Checklist](https://affpapa.org/en/nevibecode/mcp/front-end-checklist.md) — MCP server · ★ 74559
- [Scrapling MCP Server](https://affpapa.org/en/nevibecode/mcp/scrapling-mcp-server.md) — MCP server · ★ 89433

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md