Back to Browse

Rco Records MCP Server

Developer ToolsLow Risk9.3MCP RegistryRemote
Free

Server data from the Official MCP Registry

The record of what the agent relied on: a signed, chained receipt per cleared read. Verify by id.

About

The record of what the agent relied on: a signed, chained receipt per cleared read. Verify by id.

Remote endpoints: streamable-http: https://mcp.rco-records.ai/mcp

Security Report

9.3
Low Risk9.3Low Risk

Valid MCP server (1 strong, 0 medium validity signals). 1 known CVE in dependencies (0 critical, 1 high severity) Imported from the Official MCP Registry. Trust signals: trusted author (5/5 approved).

5 tools verified · Open access · 1 issue found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Found in Source Code

Found by scanning the linked source code. This listing connects to a hosted endpoint, so none of this runs on your machine: it describes what the server software does where it is hosted.

file_system

Applies to the server that hosts this plugin, not to your machine.

HTTP Network Access

Connects to external APIs or services over the internet.

How to Connect

Remote Plugin

No local installation needed. Your AI client connects to the remote endpoint directly.

Add this to your MCP configuration to connect:

{
  "mcpServers": {
    "io-github-allooloo-rco-records": {
      "url": "https://mcp.rco-records.ai/mcp"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

RCO Records — Record of Cleared Orders

RCO — the record of what the agent relied on. Every read, receipted.

Every answer the Allooloo record gives a regulated agent is receipted: one signed receipt per cleared read, chained to the one before, verifiable by anyone against a published key. The receipt is the agent's alibi.

Standard held by Allooloo Technologies Corp. · Open standard, MIT licence. — https://allooloo.ai

What is in this repository

PathWhat
SPEC.mdReceipt v1 — the frozen spec — and the v0 history format
sdk/typescript/verify.tsreference verify(), verifyChain(), carry() — WebCrypto only
sdk/python/rco_verify.pyreference verify(), verify_chain() — needs cryptography
sdk/go/verify.goreference Verify() — standard library only
worker/, public/, wrangler.toml, schema.sql, rails/the door as it runs (Cloudflare Worker + D1)

The spec and the reference verify() ship under MIT (LICENSE). Nothing else is licensed: the chain, the keys, the door and the Register are operated by Allooloo, not licensed.

Verify a receipt

node sdk/typescript/cli.ts rco:4xvpzgxxmno5bfxxmv5h
python sdk/python/rco_verify.py rco:4xvpzgxxmno5bfxxmv5h

verify(receipt, jwks) is a pure function: recompute hash (and id for v1), check sig against kid. A receipt verifies forever without asking Allooloo anything.

Reviews

No reviews yet

Be the first to review this server!