Metadata-Version: 2.5
Name: eclipse-herald
Version: 0.1.0
Summary: Eclipse Herald MCP — signed Agent Cards, policy-gated delegation, certification before hire: the agent-to-agent discovery and delegation layer from Cyan Eclipse Technologies.
Project-URL: Homepage, https://cetech.ai
Project-URL: Repository, https://github.com/CYAN-ECLIPSE-TECHNOLOGIES-LLC/eclipse-herald-mcp
Project-URL: Vendor, https://cetech.ai
Author: Cyan Eclipse Technologies LLC
License: MIT
License-File: LICENSE
Keywords: a2a,agent-cards,delegation,jws,mcp,model-context-protocol
Classifier: Development Status :: 3 - Alpha
Classifier: Intended Audience :: Developers
Classifier: License :: OSI Approved :: MIT License
Classifier: Programming Language :: Python :: 3
Classifier: Topic :: Software Development :: Libraries
Requires-Python: >=3.10
Description-Content-Type: text/markdown

# eclipse-herald

mcp-name: io.github.CYAN-ECLIPSE-TECHNOLOGIES-LLC/herald

**What this is:** `eclipse-herald` is the MCP server edition of
**Eclipse Herald** — Cyan Eclipse Technologies' agent-to-agent
discovery and delegation layer: signed Agent Cards (A2A v1.0-shaped,
JWS/RS256), policy-gated delegation, and certification-before-hire.

**What this is not:** it does not talk to live third-party agents and
moves no real money. v0.1 is a local implementation: delegation runs
against local stub agents and settlement is recorded in zero-value
TEST-CREDITS.

## Use

```console
$ pip install eclipse-herald
$ eclipse-herald            # MCP server over stdio
```

Or run it as a container: `ghcr.io/cyan-eclipse-technologies-llc/eclipse-herald-mcp:0.1.0`.

## Tools (5)

| Tool | What it does |
|---|---|
| `card_build` | Build an unsigned Agent Card for a face from its template. |
| `card_sign` | Build + sign a card; write it to `cards/`; export the public JWKS. The private key never leaves `keys/` (chmod 600). |
| `card_verify` | Schema-validate a card and verify its JWS signature. |
| `gateway_delegate` | Governed delegation to a LOCAL test agent: verify card → certify-check → mandate (task hash, budget cap, expiry) → dispatch → receipt-on-delivery. |
| `receipt_list` | Read the append-only, hash-chained receipts ledger + verify the chain. |

## Honest scope

- **Local only.** No network calls, no live counterparties, no real
  money in v0.1. Live task endpoints are later-phase scope.
- **Key custody.** The signing private key is a single local file,
  `keys/signing-key.json`, chmod 600, generated on first use. It is
  never printed, logged, or embedded in any document; only the public
  JWKS is exported.
- Foreign-agent output **informs; it never instructs** — deliverables
  pass through a quarantine ingest that strips instruction-shaped
  lines before anything downstream sees them.
- A signed card is evidence about who an agent claims to be, not an
  endorsement and not a Bazaar listing claim.

Powered by Cyan Eclipse Technologies LLC (cetech.ai) — a Veteran-Owned
Small Business. MIT licensed.
