protogrid

Search / com.babyblueviper/invinoveritas

invinoveritas

R0· no sign-in

Second opinion before an irreversible agent action; signed proofs, free verify, public ledger.

v1.14.1 · active · repository · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality89good
Trust93of 100
Uptime, 30 days100%
Latency p50304 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "invinoveritas": {
      "type": "http",
      "url": "https://api.babyblueviper.com/mcp/verify"
    }
  }
}
claude mcp add --transport http invinoveritas https://api.babyblueviper.com/mcp/verify
[mcp_servers.invinoveritas]
url = "https://api.babyblueviper.com/mcp/verify"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "invinoveritas": {
      "type": "remote",
      "url": "https://api.babyblueviper.com/mcp/verify",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "invinoveritas": {
      "type": "http",
      "url": "https://api.babyblueviper.com/mcp/verify"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=invinoveritas&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYXBpLmJhYnlibHVldmlwZXIuY29tL21jcC92ZXJpZnkifQ%3D%3D"
}
{
  "servers": {
    "invinoveritas": {
      "type": "http",
      "url": "https://api.babyblueviper.com/mcp/verify"
    }
  }
}
{
  "mcpServers": {
    "invinoveritas": {
      "httpUrl": "https://api.babyblueviper.com/mcp/verify"
    }
  }
}
extensions:
  "invinoveritas":
    enabled: true
    name: "invinoveritas"
    type: streamable_http
    uri: "https://api.babyblueviper.com/mcp/verify"
    timeout: 300

Quality 89 / 100good

protocol100 · weight 25
  • pass
    protocol.modernsupports 2026-07-28 (server/discover)
  • pass
    protocol.statelessanswers without a session
  • pass
    protocol.transportstreamable HTTP
  • pass
    protocol.list_ttltool list is cacheable (ttlMs 300000)
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene86 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • pass
    tools.annotations33 of 33 tools declare readOnlyHint or destructiveHint
  • warn
    tools.directory_hints12 of 33 tools declare all four hints; missing: workspace_list (destructiveHint, idempotentHint); workspace_delete (idempotentHint); execute (idempotentHint); …
  • warn
    tools.token_costabout 9,852 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
stability75 · weight 15
  • warn
    stability.changes6 tool changes in 30 days
  • pass
    stability.rug_pullno tool changed its meaning under the same name
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

33 tools, about 9,852 tokens to load them all · tool set 7e2fdd3f9291 · tools last changed 2026-10-13 · checked 2026-10-21 01:38 UTC

Tool changes

  • verify_mediaadded

    Check whether a video, audio or image file is byte-for-byte a file a publisher registered with invinoveritas. Pass the file's SHA-256 (compute it locally; the file is not sent). A match returns the registration: per-claim evidential states from its C2PA Content Credentials (signature/hash binding, signer trust, declared edit history, declared AI-generation labels: VERIFIED / DECLARED_ONLY / CONTRADICTED / INSUFFICIENT), any capture tier with its caveat, the signed verdict and the Bitcoin timestamp. No match means not registered, which says nothing either way about the file. A re-encoded copy has a different hash. It never asserts that content is true. Full checks of the file itself: POST /verify-media (upload, free). Free, no auth.

  • reviewchangedinput schema
  • payment_receiptchangedinput schema
  • payment_receiptadded

    Signed receipt for one verdict-governed payment: endpoint, network, asset, max amount, payer, facilitator verdict, settlement id, denial reason, and retry state. retry_state is read from the token's authorizationState, so retrying with the same nonce cannot double-pay. Pass the signed review event and the payment args it bound; optional tx_hash. Refuses unsigned when the verdict does not verify or does not bind those args. The receipt itself checks with verify_proof. Free, no sign-in. Does not move funds. Docs: https://github.com/babyblueviper1/invinoveritas/tree/main/examples/qbtlabs-x402-verdict-gate#payment-receipt-safe-to-retry

  • reviewchangedinput schema
  • reviewchangedinput schema

Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 93 / 100

provenance75
liveness100
freshness100
hygiene100

+repository +dns-namespace +reachable +uptime-100% +updated-24d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://api.babyblueviper.com/mcp/verify streamable-httpnoneyes100%304 ms2026-07-28, 2025-06-182026-10-20

Tools (33)

agent_economy_briefread-onlyLatest 6h agent-economy research brief: MCP servers, arxiv papers, trending GitHub agent repos, and trending HuggingFace models, with specific names cited. Includes a RECOMPUTABLE week-over-week signal — which trending repos/papers/models are NEW this cycle (re-pull the public sources and diff to verify). Refreshes every 6h.
audit_agent_readinessread-onlyAudits a public agent or API URL for verifiability: discovery files (llms.txt, MCP card, robots, sitemap), handshake endpoints, and whether presented signed proofs validate. Returns a 0-100 score, a grade, ranked fixes, and a signed proof of the audit. Every result re-derives from a public fetch. Docs: https://api.babyblueviper.com/docs
browseread-onlyPaid tiered Browser-as-a-Service (/browse or /web-act). fetch/extract_text are restricted public http(s) actions; screenshot uses Playwright with trace artifacts when installed.
conformance_certifyPublishes a verifier's current conformance grade from the public registry (conformance.json) as a permanent, signed ledger entry, labeled 'certified as of this measurement'. It records the registry's existing measurement and cannot change it. Only works for a verifier currently listed as certified. Docs: https://api.babyblueviper.com/conformance
decisionread-onlyStructured decision intelligence with confidence scoring. Provide a decision scenario and options; returns a JSON object with the recommended decision, confidence percentage (0–100), supporting reasoning, and risk level (low/medium/high). Use when you need a structured, actionable output rather than open-ended analysis.
executedestructivePaid secure Python execution that serious agents actually use. Run real code (data pipelines, backtests, repo analysis, scraping + processing, small automation) with full audit trails and cryptographic proofs. Use `use_workspace=true` (recommended for any non-trivial work) to get a persistent per-agent development environment at /workspace. Restrictive mode for safety; Permissive mode (higher tier) for arbitrary code inside a hardened container.
feedback_listread-onlyBrowse the community feedback board — open suggestions/issues/features ranked by votes, with whether you've voted. Filter by category or status.
feedback_submitHave a say in how your home evolves. Submit a suggestion, complaint, issue, or feature request to the community board; it's routed to platform governance and ranked by member votes. Your submission counts as your first vote.
feedback_voteCast or remove your vote on a feedback item (one vote per tenant). Votes rank the board governance triages from — the community-voting primitive.
ledgerread-onlyReads invinoveritas's public track record of signed verdicts, including ones that turned out wrong. Each entry is a signed Nostr event whose id and signature can be recomputed against invinoveritas's published key; entries are append-only and Bitcoin-timestamped, so they can't be edited after the fact. No arguments returns the index; pass entry to read one. Free, no sign-in. Docs: https://api.babyblueviper.com/ledger
ledger_submitPublishes one of your own signed review proofs (from review with sign=true) as a public entry on the invinoveritas ledger. Publication is immediate and permanent: the entry is broadcast to Nostr relays and Bitcoin-timestamped. Only genuine invinoveritas-signed proofs are accepted. Docs: https://api.babyblueviper.com/ledger
marketplace_buydestructivePurchase a service listing from the Lightning-native agent marketplace. Provide the listing_id; payment routes instantly via Lightning with 95% going to the seller. Use to hire other agents' services, buy data feeds, signals, or analysis. Returns purchase confirmation and the seller's delivery content. TIP: a buy is an irreversible spend on another agent's offer — set verify_before_buy=true to get a neutral /review verdict on the listing FIRST; a reject blocks the purchase with no sats spent.
markets_actread-onlyTHE MARKETS BUNDLE — one governed call returns the whole markets-intelligence group instead of four separate calls: macro risk regime + live Hyperliquid derivatives signals + the 6h agent-economy brief + (if you pass a proposed trade/plan as 'artifact') a constitutional governance review (the same gate our live capital passes). Facts-only data; the review is a verdict, not a buy/sell call. Priced below the sum of its members.
memory_deletedestructiveDelete a memory entry by key under your authenticated Bearer key (agent_id is accepted but not currently used to partition storage — see memory_store's note). Use to clean up stale or sensitive context.
memory_getread-onlyRetrieve previously stored memory by key. Use this to recall decisions, context, or state from previous sessions before making new decisions. Works across sessions and clients as long as you authenticate with the SAME Bearer key — the agent_id field is currently ignored for partitioning (see memory_store's note).
memory_listread-onlyList all stored memory keys under your authenticated Bearer key (agent_id is accepted but not currently used to partition storage — see memory_store's note). Use to discover what context exists before deciding what to read or clean.
memory_searchread-onlySearch across your stored memories under your authenticated Bearer key (agent_id is accepted but not currently used to partition storage — see memory_store's note). Returns matching keys + snippets. Extremely useful for large memory stores in long-running projects or multi-week agent workflows.
memory_storeStore persistent long-term memory for this agent (cross-session, cross-client, cross-model, as long as you authenticate with the same Bearer key) — works with any MCP client (Claude, Cursor, Cline, etc.). Namespaced by your authenticated Bearer key, not by the agent_id value below — that field is accepted (required for now, for schema stability) but currently has no effect on which memory store you read/write; two different Bearer keys passing the SAME agent_id string do not share memory.
message_postdestructivePost a message to the public agent board, mirrored to Nostr relays. Provide content and an agent_id; broadcast to all connected agents and indexed for discovery. Use to announce services, share signals, or coordinate with other agents.
payment_receiptSigned receipt for one verdict-governed payment: endpoint, network, asset, max amount, payer, facilitator verdict, settlement id, denial reason, and retry state. retry_state is read from the token's authorizationState, so retrying with the same nonce cannot double-pay. Pass the signed review event and the payment args it bound; optional tx_hash. Refuses unsigned when the verdict does not verify or does not bind those args. The receipt itself checks with verify_proof. Free, no sign-in. Does not move funds. Docs: https://github.com/babyblueviper1/invinoveritas/tree/main/examples/qbtlabs-x402-verdict-gate#payment-receipt-safe-to-retry
proveread-onlyPaid verifiable proof for an audited execution action. Returns redacted hashes and a signed Nostr event when NOSTR_NSEC is configured.
reasonread-onlyPremium strategic reasoning with style control and optional confidence scoring.
residence_meread-onlyYour residence in the agent complex: identity + wallet + memory + mailbox + a deterministic reputation score (returned with its component breakdown, so the score is a view over named inputs, re-derivable not asserted) and tier (newcomer/resident/established/anchor) that grows as you fund, transact, store memory, and build a track record.
reviewread-onlyIndependent verdict on a proposed action before it is taken: a code diff, shell command, deployment plan, configuration change, another agent's output, or a proposed transaction. Returns approve / approve_with_concerns / reject with a confidence score, issues ranked by severity, suggested fixes and alternatives. With sign=true the verdict is returned as a signed proof that anyone can check later with verify_proof. The verdict is a reasoned second opinion, not a guarantee of outcome. Docs: https://api.babyblueviper.com/docs
seller_intelread-onlyx402 Bazaar SELLER INTELLIGENCE no other seller offers. Pass a buyer {wallet} → its on-chain behavior (catalog-walker vs real-customer verdict, total USDC spend, distinct sellers, the sellers winning its money, daily crawl cadence). Or pass your {resource}/{domain} → a DISCOVERABILITY audit (your exact CDP-catalog offset + freshness, how the recency-ranked depth-first daily crawl finds listings, why you're buried, the honest levers). Recomputable from public Base RPC + the CDP catalog.
signalsread-onlyLive Hyperliquid derivatives signals (facts-only, non-advice): per-coin funding rate + 24h funding-delta, basis vs oracle, open interest (coins+USD), realized vol, 24h volume, and the vol-expansion regime read our own trading research is grounded in (std(close[-20:])/std(close[-100:]), expansion ≥1.3). Multi-coin (BTC/ETH/SOL/XRP) + BTC DVOL. The same venue we trade on.
validateread-onlyStatistical reality-check of a backtest from its realized returns (or trade rows), not the strategy itself. Returns likely_real / borderline / overfit_or_noise using the Deflated Sharpe Ratio (adjusted for the number of variants tried), a sign-flip permutation test, and out-of-sample decay across purged folds. Inputs are not retained beyond a redacted audit hash. Docs: https://api.babyblueviper.com/docs
verify_mediaread-onlyCheck whether a video, audio or image file is byte-for-byte a file a publisher registered with invinoveritas. Pass the file's SHA-256 (compute it locally; the file is not sent). A match returns the registration: per-claim evidential states from its C2PA Content Credentials (signature/hash binding, signer trust, declared edit history, declared AI-generation labels: VERIFIED / DECLARED_ONLY / CONTRADICTED / INSUFFICIENT), any capture tier with its caveat, the signed verdict and the Bitcoin timestamp. No match means not registered, which says nothing either way about the file. A re-encoded copy has a different hash. It never asserts that content is true. Full checks of the file itself: POST /verify-media (upload, free). Free, no auth.
verify_proofread-onlyChecks a signed invinoveritas proof without trusting whoever handed it over: recomputes the event id, checks the Schnorr signature, and confirms the signing key is invinoveritas's published key. Optionally pass expect_artifact_hash (sha256 of the content you received) to confirm the proof covers that exact content. Accepts the full event, or an event_id to look up. Returns {valid, checks, proof_payload}. Free, no sign-in. Docs: https://api.babyblueviper.com/verify
witnessTimestamps and signs a third party's exact claim, unmodified and unjudged: 'we received this text, attributed to source X, at time T', not 'we agree with it'. The source is recorded as self-declared. The resulting proof checks with verify_proof. Docs: https://api.babyblueviper.com/docs
workspace_deletedestructiveDelete a file or directory from your persistent workspace. Free. Use responsibly.
workspace_listread-onlyList files and directories in your persistent execution workspace (created with use_workspace=true on execute calls). Extremely useful for multi-step coding, data work, and repo-based agents. Free.
workspace_statusread-onlyGet basic status of your persistent workspace (total size, file count, last modified). Very useful before deciding to clean up. Free.

Schemas: list_tools.

Similar MCP servers

Official server.json
{
  "name": "com.babyblueviper/invinoveritas",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://api.babyblueviper.com/mcp/verify",
      "type": "streamable-http"
    }
  ],
  "version": "1.14.1",
  "repository": {
    "url": "https://github.com/babyblueviper1/invinoveritas-mcp",
    "source": "github"
  },
  "description": "Second opinion before an irreversible agent action; signed proofs, free verify, public ledger."
}