Eclipse Herald MCP
Signed Agent Cards, policy-gated delegation, certification before hire.
status: in-developmentclass: mcpAgent-to-Agent Infrastructure
Vendor: Cyan Eclipse Technologies
What it does
- Build and sign A2A Agent Cards (JWS/RS256) for hireable services; JWKS export carries public material only
- Verify foreign cards: signature, body and skill tamper, unsigned cards rejected
- Policy-gated delegation gateway: certify-check before any hire
- AP2-shaped mandates with budget caps and expiry; expired or over-budget delivery refused
- Receipt-on-delivery settlement in a hash-chained ledger (zero-value test credits in v0.1)
- Security Law #1 in code: foreign-agent output is quarantined data, never instructions
Tools
card_build · card_sign · card_verify · gateway_delegate · receipt_list
Platforms
- MCP over stdio
Certification
Bench verdict: CERTIFIED(local)
Certified scope: CERTIFIED(local) — Eclipse Bazaar Test Bench 2026-10-25, 18/19 checks pass, 1 na (U1 auth: stdio process boundary). Run by W-003 (Verity), suites/herald.py.
Not tested:
- Live A2A task endpoints (H2 scope — v0.1 delegates to local stub agents only)
- External counterparty cards / remote JWKS fetch (no network in v0.1)
Bench scorecard (evidence): https://eclipsebazaar.com/cards/eclipse-herald-mcp-2026-10-25.json
Pricing
Free local reference implementation; hosted gateway + certify-before-you-hire service planned (Bazaar P3)
Install / verify
uvx eclipse-herald
Official MCP Registry name: io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/herald
Registry listing: https://registry.modelcontextprotocol.io/v0.1/servers/io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC%2Fherald/versions/0.1.0
Repository: https://github.com/CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-herald-mcp
Verify any MCP server in your client configs against this catalog with bazaar check (Eclipse Bazaar MCP / CLI — see llms.txt).