Add MCP server links

README.md

@@ -15,13 +15,19 @@ short_description: Validate signed agent receipts.
 
 This Space demonstrates validation of signed agent execution receipts against evidence bundles using the `verifiable-tool-invocation-flow` Python package.
 
-- Core repo: https://github.com/joy7758/verifiable-tool-invocation-flow
-- PyPI package: https://pypi.org/project/verifiable-tool-invocation-flow/0.1.1/
-- GitHub Action: https://github.com/marketplace/actions/verify-agent-execution-receipt
+## Related public assets
+
+* Core CrewAI Flow template: [https://github.com/joy7758/verifiable-tool-invocation-flow](https://github.com/joy7758/verifiable-tool-invocation-flow)
+* Core PyPI package: [https://pypi.org/project/verifiable-tool-invocation-flow/0.1.1/](https://pypi.org/project/verifiable-tool-invocation-flow/0.1.1/)
+* GitHub Marketplace Action: [https://github.com/marketplace/actions/verify-agent-execution-receipt](https://github.com/marketplace/actions/verify-agent-execution-receipt)
+* MCP server package: [https://pypi.org/project/agent-receipt-validator-mcp/0.1.1/](https://pypi.org/project/agent-receipt-validator-mcp/0.1.1/)
+* MCP server repository: [https://github.com/joy7758/agent-receipt-validator-mcp](https://github.com/joy7758/agent-receipt-validator-mcp)
+
+The MCP server provides local stdio tools for MCP-compatible clients that need to validate signed agent execution receipts.
 
 This demo validates signed execution evidence.
 It does not prove semantic correctness of the tool output.
 It does not prove that the policy itself is correct.
 It does not protect against a compromised signer.
 It does not replace sandboxing, IAM, access control, monitoring, or human approval.
-Do not upload secrets, private keys, confidential evidence bundles, or production receipts.
+Do not upload secrets, private keys, confidential evidence bundles, or production receipts.