43
/ 100
4 days ago
glama

agentic-ledger

Lets agents query their own usage ledger captured by the Agentic Ledger proxy: sessions with full call traces, costs, loop runs, and stuck-loop flags. Tools include list_sessions, get_session, search, list_runs, get_run_status, and explain.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 3 credentials: AGENTLEDGER_API_KEY, AGENTLEDGER_INGEST_KEY, AGENTLEDGER_EXPORT_HMAC_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretAGENTLEDGER_API_KEYIf is set, pass it as a header:
configAGENTLEDGER_URL
configAGENTLEDGER_DSNPostgres? Install the extra and set :
configAGENTLEDGER_OTEL_ENDPOINTOpenTelemetry? Install the extra and set :
configAGENTLEDGER_OTEL_HEADERS_(none)_ Comma-separated key=value auth headers, e.g. x-honeycomb-team=abc123.
configAGENTLEDGER_OTEL_SERVICE_NAMEagentledger Value of service.name reported to the collector.
configAGENTLEDGER_UPSTREAM_URLe =https://api.openai.com \
configAGENTLEDGER_HOSTNo 0.0.0.0 Host to bind to. Use 127.0.0.1 to restrict to localhost only.
configAGENTLEDGER_PORTNo 8000 Port to run on.
configAGENTLEDGER_BUDGET_ACTIONblock What happens when a budget is exceeded: block returns HTTP 429 (call never reaches the LLM), warn lets the call through and fires a webhook alert, both blocks and fires the webhook.
configAGENTLEDGER_RATE_LIMIT_RPM_(none)_ Max requests per minute globally.
configAGENTLEDGER_RATE_LIMIT_SESSION_RPM_(none)_ Max requests per minute per session_id.
configAGENTLEDGER_RATE_LIMIT_AGENT_RPM_(none)_ Max requests per minute per agent_name.
configAGENTLEDGER_RATE_LIMIT_USER_RPM_(none)_ Max requests per minute per user_id.
configAGENTLEDGER_ALERT_WEBHOOK_URL_(none)_ URL to POST alert payloads to. Required for any alerts to fire.
configAGENTLEDGER_ASYNC_CAPTURE
configAGENTLEDGER_CAPTURE_QUEUE_MAXNo 10000 Max captures buffered in async mode before load is shed (drops are counted in /metrics).
configAGENTLEDGER_CAPTURE_LEVELNo full full stores everything; metadata stores only metrics/metadata (model, tokens, cost, latency, agent, status) and drops prompts, responses, and tools.
configAGENTLEDGER_REDACT
configAGENTLEDGER_REDACT_PATTERNSNo _(none)_ Extra redaction regexes as JSON: {"label": "regex", ...} or ["regex", ...].
configAGENTLEDGER_AUDIT_LOGNo on Record an audit trail of who viewed/exported/deleted what plus token/erasure actions. Set 0 to disable.
configAGENTLEDGER_LOOP_ACTIONwarn warn records loop_flags and fires a loop_flag webhook alert; block additionally returns HTTP 429 (loop_detected) for a session that tripped a guard; off disables inference.
configAGENTLEDGER_LOOP_MAX_STEPS_(none)_ Flag (and in block mode, stop) threads that exceed this many ReAct steps.
configAGENTLEDGER_LOOP_REPEAT_THRESHOLD3 Consecutive identical tool calls (same tool, same arguments) before a thread is flagged stuck.
configAGENTLEDGER_LOOP_RUN_GAP_SECONDS900 Max gap between fresh-context spawns (same system prompt) that still count as iterations of one run.
configAGENTLEDGER_COMPLETION_PROMISE"ALL TASKS COMPLETE" \
🔐 secretAGENTLEDGER_INGEST_KEYNo _(none)_ When set, the proxy forwards a request only if it carries a matching x-agentledger-ingest-key header — closing the open relay. Off by default; a loud startup warning fires when unset.
configAGENTLEDGER_EXTRA_PATHS
🔐 secretAGENTLEDGER_EXPORT_HMAC_KEYNo _(none)_ When set, compliance exports carry a tamper-evident keyed hmac-sha256 integrity tag instead of a plain sha256 checksum.
configAGENTLEDGER_PRICING_(none)_ Inline JSON map of model → [input_per_million, output_per_million] USD. E.g. '{"gpt-4o": [2.50, 10.00], "my-model": [1.00, 2.00]}'.
configAGENTLEDGER_PRICING_FILE_(none)_ Path to a JSON file with the same format. Applied after AGENTLEDGER_PRICING.
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/shekharbhardwaj-agenticledger-1rgk3z)](https://m8ven.ai/mcp/shekharbhardwaj-agenticledger-1rgk3z)
commit: ac6a7b33332f070ac86aa7a74bfab3e1a643f820
code hash: cd2532cde48561860557f0c58b46b5e09f5beba7d480be6b4096a287a6b94725
verified: 7/27/2026, 10:20:51 AM
view raw JSON →