World Monitor
Real-time global intelligence on conflict, markets, energy, trade, shipping and cyber. 102 tools.
Cryptographically verifiable receipts of an agent's delegated work, verified offline.
Pick the AI app you use, then copy the settings.
Passed 3/3 checks · Runs on your computer
First: which AI do you use?
Pick your app and the steps appear below.
Works with Claude, with some setup first
You need a Sequesign key (create it on the maker’s site) · Install Node.js on your computer first (one time) · Only the Claude desktop app (Windows or Mac), not the web or phone
One time only; it works for every server that needs Node.js
Open the maker’s site, sign up and create an API key for the next step. Check the maker’s site for pricing and free plans.
SettingsDeveloperEdit Config
{
"mcpServers": {
"sequesign": {
"command": "npx",
"args": [
"-y",
"@sequesign/mcp"
],
"env": {
"SEQUESIGN_MODE": "your-value",
"SEQUESIGN_API_KEY": "your-value",
"SEQUESIGN_AGENT_PRIVATE_KEY": "your-value",
"SEQUESIGN_PACKAGE_DIR": "your-value",
"SEQUESIGN_TEMPLATE_REGISTRY_URL": "your-value",
"SEQUESIGN_TEMPLATE_REGISTRY_TOKEN": "your-value"
}
}
}
}Paste the key only into the app’s field, never into a chat or to anyone
Use Sequesign and tell me what you can do for me, then show me one thing✓ If Claude says it is using Sequesign or shows a Sequesign tool in the answer, you are connected
Menu names checked against Anthropic’s help page on Nov 11, 2026 · your screen may differ slightly by app version
ChatGPT cannot connect Sequesign yet
Sequesign runs on your computer, but ChatGPT can only connect servers that run on the web
A · Use an app that can connect Sequesign
B · Others in Other that work with ChatGPT
Picked from the most used in the same category, only ones that connect by address with no key
Works with Claude Code, with some setup first
You need a Sequesign key (create it on the maker’s site) · Install Node.js on your computer first (one time)
One time only; it works for every server that needs Node.js
Open the maker’s site, sign up and create an API key for the next step. Check the maker’s site for pricing and free plans.
Mac: press Command+Space and type Terminal · Windows: open PowerShell
claude mcp add --scope user sequesign --env SEQUESIGN_MODE=your-value --env SEQUESIGN_API_KEY=your-value --env SEQUESIGN_AGENT_PRIVATE_KEY=your-value --env SEQUESIGN_PACKAGE_DIR=your-value --env SEQUESIGN_TEMPLATE_REGISTRY_URL=your-value --env SEQUESIGN_TEMPLATE_REGISTRY_TOKEN=your-value -- npx -y @sequesign/mcpReplace “your-value” with your key before pressing Enter
Paste the key only into the app’s field, never into a chat or to anyone
You should see Sequesign listed as connected
Use Sequesign and tell me what you can do for me, then show me one thing✓ If Claude Code says it is using Sequesign or shows a Sequesign tool in the answer, you are connected
Menu names checked against Anthropic’s help page on Nov 11, 2026 · your screen may differ slightly by app version
Works with Cursor, with some setup first
You need a Sequesign key (create it on the maker’s site) · Install Node.js on your computer first (one time)
One time only; it works for every server that needs Node.js
Open the maker’s site, sign up and create an API key for the next step. Check the maker’s site for pricing and free plans.
In the Sequesign settings, SEQUESIGN_MODE, SEQUESIGN_API_KEY, SEQUESIGN_AGENT_PRIVATE_KEY, SEQUESIGN_PACKAGE_DIR, SEQUESIGN_TEMPLATE_REGISTRY_URL, SEQUESIGN_TEMPLATE_REGISTRY_TOKEN is empty; add your key and save
Paste the key only into the app’s field, never into a chat or to anyone
Use Sequesign and tell me what you can do for me, then show me one thing✓ If Cursor says it is using Sequesign or shows a Sequesign tool in the answer, you are connected
Menu names checked against Cursor’s help page on Nov 11, 2026 · your screen may differ slightly by app version
Works with VS Code, with some setup first
You need a Sequesign key (create it on the maker’s site) · Install Node.js on your computer first (one time)
One time only; it works for every server that needs Node.js
Open the maker’s site, sign up and create an API key for the next step. Check the maker’s site for pricing and free plans.
In the Sequesign settings, SEQUESIGN_MODE, SEQUESIGN_API_KEY, SEQUESIGN_AGENT_PRIVATE_KEY, SEQUESIGN_PACKAGE_DIR, SEQUESIGN_TEMPLATE_REGISTRY_URL, SEQUESIGN_TEMPLATE_REGISTRY_TOKEN is empty; add your key and save
Paste the key only into the app’s field, never into a chat or to anyone
Use Sequesign and tell me what you can do for me, then show me one thing✓ If VS Code says it is using Sequesign or shows a Sequesign tool in the answer, you are connected
Menu names checked against VS Code’s help page on Nov 11, 2026 · your screen may differ slightly by app version
Claude Code
claude mcp add --scope user sequesign --env SEQUESIGN_MODE=your-value --env SEQUESIGN_API_KEY=your-value --env SEQUESIGN_AGENT_PRIVATE_KEY=your-value --env SEQUESIGN_PACKAGE_DIR=your-value --env SEQUESIGN_TEMPLATE_REGISTRY_URL=your-value --env SEQUESIGN_TEMPLATE_REGISTRY_TOKEN=your-value -- npx -y @sequesign/mcpClaude Desktop (claude_desktop_config.json)
{
"mcpServers": {
"sequesign": {
"command": "npx",
"args": [
"-y",
"@sequesign/mcp"
],
"env": {
"SEQUESIGN_MODE": "your-value",
"SEQUESIGN_API_KEY": "your-value",
"SEQUESIGN_AGENT_PRIVATE_KEY": "your-value",
"SEQUESIGN_PACKAGE_DIR": "your-value",
"SEQUESIGN_TEMPLATE_REGISTRY_URL": "your-value",
"SEQUESIGN_TEMPLATE_REGISTRY_TOKEN": "your-value"
}
}
}
}Cursor (~/.cursor/mcp.json)
{
"mcpServers": {
"sequesign": {
"command": "npx",
"args": [
"-y",
"@sequesign/mcp"
],
"env": {
"SEQUESIGN_MODE": "your-value",
"SEQUESIGN_API_KEY": "your-value",
"SEQUESIGN_AGENT_PRIVATE_KEY": "your-value",
"SEQUESIGN_PACKAGE_DIR": "your-value",
"SEQUESIGN_TEMPLATE_REGISTRY_URL": "your-value",
"SEQUESIGN_TEMPLATE_REGISTRY_TOKEN": "your-value"
}
}
}
}VS Code (mcp.json)
{
"servers": {
"sequesign": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@sequesign/mcp"
],
"env": {
"SEQUESIGN_MODE": "your-value",
"SEQUESIGN_API_KEY": "your-value",
"SEQUESIGN_AGENT_PRIVATE_KEY": "your-value",
"SEQUESIGN_PACKAGE_DIR": "your-value",
"SEQUESIGN_TEMPLATE_REGISTRY_URL": "your-value",
"SEQUESIGN_TEMPLATE_REGISTRY_TOKEN": "your-value"
}
}
}
}SEQUESIGN_MODE envSEQUESIGN_API_KEY secret envSEQUESIGN_AGENT_PRIVATE_KEY secret envSEQUESIGN_PACKAGE_DIR envSEQUESIGN_TEMPLATE_REGISTRY_URL envSEQUESIGN_TEMPLATE_REGISTRY_TOKEN secret envThese settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
npm: @sequesign/mcpBased on how this server connects and on each app’s own docs, checked Nov 10, 2026.
Run on your computer in
ClaudeGooseLM StudioMsty StudioCherry StudioCursorVS Code + GitHub CopilotVisual StudioWindsurf (Devin Desktop)ZedKiroClineContinueJetBrains AI AssistantClaude CodeCodex CLIGemini CLIOpenCodenodecodeWarpLibreChatRaycast
Runs on your computer; the tool list appears in your AI app after you install it.
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 12, 2026
The registry name was verified with the GitHub account Sequesign, which owns the repo
Code last changed 3 months ago
Uses Apache-2.0
This one runs on your computer; there is no internet endpoint
Runs on your computer and uses local settings instead
Runs on your computer; we can only read tool lists from internet endpoints
Ask, share a tip or report that it does not work. Sorted by what people marked helpful.
No posts yet. Be the first to ask or share.
Posts here are written by users, not the PopNx team.
No reviews yet
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
It passed 3 of 3 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
You need to fill in: SEQUESIGN_API_KEY, SEQUESIGN_AGENT_PRIVATE_KEY, SEQUESIGN_TEMPLATE_REGISTRY_TOKEN
It runs on your computer. Your AI app starts it when needed, and data does not pass through the maker’s servers (unless it calls an online service itself).
The GitHub repo last changed 3 months ago, and the latest version (0.4.1) reached the registry 3 months ago.
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. You also need Node.js on your computer.
In the same category: World Monitor, Claude Flow, Windmill
Servers in the same category from other makers, sorted by stars.
Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
Real-time global intelligence on conflict, markets, energy, trade, shipping and cyber. 102 tools.
AI orchestration with hive-mind swarms, neural networks, and 87 MCP tools for enterprise dev.
Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.
A Model Context Protocol server for Sequesign — let an MCP-capable agent produce a cryptographically verifiable receipt of its own delegated work, then verify it offline.
It is a thin local-stdio wrapper over @sequesign/sdk. The agent's signing key never leaves the machine: in direct mode the SDK signs each action locally and the hosted witness only co-signs a hash.
| Tool | What it does |
|---|---|
sequesign_start_session | Open a recording session (one signed action chain). Returns a sessionId (the receipt id) used by every other tool. Pass a policyContext object to bind the receipt to a policy (reaches L3_POLICY_BOUND). Optional mode (direct/managed) overrides the server default per session. |
sequesign_record_action | Append a signed action to the chain. evidence is hashed and signed. Returns the actionId. |
sequesign_record_approval | Attach a locally signed approval for a recorded action (e.g. a human or agent reviewer signing off). |
sequesign_record_counterparty_attestation | Attach a counterparty's signed confirmation of a recorded action (e.g. a vendor confirming an amount). The SDK derives the content binding from the attested action. |
sequesign_approve_receipt | Attach an independently-witnessed approval to an *already-sealed* receipt (a deferred satellite). For a reviewer — human or another agent — signing off after the fact. The approver must be distinct from the recording agent. |
sequesign_countersign_receipt | Attach an independently-witnessed counterparty confirmation to an *already-sealed* receipt (a deferred satellite), bound to a specific action. |
sequesign_finalize | Seal + witness the receipt and run the SDK's own verification. Closes the session. |
sequesign_verify | Verify a sealed receipt offline. Three modes: integrity self-check of the local package (default); third-party external check when you pass the witness's published keys; or pass receiptUrl to verify the broker-stored receipt (the authoritative copy carrying the registered identity), auto-fetching the published witness + registration anchors. |
The server default is SEQUESIGN_MODE, but sequesign_start_session accepts a mode argument (direct or managed) so one running server can do both without editing config. A mode: "managed" session still requires the managed secrets (SEQUESIGN_API_KEY + SEQUESIGN_AGENT_PRIVATE_KEY); the call fails fast if they're absent.
In managed mode the broker stamps the registered agent_identity_attestation into the stored receipt, not the local envelope — so a local verify reads self_asserted. Pass the receipt_url from finalize as receiptUrl to sequesign_verify: it fetches the stored receipt (using SEQUESIGN_API_KEY), verifies it against your local package, and auto-fetches the published witness and registration anchors, so the result shows external trust and the registered identity.
sequesign_approve_receipt and sequesign_countersign_receipt attest to a receipt that's already finalized, without modifying it. Each produces a detached satellite that's bound to the sealed receipt by hash, independently witnessed *at its own time*, and written to the package's attestations.jsonl sidecar; the verifier folds a valid satellite into the same approval/counterparty leg as an in-receipt one. They take the sealed `packageDirectory` (not a live session), so a *different* party — even a different model on a different machine, as long as it has the package — can approve or countersign later. This is the basis for a multi-party flow: one agent records and seals the work, a second party approves it, a third confirms it — three independent, timestamped signatures on one receipt.
Binding to the registered (stored) receipt. By default a satellite binds to the local receipt.json. In managed mode the broker-stored copy carries the registered agent_identity_attestation (a different hash), so pass the receipt_url as `receiptUrl` to approve_receipt / countersign_receipt: the tool fetches the stored receipt (authenticated, origin-allowlisted) and binds the satellite to it. A later sequesign_verify --receiptUrl then shows the registered identity AND the folded approval/counterparty legs on one receipt. Set the satellite's mode to match how the receipt was sealed.
Convergence note (cross-platform). The broker does not store satellites — a sealed satellite is appended to the local package's attestations.jsonl. So for parties on *different* machines/platforms to converge on one verifiable receipt, the .sequesign package must travel between them (an orchestrator moves it, each appends its satellite). Independent submission with server-side satellite storage is a future broker capability.
sequesign_record_approval and sequesign_record_counterparty_attestation mint an ephemeral key when you don't pass one, so the leg verifies as present_unverified. To get a present_verified (vouched) leg, enroll the party's key with the platform first and pass both the enrolled private key PEM and the returned identityProofRef. Then sequesign_verify flips the leg to present_verified when given the platform's published registration keys.
All configuration is via environment variables:
| Variable | Default | Notes |
|---|---|---|
SEQUESIGN_MODE | direct | Default transport: direct (local key, independent witness co-signs) or managed (broker). Overridable per session via the mode tool argument. |
SEQUESIGN_WITNESS_URL | https://witness.sequesign.com | Direct-mode witness. |
SEQUESIGN_BROKER_URL | https://broker.sequesign.com | Managed-mode broker. |
SEQUESIGN_DASHBOARD_API_URL | https://dashboard-api.sequesign.com | Source of the published registration keys for the receiptUrl verify path. |
SEQUESIGN_RECEIPT_LIBRARY_URL | https://library.sequesign.com | Receipt-store origin. The API key is forwarded only to this or the broker origin when fetching a receiptUrl; any other origin is rejected before the key is sent (key-exfiltration guard). |
SEQUESIGN_API_KEY | — | Required in managed mode (write-class key). In direct mode it's passed to the witness too — the hosted witness authenticates the signing POST, so direct mode needs it unless you point SEQUESIGN_WITNESS_URL at a witness that allows unauthenticated signing. |
SEQUESIGN_TIER | hosted | Managed tier: hosted, hash-only, or ephemeral. |
SEQUESIGN_AGENT_PRIVATE_KEY | — | Ed25519 PKCS#8 PEM for the agent key. In direct mode, if unset a fresh ephemeral key is minted per session (identity reads self_asserted). Required in managed mode — it must be the key your API key is registered to (the broker rejects any other agent key). |
SEQUESIGN_PACKAGE_DIR | /sequesign-mcp | Where receipt packages are written. |
Sessions are held in memory for the life of the process. A
sessionId
does not survive a server restart or
sequesign_finalize.
.mcpb) — recommendedThe one-click path: download sequesign.mcpb from the GitHub releases and open it with Claude Desktop (Settings → Extensions → install from file). Desktop renders a setup form from the manifest's user_config; fill in:
| Field | Notes |
|---|---|
| Mode | direct (default) or managed. |
| API key | Your write-class key. Required for managed; in direct it authenticates the hosted witness. Stored in your OS keychain. |
| Agent private key (PEM) | Ed25519 PKCS#8 PEM. Required in managed (must match the key your API key is registered to); leave blank in direct to mint an ephemeral key per session. Stored in your OS keychain. |
| Receipt package directory | Where sealed packages are written. Blank → a temp directory. |
Secrets go to the OS keychain (never the manifest), and blank optional fields fall back to their defaults. The bundle is self-contained — no npm/node project setup required. Where do the API key and agent key come from? See Getting your keys below.
Building the `.mcpb` from source:
npm run build:mcpb -w @sequesign/mcp
The build bundles the server and all dependencies into a single file with esbuild and copies the protocol registry/schemas/profiles next to it, then packs and validates via @anthropic-ai/mcpb. Attach the resulting .mcpb (and its printed SHA-256) to a GitHub release.
Releasing to npm and the official MCP registry is automated — see
For non-Desktop MCP clients (or if you prefer managing config yourself), install from npm and configure via environment variables — see Usage below.
The two secrets — your API key and your agent private key — come from the Sequesign dashboard's Create-API-key flow. The key you use in managed mode must be the one registered to your API key.
Create an API key in the dashboard (Settings → API keys → Create key). Registration is off by default, so you must opt in:
Paste both into the setup form (or set SEQUESIGN_API_KEY and SEQUESIGN_AGENT_PRIVATE_KEY). Reuse them across installs and machines — you do not make a new key each time.
Bring your own key (advanced). Instead of "Generate keypair", you can pick "Bring your own public key (advanced)" and paste the public PEM of a key you generated yourself (e.g. in an HSM). You hold the private key; the platform records the public half. Fully supported in managed mode.
The broker accepts only the agent key your API key is registered to —
whether the dashboard generated it or you brought your own. An unregistered
key (generated locally and never registered) is rejected
(
agent_public_key_not_registered). That's the rule: the key must be on file
against your API key, and that binding happens at API-key creation.
Verifying the broker-stored receipt then shows a registered agent identity (see the receiptUrl verify path below).
Direct mode has no account and no registration. The agent key only proves *continuity* (the same signer produced these receipts), not a platform-vouched identity. Two choices:
self_asserted key.openssl genpkey -algorithm ed25519). It stays self_asserted unless that key is the one registered to your `SEQUESIGN