# PEAC Protocol: Signed interaction receipts

MCP server for verifying, issuing, and decoding PEAC signed interaction records. Runs over stdio or HTTP, gives agents cryptographic verification tools without network calls.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 14
- Author: peacprotocol
- License: Apache-2.0 · policy=link-only · description only; the file stays with the author
- Source: https://github.com/peacprotocol/peac/tree/HEAD/packages/mcp-server
- Updated: 2026-10-24
- HTML: https://affpapa.org/en/nevibecode/mcp/peac-protocol-signed-interaction-receipts

## What it does

The server exposes five tools: `peac_verify` checks record signatures, `peac_inspect` reads structure without verification, `peac_decode` parses JWS into header and payload, `peac_issue` creates a new Ed25519-signed record, `peac_create_bundle` assembles archives of records and artifacts. The first three work with no setup. Issuance requires `--issuer-key` and `--issuer-id` flags, bundling also needs `--bundle-dir`.

Inside: static policy checks, input and JWS size limits, tool timeouts. HTTP transport isolates sessions and binds to `127.0.0.1`. Keys are never auto-discovered, bundle paths are validated against path traversal, tool handlers make no network requests. Responses carry `_meta` with server version, policy hash, and protocol version — an audit block separate from the MCP metadata envelope used by `@peac/mappings-mcp`.

## Requirements
- Needs: Node.js (commands run via npx)

## Install

### Claude Code (native platform)

**Platform CLI**
```bash
claude mcp add peac -- npx -y @peac/mcp-server
```

### Codex

**Platform CLI**
```bash
codex mcp add mcp-server -- npx -y @peac/mcp-server
```

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "mcp-server": {
            "command": "npx",
            "args": [
                "-y",
                "@peac/mcp-server"
            ]
        }
    }
}
```

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "mcp-server": {
            "type": "stdio",
            "command": "npx",
            "args": [
                "-y",
                "@peac/mcp-server"
            ]
        }
    }
}
```

### Gemini CLI

**Platform CLI**
```bash
gemini mcp add mcp-server npx -y @peac/mcp-server
```

## When to use it
- Sign an agent interaction record with an Ed25519 key
- Verify the cryptographic signature of a PEAC record without network calls
- Decode a JWS token and extract header and payload for debugging
- Assemble a bundle of signed records and related artifacts
- Run the MCP server with HTTP transport and session isolation

## Example prompts
- Verify the signature of this PEAC record: `eyJ...`
- Issue a signed interaction record with claims from `claims.json`
- Decode this JWS token and show me the header and payload

## Similar
- [REA](https://affpapa.org/en/nevibecode/mcp/rea.md) — MCP server · ★ 386989
- [GitHub](https://affpapa.org/en/nevibecode/mcp/github.md) — MCP server · ★ 33918
- [Netdata](https://affpapa.org/en/nevibecode/mcp/netdata.md) — MCP server · ★ 81115
- [browser-use](https://affpapa.org/en/nevibecode/mcp/browser-use.md) — MCP server · ★ 119160
- [Codebase Memory](https://affpapa.org/en/nevibecode/mcp/codebase-memory.md) — MCP server · ★ 47392
- [mcp-server](https://affpapa.org/en/nevibecode/mcp/mcp-server.md) — MCP server · ★ 43872

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md