Add verifiable audit logs to Claude Code.
What it does
Guides users through setting up policy-gated tool calls and signed audit receipts that can be verified offline.
When to use it
Use when explaining, evaluating, or demonstrating signed audit trails before adopting runtime hooks.
How to use it
Give it a project to configure; it walks through adding policy checks, signed receipts, and verification.
What you provide
- An existing project
Uses
PM
Latest review
What you need · 5
Node.js is needed to parse hook events and extract the verification public key.
Python 3 is used to inspect receipts and modify a receipt for the tamper-detection demonstration.
Access · 2
This skill
GitHub
Write
Stores signing keys and receipts
protect-mcp
Execute
Installs tool-call audit hooks