io.github.ndl-systems/kevros

repo:https://github.com/ndl-systems/kevros-sdk

Agentic identity trust: precision decisioning, cryptographic release tokens, hash-chained proof

transport:: remote
credential class:: self-provisionable
repo:: https://github.com/ndl-systems/kevros-sdk

Owner verification

Not yet verified. Verifying proves you control this server and is free, permanently — it never changes a published score.

Start verification →

Tools

attest
Create a hash-chained provenance record for an action you've taken. Each attestation extends the append-only evidence chain. The hash can be independently verified by any third party. Cost: $0.02 per call.
shallow
bind
Declare an intent and cryptographically bind it to a command. Proves that the command was issued in service of the declared intent. Use verify-outcome after execution to close the loop. Cost: $0.02 per call.
shallow
bundle
Generate a certifier-grade compliance evidence bundle. Contains hash-chained provenance, intent bindings, PQC attestations, and verification instructions. Independently verifiable without Kevros access. Cost: $0.05 per call.
shallow
check-peer
Check another agent's trust score and governance history. Returns trust score (0-100), chain length, attestation count, and tier. Free, no API key needed.
shallow
health
Check the governance gateway health status. Free.
shallow
status
Check your current usage and quota: calls used, calls remaining, tier, rate limits, and billing status. Free.
shallow
verify
Verify an action against policy bounds before executing it. Returns ALLOW (proceed), CONSTRAIN (proceed with modified values; emitted on the wire as the legacy value CLAMP - both refer to the same verdict, CONSTRAIN is the public name), or DENY (stop). Every verification is recorded in a hash-chained provenance ledger. Cost: $0.01 per call.
shallow
verify-outcome
Verify that an executed action achieved its declared intent. Closes the loop: intent -> command -> action -> outcome -> verification. Free (included with bind).
shallow
verify-token
Verify a release token from another agent. Confirms the token is authentic, was issued by the Kevros gateway, and remains currently authorized after any halt or mode transition. Free, no API key needed.
shallow

Embed this server’s score

Tool count and median score across every tool in this server’s corpus — honest in a way a single cherry-picked tool’s badge wouldn’t be.

[![Vouch score](https://vouch.tools/api/servers/04f0f287-4c66-4694-89f4-4453979f35a9/badge.svg)](https://vouch.tools/servers/04f0f287-4c66-4694-89f4-4453979f35a9)