PIC Standard
Open standard for Provenance & Intent Contracts (PIC) in AI agents. Verify intent, provenance, and evidence before high-impact tool calls.
What is PIC Standard?
PIC Standard is a Model Context Protocol (MCP) server that allows AI assistants like Claude, Cursor, and VS Code to open standard for provenance & intent contracts (pic) in ai agents. verify intent, provenance, and evidence before high-impact tool calls.
Open standard for Provenance & Intent Contracts (PIC) in AI agents. Verify intent, provenance, and evidence before high-impact tool calls.
This server falls under the Security category on MCPgee, the world's largest MCP server directory with 33,000+ servers.
Features
- Open standard for Provenance & Intent Contracts (PIC) in AI
Use Cases
Maintainer
Works with
Installation
Manual Installation
npx pic-standardConfiguration
Configuration Details
claude_desktop_config.json
Performance
Response Metrics
Resource Usage
How to Set Up and Use PIC Standard
PIC Standard implements Provenance & Intent Contracts (PIC), an open protocol for verifying the intent, provenance, and evidence behind high-impact tool calls made by AI agents. Before a potentially irreversible action — such as a financial transaction, file deletion, or external API call — PIC validates a structured action proposal against declared intent and cryptographic evidence (SHA-256 hashes or Ed25519 signatures). It integrates with LangGraph, CrewAI, and MCP-based agent frameworks to act as a trust firewall between AI reasoning and real-world consequences.
Prerequisites
- Python 3.9+ with pip installed
- Optional: an Ed25519 keyring file (pic_keys.json) for cryptographic signature verification
- Optional: LangGraph, CrewAI, or another supported agent framework if using framework integrations
- An MCP-compatible client or agent framework that supports the MCP extras
Install the pic-standard package
Install the core package from PyPI. Add optional extras depending on your use case: [mcp] for MCP integration, [langgraph] for LangGraph, and [crypto] for Ed25519 signature verification.
# Core install
pip install pic-standard
# With MCP support
pip install "pic-standard[mcp]"
# With all extras
pip install "pic-standard[langgraph,mcp,crypto]"Generate a starter keyring (optional)
If you want cryptographic signature verification, generate an example keyring file. This creates a pic_keys.json that you can populate with your trusted public keys.
pic-cli keys --write-exampleVerify an action proposal
Use the CLI to validate a PIC action proposal JSON file. This is the core operation — it checks intent, provenance, and optionally verifies evidence hashes or signatures.
# Basic verification
pic-cli verify examples/financial_irreversible.json
# With evidence hash checking
pic-cli verify examples/financial_hash_ok.json --verify-evidence
# With signature verification (requires keyring)
PIC_KEYS_PATH=pic_keys.json pic-cli verify examples/financial_sig_ok.json --verify-evidenceLaunch the HTTP bridge for agent integration
Run the PIC HTTP bridge to expose the /verify endpoint. Agent frameworks can POST action proposals to this endpoint before executing tool calls.
pic-cli serve --port 3100Integrate with your MCP-based agent
Configure your MCP client to use the PIC standard server. Agents can call the verify tool before executing any high-impact action.
{
"mcpServers": {
"pic-standard": {
"command": "python",
"args": ["-m", "pic_standard.mcp"],
"env": {
"PIC_KEYS_PATH": "/path/to/pic_keys.json"
}
}
}
}PIC Standard Examples
Client configuration
MCP client configuration for the PIC Standard server with optional keyring for signature verification.
{
"mcpServers": {
"pic-standard": {
"command": "python",
"args": ["-m", "pic_standard.mcp"],
"env": {
"PIC_KEYS_PATH": "/path/to/pic_keys.json"
}
}
}
}Prompts to try
Example prompts for using PIC Standard to gate agent tool calls.
- "Verify this action proposal before executing the wire transfer: <paste JSON>"
- "Check the provenance and intent of this file deletion request"
- "Inspect my keyring to see which signers are currently trusted"
- "Run the health check on the PIC bridge server at localhost:3100"
- "Verify this action proposal and include evidence hash checking"Troubleshooting PIC Standard
Verification fails with 'invalid signature' even with correct keys
Ensure PIC_KEYS_PATH points to a valid keyring JSON file. Run pic-cli keys to inspect the current keyring contents. Regenerate the example with pic-cli keys --write-example to confirm the expected format.
HTTP bridge returns connection refused on port 3100
Start the bridge with pic-cli serve --port 3100 before sending requests. Confirm no other process is using the port with lsof -i :3100 on macOS/Linux.
MCP extras are not available after pip install pic-standard
Reinstall with the mcp extra: pip install "pic-standard[mcp]". The base package does not include MCP dependencies to keep the install lightweight.
Frequently Asked Questions about PIC Standard
What is PIC Standard?
PIC Standard is a Model Context Protocol (MCP) server that open standard for provenance & intent contracts (pic) in ai agents. verify intent, provenance, and evidence before high-impact tool calls. It connects AI assistants to external tools and data sources through a standardized interface.
How do I install PIC Standard?
Follow the installation instructions on the PIC Standard GitHub repository. Clone the repo, install dependencies, and add the server config to your AI client.
Which AI clients work with PIC Standard?
PIC Standard works with all major MCP-compatible AI clients including Claude Desktop, Claude Code, Cursor, VS Code (GitHub Copilot), Windsurf, and Cline.
Is PIC Standard free to use?
Yes, PIC Standard is open source and available under the Apache-2.0 license. You can use it freely in both personal and commercial projects.
PIC Standard Alternatives — Similar Security Servers
Looking for alternatives to PIC Standard? Here are other popular security servers you can use with Claude, Cursor, and VS Code.
Casdoor
★ 13.6kAn open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
ghidraMCP
★ 9.0kAn Model Context Protocol server that enables LLMs to autonomously reverse engineer applications by exposing Ghidra's decompilation and analysis tools. It allows AI agents to list code structures, rename methods, and analyze binaries directly through
HexStrike AI
★ 8.9kHexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly b
IDA Pro MCP
★ 8.7kEnables AI-assisted reverse engineering in IDA Pro by providing tools to analyze binaries, decompile functions, manage comments, search patterns, and interact with the IDA database through natural language.
Anthropic Cybersecurity Skills
★ 6.6k754 structured cybersecurity skills for AI agents · Mapped to 5 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND & NIST AI RMF · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platform
Hooker
★ 5.1k🔥🔥 hooker is a Frida-based reverse engineering toolkit for Android. It offers a user-friendly CLI, universal scripts, auto hook generation, memory roaming to detect activities/services, one-click SOCKS5 proxy setup, Frida JustTrustMe, and BoringSSL u
Browse More Security MCP Servers
Explore all security servers available in the MCPgee directory. Each server includes setup guides for Claude, Cursor, and VS Code.
Set Up PIC Standard in Your Editor
Choose your AI client for step-by-step setup instructions.
Quick Config Preview
Add this to your claude_desktop_config.json or .cursor/mcp.json
Ready to use PIC Standard?
Browse our complete directory of 33,000+ MCP servers, read setup guides for your editor, and start building with the Model Context Protocol.