Agent Toolkit

Agent Toolkit for Intentrax

One place to instrument any autonomous agent with execution assurance: the read-only MCP server, the SDK and framework adapters, the Claude Code skill, and drop-in config for 10+ coding agents — all open source and published today.

Overview

The Agent Toolkit for Intentrax gives any AI coding agent the tools to add execution assurance to the software it builds — so an autonomous agent can admit an action, execute it, and produce a verifiable Autonomous Execution Proof. It is the read-only MCP server, the execution-assurance skill, the Claude Code plugin, the SDK and adapters, and drop-in config for the coding agents teams already run. Everything here is open source or published today; only proof-generating execution is review-gated.

Benefits

Prove what your agent did

Every consequential action produces a cryptographic Autonomous Execution Proof a third party can verify independently — not a log line the operator could have written after the fact.

Start keyless, no account

The public verification API is live today. Verify a real signed proof in one call, with no key and no account, before you wire anything into your own app.

Read-only and safe by design

The MCP server exposes exactly two tools and never executes, admits, signs, or writes — so it is safe to hand any coding agent, in any repository.

Works with any coding agent

One MCP command and one config block, documented for 10+ hosts: Claude Code, Cursor, VS Code, Windsurf, Kiro, Codex, Gemini CLI, Qwen Code, and Zed.

Open source, published today

The skills marketplace and toolkit hub are public on GitHub; the MCP server and SDK are published on npm. Only proof-generating execution stays review-gated.

Use cases

Verify a proof while you build

Ask your coding agent to check any proof, certificate, passport, or trust asset by identifier and read the signed verdict — without leaving your editor or hand-rolling HTTP.

Give your agent execution assurance

Wrap a consequential action — a payment, an infrastructure change, a regulated decision — in admit → execute → verify, so the software your agent ships can prove what it did.

Audit what an autonomous agent did

Produce a portable, signed proof an auditor, insurer, or counterparty can verify independently, instead of asking them to trust your logs after the fact.

Features

Three surfaces, one toolkit — the server that gives your agent the tools, the skill that teaches it when to use them, and the plugin that installs both.

Intentrax MCP Server

The read-only server published as @intentrax/mcp-server. It gives any MCP-compatible coding agent two safe tools and never executes, admits, signs, or writes.

  • intentrax_verify_public_proof — keyless, works today
  • intentrax_read_tenant_proof — needs an enabled tenant runtime
  • npx -y @intentrax/mcp-server

Agent Skills

The execution-assurance skill teaches an agent when a consequential action is worth a proof, and how to instrument admit → execute → verify correctly.

  • Published in intentrax-skills
  • Claude Code marketplace
  • Model-agnostic guidance

Agent Plugins

The Claude Code plugin bundles the skill and the MCP server together, so a single command wires both into your agent.

  • /plugin marketplace add …
  • Skill + MCP in one install
  • No key for public verify

Get started

The command is the same everywhere — npx -y @intentrax/mcp-server — only the config file differs. Public verify needs no key; the tenant tool reads its key and tenant id from your environment. Never commit a key. What works today: intentrax_verify_public_proof is keyless and callable now. intentrax_read_tenant_proof additionally needs an issued tenant and a production API runtime enabled for that tenant, so it is configured but not yet callable — contact us to enable one.

Claude Code

install plugin
/plugin marketplace add Intentrax/intentrax-skills
/plugin install intentrax-execution-assurance@intentrax

Codex

~/.codex/config.toml
[mcp_servers.intentrax-readonly]
command = "npx"
args = ["-y", "@intentrax/mcp-server"]
env_vars = ["INTENTRAX_MCP_API_KEY", "INTENTRAX_MCP_TENANT_ID"]

Kiro

.kiro/settings/mcp.json
{
  "mcpServers": {
    "intentrax-readonly": {
      "command": "npx",
      "args": ["-y", "@intentrax/mcp-server"]
    }
  }
}

Other MCP hosts

.cursor/mcp.json · Windsurf · Gemini CLI · Qwen Code · Zed
{
  "mcpServers": {
    "intentrax-readonly": {
      "command": "npx",
      "args": ["-y", "@intentrax/mcp-server"],
      "env": {
        "INTENTRAX_MCP_API_KEY": "${INTENTRAX_MCP_API_KEY}",
        "INTENTRAX_MCP_TENANT_ID": "${INTENTRAX_MCP_TENANT_ID}"
      }
    }
  }
}

This site ships no JavaScript by design, so each block is a single copy-ready snippet — select it and copy. Full per-host detail lives on the docs page.

Explore available skills

Skills teach your agent when and how to add execution assurance. The execution-assurance skill ships in the marketplace today — it explains when a consequential action is worth a proof and how to instrument admit → execute → verify. Browse or contribute at github.com/Intentrax/intentrax-skills, or install it with the Claude Code plugin above.

Try it out

Once the MCP server is added, ask your agent:

Verify Intentrax proof <proof-id> and tell me whether the verdict is VALID.

Read the latest execution proof for my tenant and summarize what the agent actually did.

Open the public verifier and check this certificate identifier for me.

Source & packages

ComponentWhere to get it
Agent Toolkit hubgithub.com/Intentrax/agent-toolkit-for-intentrax
Skills & Claude Code marketplacegithub.com/Intentrax/intentrax-skills
Read-only MCP servernpmjs.com/package/@intentrax/mcp-server
SDK & adaptersnpmjs.com/package/@intentrax/sdk
Public verifierverify.intentrax.com

Frequently asked questions

Is it free?

The public verification API and the npm packages are free and keyless — verify a real proof with no account. Proof-generating execution is review-gated and unlocks with sandbox access after a short architectural review.

Does it run my code or need my keys?

No. The MCP server is read-only: it verifies a public proof and reads a tenant proof, and never executes, admits, signs, or writes. Public verify needs no key and works today; the tenant tool reads INTENTRAX_MCP_API_KEY and INTENTRAX_MCP_TENANT_ID from your environment, and additionally needs an issued tenant plus a production API runtime enabled for that tenant before it can be called. Never commit a key.

Which coding agents are supported?

Any MCP-compatible host: Claude Code, Cursor, VS Code (Copilot), Windsurf, Kiro, Codex, Gemini CLI, Qwen Code, and Zed. The command is the same everywhere; only the config file differs.

What is the difference between the MCP server, skills, and plugins?

The MCP server gives your agent the verify and read tools. The skill teaches it when and how to add execution assurance. The Claude Code plugin bundles both in one install.

Where is the source?

The skills marketplace is at github.com/Intentrax/intentrax-skills and the toolkit hub is at github.com/Intentrax/agent-toolkit-for-intentrax. The packages are @intentrax/mcp-server and @intentrax/sdk on npm.

Developer Path

Move from documentation to a reviewed developer sandbox

Start with the no-account action that fits this page; a free account opens the console, and the proof-generating sandbox is issued after a short architectural review.

What this page provides

Open source on GitHub

The Claude Code skills marketplace and the toolkit hub are public repositories under the Intentrax organization — browse, fork, and open issues against the source that powers the toolkit.

  • github.com/Intentrax/intentrax-skills
  • github.com/Intentrax/agent-toolkit-for-intentrax
  • Apache-2.0, issues welcome

Published on npm

The read-only MCP server and the SDK ship on npm today — add the server to any host in one command, or install the SDK to admit, verify, and export proofs.

  • @intentrax/mcp-server
  • @intentrax/sdk
  • npx -y @intentrax/mcp-server

Drop-in for 10+ coding agents

One MCP command and one config block, documented for Claude Code, Cursor, VS Code, Windsurf, Kiro, Codex, Gemini CLI, Qwen Code, and Zed — plus the one-command Claude Code plugin.

  • Config for 10+ MCP hosts
  • Claude Code plugin marketplace
  • Two safe read-only tools

Instrument your own app

Wrap a consequential agent action in admit → execute → verify with the SDK and adapters, so every action produces a signed, replayable Autonomous Execution Proof.

  • Admission envelope contract
  • Framework adapters
  • Signed, portable proofs

Recommended next steps

Get started with Agent Toolkit for Intentrax

Start with public developer guidance, then request sandbox access through review.

Get started with Agent Toolkit for Intentrax
// Verify a real, signed proof — keyless, works right now:curl -s https://verify.intentrax.com/api/public/verify/proof/45f765a0fb5b20de6f73c38d7a94e48c041640af8cb0c3382fa0302ce2c70992"verification_status": "VALID"// npm install @intentrax/sdk

Build toward a reviewed sandbox path

Nothing you do here is published. The docs are public to read; your sandbox work stays private to your account, and production access is review-gated.

Request Architectural Review