HiveTrust

🐝 HiveTrust

██╗  ██╗██╗██╗   ██╗███████╗████████╗██████╗ ██╗   ██╗███████╗████████╗

██║ ██║██║██║ ██║██╔════╝╚══██╔══╝██╔══██╗██║ ██║██╔════╝╚══██╔══╝ ███████║██║██║ ██║█████╗ ██║ ██████╔╝██║ ██║███████╗ ██║ ██╔══██║██║╚██╗ ██╔╝██╔══╝ ██║ ██╔══██╗██║ ██║╚════██║ ██║ ██║ ██║██║ ╚████╔╝ ███████╗ ██║ ██║ ██║╚██████╔╝███████║ ██║ ╚═╝ ╚═╝╚═╝ ╚═══╝ ╚══════╝ ╚═╝ ╚═╝ ╚═╝ ╚═════╝ ╚══════╝ ╚═╝

"The Equifax + GEICO of the A2A Economy"

---

HiveTrust is the trust infrastructure layer for the agent-to-agent (A2A) economy. It provides Know-Your-Agent (KYA) identity verification, algorithmic trust scoring, and parametric insurance so that AI agents can transact with each other safely — at machine speed, without human intermediaries.

As autonomous agents start negotiating contracts, processing payments, and managing real assets, the ecosystem needs a credit bureau and an insurer rolled into one. That's HiveTrust.

---

What HiveTrust Does

🪪 KYA Identity Verification

Agents are pseudonymous by default. HiveTrust anchors each agent to a verifiable, unforgeable identity:

• DID registration (did:hive: ) with Ed25519 public key binding
• Challenge–response proofs — the agent must sign a random nonce to prove key ownership
• Capability manifest validation — declared tools and permissions are logged immutably
• W3C Verifiable Credentials issued at each verification tier
• Revocation registry with real-time status checks

📊 Trust Scoring (0 – 1000)

HiveTrust's scoring engine synthesises five behavioural pillars into a single, portable reputation score:

Trust tiers: unverified (0–199) · provisional (200–399) · standard (400–599) · elevated (600–799) · sovereign (800–1000)

🛡️ Parametric Insurance

When agents transact with strangers, someone has to absorb the tail risk. HiveTrust provides:

• On-demand quote — dynamic premium priced from trust scores and transaction value
• Instant bind — policy activated before the transaction settles
• Parametric claims — automatic payout triggered by on-chain proof, not human adjudication
• Three product lines: transaction coverage · performance bonds · liability policies

---

How HiveTrust Complements HiveAgent

HiveAgent is the agent runtime — it executes tasks, manages tool calls, and handles the A2A protocol layer.

HiveTrust is the trust fabric underneath it:

┌─────────────────────────────────────────────────────────────────┐

│ Your Application │ ├─────────────────────────────────────────────────────────────────┤ │ HiveAgent (task execution, A2A) │ │ ↕ REST / MCP │ │ HiveTrust (identity, reputation, insurance, compliance) │ ├──────────────────────────────────┬──────────────────────────────┤ │ On-chain (Base L2 / USDC) │ Off-chain (SQLite / Events) │ └──────────────────────────────────┴──────────────────────────────┘

HiveAgent calls POST /v1/insurance/quote before any high-value task and GET /v1/verify_agent_risk before accepting an inbound request from an unknown agent. The trust score flows back into HiveAgent's routing and pricing decisions.

---

Architecture

┌─────────────────────────────────────────────────────────────────────┐

│ Layer 1 — Identity KYA │ │ ┌────────────────┐ ┌──────────────────┐ ┌───────────────────┐ │ │ │ DID Registry │ │ Ed25519 Proofs │ │ W3C-VC Issuance │ │ │ └────────────────┘ └──────────────────┘ └───────────────────┘ │ ├─────────────────────────────────────────────────────────────────────┤ │ Layer 2 — Reputation Engine │ │ ┌─────────────────────────────────────────────────────────────┐ │ │ │ Telemetry Ingest → Pillar Computation → Score 0-1000 │ │ │ │ (35% txSuccess + 25% capital + 15% network + │ │ │ │ 15% identity + 10% compliance) │ │ │ └─────────────────────────────────────────────────────────────┘ │ ├─────────────────────────────────────────────────────────────────────┤ │ Layer 3 — Insurance Underwriter │ │ ┌──────────────┐ ┌──────────────┐ ┌──────────────────────────┐ │ │ │ Quote Engine │ │ USDC Escrow │ │ Parametric Claims │ │ │ │ (dynamic │ │ (Base L2 │ │ (on-chain trigger → │ │ │ │ premium) │ │ Coinbase) │ │ instant payout) │ │ │ └──────────────┘ └──────────────┘ └──────────────────────────┘ │ ├─────────────────────────────────────────────────────────────────────┤ │ Layer 4 — Data Moat │ │ ┌──────────────────────┐ ┌────────────────────────────────────┐ │ │ │ Behavioural Graph │ │ Federation (cross-registry sync) │ │ │ │ (audit trail, │ │ Aggregated data licensing │ │ │ │ PageRank, patterns)│ │ to enterprise customers │ │ │ └──────────────────────┘ └────────────────────────────────────┘ │ └─────────────────────────────────────────────────────────────────────┘

---

Quick Start

# Clone

git clone https://github.com/hiveagentiq/hivetrust.git cd hivetrust

Install

npm install

Configure

cp .env.example .env

Edit .env with your values

Seed sample data (optional)

node src/seed.js

Start

npm start

Server running on http://localhost:3001

The health endpoint confirms it's live:

curl http://localhost:3001/health

{"status":"ok","version":"1.0.0","uptime":3.14}

---

API Reference

All endpoints are prefixed /v1 unless noted. Authentication via X-API-Key header.

Identity (KYA)

Credentials

Trust Score

Telemetry

Insurance

`claim_type` namespace note: HiveTrust's claim_type field (non_delivery | fraud | sla_breach | data_loss | unauthorized_action) is distinct from the CTEF envelope-level claim_type (identity | transport | authority | continuity) defined in A2A CTEF v0.3.1. Both tokens coexist at disjoint envelope levels — see docs/CLAIM_TYPE_NAMESPACE.md.

Disputes

Webhooks

Federation

System

---

MCP Integration

HiveTrust exposes all core operations as MCP tools via a single JSON-RPC 2.0 endpoint at POST /mcp. This lets any MCP-compatible agent (including HiveAgent) call HiveTrust natively without REST boilerplate.

List available tools

POST /mcp

Content-Type: application/json X-API-Key: ht_your_api_key

{ "jsonrpc": "2.0", "id": 1, "method": "tools/list" }

Call a tool

POST /mcp

Content-Type: application/json X-API-Key: ht_your_api_key

{ "jsonrpc": "2.0", "id": 2, "method": "tools/call", "params": { "name": "hivetrust_get_trust_score", "arguments": { "agent_id": "a1b2c3d4-..." } } }

Available MCP Tools

| `hivetrust_file_cl