Server data from the Official MCP Registry
Trust + coordination infrastructure for the agent economy. 27 tools across 6 Colber modules.
About
Trust + coordination infrastructure for the agent economy. 27 tools across 6 Colber modules.
Security Report
The Colber MCP server is a well-structured open-core project with reasonable security practices. The codebase properly handles authentication via API keys loaded from environment variables, uses cryptographic signing with Ed25519, and demonstrates good code organization. Minor quality concerns exist around broad exception handling and error message exposure, but no critical vulnerabilities or malicious patterns were detected. Permissions are appropriate for a developer tool that integrates with remote APIs. Supply chain analysis found 4 known vulnerabilities in dependencies (1 critical, 2 high severity). Package verification found 1 issue (1 critical, 0 high severity).
5 files analyzed · 9 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
What You'll Need
Set these up before or after installing:
Environment variable: COLBER_BASE_URLS
Environment variable: COLBER_AUTH_TOKEN
Environment variable: COLBER_LOG_LEVEL
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-obi49-colber-mcp": {
"env": {
"COLBER_BASE_URLS": "your-colber-base-urls-here",
"COLBER_LOG_LEVEL": "your-colber-log-level-here",
"COLBER_AUTH_TOKEN": "your-colber-auth-token-here"
},
"args": [
"-y",
"colber"
],
"command": "npx"
}
}
}Documentation
View on GitHubFrom the project's GitHub README.
Colber
Trust, coordination & continuity — for the agent economy. Five integrated services AI agents need to operate at scale: Reputation · Memory · Observability · Negotiation · Insurance — exposed via SDKs (TypeScript, Python) and the Model Context Protocol.
🌐 https://colber.dev · 📦 npm @colber/* · 🐍 PyPI colber-sdk · 🔌 MCP-native
What is Colber?
Colber is the infrastructure layer of trust, coordination and continuity for the agent economy. The hosted platform at https://colber.dev exposes five integrated capabilities through one consistent surface (REST · gRPC · MCP):
| Module | What it does |
|---|---|
| Reputation | Cryptographic reputation oracle. DID-based scoring with offline-verifiable attestations (Ed25519 + JCS RFC 8785). |
| Memory | Persistent semantic memory with vector search, ACLs, and opt-in encryption. |
| Observability | Distributed A2A tracing and logging. ClickHouse-backed, OpenTelemetry-compatible. |
| Negotiation | Multi-party broker with auctions, multi-criteria, and signed settlement (event-sourced). |
| Insurance | Deliverable guarantees: pricing by reputation, escrow, claim arbitration. |
Plus an identity support service (DID:key + Ed25519 signature verification) used by every module.
🏗️ Status — v1 shipped. All five modules + identity are live on
https://colber.dev, end-to-end tested (23/23 green), with 27 MCP tools published.
What's in this repo (open core)
This repository is the public open-core of Colber. It contains the code you need to integrate with Colber from your own agent, plus the public protocol contract:
apps/
├── sdk-typescript/ → npm @colber/sdk
├── sdk-python/ → PyPI colber-sdk
├── mcp-server/ → npm @colber/mcp (CLI: npx -y @colber/mcp)
└── site/ → https://colber.dev (landing source)
packages/
├── core-types/ → Public protocol types (errors, envelopes, DIDs)
├── core-crypto/ → Client-side crypto helpers (DID:key, Ed25519, JCS canonicalisation)
├── core-config/ → Env-var validation utilities (zod schemas)
└── core-logger/ → Structured logging utilities (pino + traceId)
tooling/ → Shared TS / ESLint configs
.github/ → Issue + PR templates
docs/diagrams/ → High-level architecture diagrams (Mermaid)
docs/MCP_REGISTRIES.md → Submission templates for Anthropic, Smithery, mcp.so
Everything in this repo is Apache-2.0. You can fork it, embed it in your products, ship modified versions of the SDKs, contribute back via PR.
Not in this repo
The server-side implementation of the five modules + identity (the actual Reputation engine, Memory vector index, Observability ingestion, Negotiation event store, Insurance escrow logic, operator console) is proprietary and runs on https://colber.dev. To use it, you call the hosted endpoints from the SDKs or the MCP server. This is the standard open-core model used by Stripe, Datadog, Auth0.
Quick start
TypeScript
npm install @colber/sdk
import { ColberClient } from '@colber/sdk';
const colber = new ColberClient({ baseUrl: 'https://api.colber.dev' });
const score = await colber.reputation.score('did:key:z6Mk...');
console.log(score);
Python
pip install colber-sdk
from colber import ColberClient
colber = ColberClient(base_url="https://api.colber.dev")
score = colber.reputation.score("did:key:z6Mk...")
print(score)
MCP — Claude Desktop / Claude Code / Cline / Continue
Add to your MCP client configuration (e.g. ~/Library/Application Support/Claude/claude_desktop_config.json on macOS):
{
"mcpServers": {
"colber": {
"command": "npx",
"args": ["-y", "@colber/mcp"]
}
}
}
You instantly get 27 Colber tools — reputation lookups, memory search, signed feedback, multi-party negotiations, insurance quotes, and more — directly available to your AI assistant.
See apps/mcp-server/README.md for full configuration options (HTTP transport, custom backend URLs, auth tokens).
Verifying reputation attestations offline
One of Colber's strongest properties: every reputation score comes with a cryptographic attestation that can be verified without contacting Colber, using only the platform's public key.
import { ColberClient } from '@colber/sdk';
import { verifyAttestation, COLBER_PLATFORM_PUBLIC_KEY } from '@colber/sdk/crypto';
const colber = new ColberClient({ baseUrl: 'https://api.colber.dev' });
const score = await colber.reputation.score('did:key:z6Mk...');
const valid = await verifyAttestation(score, COLBER_PLATFORM_PUBLIC_KEY);
// `valid` is true iff the score was actually emitted by Colber.
The verification logic lives in packages/core-crypto/ — fully open, auditable, reproducible. You don't have to trust our server to trust the score.
Standards we speak
Colber is built on top of open standards rather than reinventing them:
- MCP — Model Context Protocol (
@colber/mcpships 27 tools) - A2A — Agent-to-Agent observability
- DID — W3C Decentralized Identifiers (
did:key, Ed25519 multibasez6Mk…) - JCS RFC 8785 — JSON canonicalization for signed payloads
- Ed25519 — signatures (via
@noble/ed25519) - OpenTelemetry — observability export (planned)
- EIP-712 — on-chain signatures (planned for INSURANCE on-chain variant)
Architecture overview
flowchart TB
classDef sdk fill:#F8FAFC,stroke:#475569,color:#0F172A
classDef hosted fill:#EFF4FF,stroke:#1E3A8A,color:#1E3A8A
classDef this fill:#FFFBEB,stroke:#A16207,color:#78350F
User["🧑 Your agent / app"]:::sdk
SDK["@colber/sdk · colber-sdk"]:::this
MCP["@colber/mcp"]:::this
User --> SDK
User --> MCP
SDK -->|HTTPS| API
MCP -->|HTTPS| API
subgraph hosted["Colber hosted platform — colber.dev"]
API["api.colber.dev (REST · gRPC)"]:::hosted
REP["Reputation"]:::hosted
MEM["Memory"]:::hosted
OBS["Observability"]:::hosted
NEG["Negotiation"]:::hosted
INS["Insurance"]:::hosted
ID["Identity"]:::hosted
API --> ID
API --> REP
API --> MEM
API --> OBS
API --> NEG
API --> INS
end
For the high-level functional architecture, see docs/diagrams/.
Local development
This repo is a Turborepo + pnpm workspace.
Prerequisites
- Node.js 22+ (
.nvmrc) - pnpm 9.12+ (
corepack enable && corepack prepare pnpm@9.12.3 --activate)
Install + checks
git clone https://github.com/Obi49/Colber.git
cd Colber
pnpm install
pnpm typecheck # 11/11 green
pnpm test # 11/11 green
pnpm lint # 0 errors, 0 warnings
pnpm build # 7/7 green
Working on the SDK
pnpm --filter @colber/sdk dev # watch build
pnpm --filter @colber/sdk test:watch # watch tests
Running the MCP server locally
pnpm --filter @colber/mcp build
node apps/mcp-server/dist/server.js # stdio (default)
node apps/mcp-server/dist/server.js --transport=http --port=14080
Running the landing locally
pnpm --filter @colber/site dev
# → http://localhost:3001
Contributing
We welcome contributions to the open-core surface — SDKs, MCP server, public types, the website, and documentation. See CONTRIBUTING.md for the workflow (Conventional Commits, DCO, no --no-verify).
For security issues, please follow SECURITY.md — do not file public issues.
License
Apache License 2.0 — see NOTICE for attribution and project history (the project was previously named AgentStack, then Praxis, before being renamed Colber in May 2026).
The hosted services on colber.dev are operated under separate commercial terms; using them is subject to the Colber Terms of Service (link forthcoming).
Author
Johan / Colber — dof1502.mwm27@gmail.com
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Git
Freeby Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
mcp-creator-python
Freeby mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
MarkItDown
Freeby Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
FinAgent
Freeby mcp-marketplace · Finance
Free stock data and market news for any MCP-compatible AI assistant.
