OpenClasp

# OpenClasp

> Where agents connect, verify, and coordinate safely.

OpenClasp is a general-purpose assurance layer for agent-to-agent communication. It does not replace A2A, MCP, OAuth, or an agent framework. It adds signed identity and delegation, explicit interaction contracts, deterministic policy checks, evidence-backed clues, consented mediation, signed receipts, and task-specific behavioural history.

Raw conversations remain local by default. OpenClasp learns from permitted structured events and verified outcomes—not from a universal trust score or a marketplace of private conversations.

## Five-minute quickstart

Requirements: Node.js 24+ and Corepack.

```bash

corepack pnpm install

corepack pnpm schemas

corepack pnpm test

corepack pnpm demo

```

Run the local API and dashboard:

```bash

corepack pnpm dev

```

- API: `http://localhost:3100`

- OpenAPI: `http://localhost:3100/openapi.json`

- Dashboard: `http://localhost:5173`

- MCP stdio server: `corepack pnpm mcp`

- Remote MCP after deployment: `https://<deployment>/mcp`

The remote MCP endpoint requires Descope OAuth. Configure `DESCOPE_PROJECT_ID`,

`DESCOPE_ISSUER` (or `DESCOPE_MCP_ISSUER`), and `OPENCLASP_MCP_URL`. Compatible MCP clients discover the

authorization server through `/.well-known/oauth-protected-resource`, open the hosted login and

consent page, and retry with an audience-bound bearer token. The local stdio server remains for

development and obtains credentials through its host environment.

The hosted account application is available at `https://openclasp.vercel.app/login`. After signing

in, users can manage connected agents, review structured interaction history and signed receipts,

inspect task-specific behavioural profiles, copy the MCP connection URL, and control retention,

evidence sharing, and network-contribution consent. Hosted account records are isolated by the

validated Descope subject and stored in Neon Postgres. Raw conversation bodies are not part of the

hosted record schema.

The provisioned Descope project initially issues `full-access`. Before a public beta, configure and

enforce separate `profile:read`, `interaction:write`, `feedback:write`, `agent:manage`, and

`network:contribute` scopes in Descope.

## What the demo proves

The deterministic demo creates requester/provider/subagent identities, verifies scoped delegation, signs a contract, sends an A2A-shaped message with the OpenClasp extension, keeps its raw body local, challenges a contradicted claim, blocks a deterministic violation, mediates with mutual consent, verifies bilateral feedback and receipts, updates task-specific history, and reduces confidence for a new agent version. It also rejects signature tampering, expired delegation, replay, and a tampered receipt.

## Packages

- `protocol`: schemas, canonical hashing, and Ed25519 signing.

- `core`: policy, lineage, facts, mediation, receipts, feedback, and behavioural profiles.

- `persistence`: local SQLite audit storage and hosted Neon Postgres account storage.

- `sdk`: HTTP client and local signed-object helpers.

- `sidecar`: A2A extension metadata verification, forwarding, and privacy filtering.

- `mcp-server`: the 13 documented OpenClasp MCP tools.

- `apps/api`, `apps/demo`, `apps/dashboard`: runnable surfaces.

## Quality gate

```bash

corepack pnpm format:check

corepack pnpm lint

corepack pnpm typecheck

corepack pnpm test

corepack pnpm build

corepack pnpm demo

```

This repository is Apache-2.0 licensed. Production identity proofing, cross-platform network intelligence, Sybil/collusion models, hosted search indexes, and private risk-model configuration are intentionally deferred.