halo-record: Tamper-evident audit trails for AI agents: hash-chained Runtime Records, dependency-free, verifiable by anyone

by bkuan001 · MCP Server · ★ 83

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

How to install halo-record

uvx --from halo-record halo demo --serve
pip install halo-record

Taken from the project's README on GitHub. Check the security audit before running it.

Security audit verdict: SAFE · quality 66/100

None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.

agentsai-agentsai-governanceai-securityattestationaudit-logaudit-trailcompliancellmmcp

Quick Facts

Stars83
Forks10
LanguagePython
CategoryMCP Server
LicenseApache-2.0
Quality Score66/100
Last Updated2026-10-03
Created2026-06-11
Platformsmcp, python
Est. Tokens~15k

About halo-record

halo-record Tamper-evident runtime records for AI agents: the audit trail the vendor runs but cannot edit. Every action your agent takes (tool calls, model calls, data access, approvals) becomes one record in an append-only, hash-chained log. Any party can verify the log was never altered, without trusting whoever produced it.

halo-record alternative? Top 6 similar tools

Looking for a halo-record alternative? If you're comparing halo-record with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • Sandcastle by gizmax · ⭐ 83

    Describe what you want. Go home. Sandcastle ships it. 6 AI providers, EU data residency, smart failover, cost

  • rampart by peg · ⭐ 90

    Open-source firewall for AI agents. Policy engine that audits and controls what OpenClaw, Claude Code, Cursor,

  • aigis by killertcell428 · ⭐ 54

    Get Claude Code and other AI agents approved for use at work — deterministic guardrails on every tool call, ta

  • orchestkit by yonatangross · ⭐ 298

    The Complete AI Development Toolkit for Claude Code. 106 skills, 36 agents, 171 hooks. Install `ork` for stabl

  • mcp-server by strands-agents · ⭐ 293

    This MCP server provides documentation about Strands Agents to your GenAI tools, so you can use your favorite

  • Wazuh-MCP-Server by gensecaihq · ⭐ 246

    Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability

More MCP Server Tools

Explore other popular mcp server tools:

View all MCP Server tools →

Popular Python Agent Tools

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse MCP Server tools