protogrid

Search / com.scriptmasterlabs/provider-trust

Provider Trust — Verify a Source or Provider

R0· no sign-in

Verify a source or provider before an AI agent trusts it. Evidence only; unknown stays unknown.

v1.2.0 · active · repository · website · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality75good
Trust88of 100
Uptime, 30 days98%
Latency p50323 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "provider-trust": {
      "type": "http",
      "url": "https://squeezeos-api.onrender.com/mcp/provider-trust"
    }
  }
}
claude mcp add --transport http provider-trust https://squeezeos-api.onrender.com/mcp/provider-trust
[mcp_servers.provider-trust]
url = "https://squeezeos-api.onrender.com/mcp/provider-trust"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "provider-trust": {
      "type": "remote",
      "url": "https://squeezeos-api.onrender.com/mcp/provider-trust",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "provider-trust": {
      "type": "http",
      "url": "https://squeezeos-api.onrender.com/mcp/provider-trust"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=provider-trust&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vc3F1ZWV6ZW9zLWFwaS5vbnJlbmRlci5jb20vbWNwL3Byb3ZpZGVyLXRydXN0In0%3D"
}
{
  "servers": {
    "provider-trust": {
      "type": "http",
      "url": "https://squeezeos-api.onrender.com/mcp/provider-trust"
    }
  }
}
{
  "mcpServers": {
    "provider-trust": {
      "httpUrl": "https://squeezeos-api.onrender.com/mcp/provider-trust"
    }
  }
}
extensions:
  "provider-trust":
    enabled: true
    name: "provider-trust"
    type: streamable_http
    uri: "https://squeezeos-api.onrender.com/mcp/provider-trust"
    timeout: 300

Quality 75 / 100good

protocol75 · weight 25
  • warn
    protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
  • n/a
    protocol.statelessonly applies to 2026-07-28 servers
  • pass
    protocol.transportstreamable HTTP
  • n/a
    protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene100 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • pass
    tools.annotations6 of 6 tools declare readOnlyHint or destructiveHint
  • pass
    tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
  • pass
    tools.token_costabout 797 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
stability25 · weight 15
  • warn
    stability.changes6 tool changes in 30 days
  • fail
    stability.rug_pull6 tools kept their name but changed most of their description in 30 days; review before trusting them
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

6 tools, about 797 tokens to load them all · tool set d6b4db4e8bb1 · tools last changed 2026-10-13 · checked 2026-10-20 10:35 UTC

Tool changes

  • check_statuschangeddescription, output schemameaning changed
    before

    Check the authoritative backend status.

    after · 14% of words in common

    Read the authoritative SqueezeOS backend status as a source/status/body envelope. Use to diagnose current availability; process status does not independently establish tool delivery or payment settlement. Read-only.

  • check_historychangeddescription, input schema, output schemameaning changed
    before

    Check privacy-safe historical trust evidence.

    after · 12% of words in common

    Read privacy-filtered provider trust history over the requested hours window (1–2160; default 720). Returns the authoritative source/status/body envelope. Use for historical evidence; past observations are not current guarantees. Read-only.

  • check_paymentchangeddescription, output schemameaning changed
    before

    Check live x402 contract, readiness, and settlement evidence.

    after · 13% of words in common

    Read the canonical payment contract, readiness and settlement-evidence endpoints as separate upstream envelopes. Use to inspect payment evidence before spending. A 402 challenge, signature, readiness flag or HTTP 200 alone does not prove settled accepted delivery. Never signs or spends.

  • check_identitychangeddescription, output schemameaning changed
    before

    Check live provider identity evidence.

    after · 10% of words in common

    Read the live SML ERC-8004 identity document and its source/status envelope. Use to inspect declared provider identity; a successful fetch is not external certification or settlement verification. Read-only.

  • compare_providerschangeddescription, input schema, output schemameaning changed
    before

    Compare provider evidence side by side without a fabricated winner or composite score.

    after · 24% of words in common

    Compare two to five HTTPS providers using separate live evidence envelopes. Returns each target and its observed evidence, with composite_score=false. Use for side-by-side selection; there is no fabricated winner, universal score or payment.

  • verify_providerchangeddescription, input schema, output schemameaning changed
    before

    Verify a provider before using it. Live evidence only; unknown stays unknown.

    after · 16% of words in common

    Inspect live provider evidence before selecting an HTTPS service. Returns the source path, upstream HTTP status and untouched evidence body; unknown evidence stays unknown. Use for provider selection, not as cryptographic certification or proof that a payment settled. This tool does not sign or spend.

Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 88 / 100

duplicate-repo
provenance85
liveness99
freshness85
hygiene80

+repository +dns-namespace +website +reachable +uptime-98% ~updated-45d-ago -duplicate-repo(4 names)

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://squeezeos-api.onrender.com/mcp/provider-trust streamable-httpnoneyes98%323 ms2025-11-252026-10-20

Tools (6)

check_historyread-onlyRead privacy-filtered provider trust history over the requested hours window (1–2160; default 720). Returns the authoritative source/status/body envelope. Use for historical evidence; past observations are not current guarantees. Read-only.
check_identityread-onlyRead the live SML ERC-8004 identity document and its source/status envelope. Use to inspect declared provider identity; a successful fetch is not external certification or settlement verification. Read-only.
check_paymentread-onlyRead the canonical payment contract, readiness and settlement-evidence endpoints as separate upstream envelopes. Use to inspect payment evidence before spending. A 402 challenge, signature, readiness flag or HTTP 200 alone does not prove settled accepted delivery. Never signs or spends.
check_statusread-onlyRead the authoritative SqueezeOS backend status as a source/status/body envelope. Use to diagnose current availability; process status does not independently establish tool delivery or payment settlement. Read-only.
compare_providersread-onlyCompare two to five HTTPS providers using separate live evidence envelopes. Returns each target and its observed evidence, with composite_score=false. Use for side-by-side selection; there is no fabricated winner, universal score or payment.
verify_providerread-onlyInspect live provider evidence before selecting an HTTPS service. Returns the source path, upstream HTTP status and untouched evidence body; unknown evidence stays unknown. Use for provider selection, not as cryptographic certification or proof that a payment settled. This tool does not sign or spend.

Schemas: list_tools.

Also listed as

3 other active names share this repository: com.scriptmasterlabs/ghostkey, com.scriptmasterlabs/x402-gateway, com.scriptmasterlabs/x402-pay

Similar MCP servers

More from com.scriptmasterlabs

Official server.json
{
  "name": "com.scriptmasterlabs/provider-trust",
  "_meta": {
    "io.modelcontextprotocol.registry/publisher-provided": {
      "tools": [
        "verify_provider",
        "compare_providers",
        "check_identity",
        "check_payment",
        "check_history",
        "check_status"
      ],
      "hosting": "always_on_squeezeos_core",
      "provider": "SCRIPTMASTERLABS",
      "buyer_job": "Verify a source or provider before an AI agent trusts it.",
      "read_only": true,
      "legal_name": "Script Master Labs, LLC",
      "truth_policy": "Evidence only. Unknown stays unknown. A payment challenge or signature is not settlement proof.",
      "autonomous_spend": false
    }
  },
  "title": "Provider Trust — Verify a Source or Provider",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://squeezeos-api.onrender.com/mcp/provider-trust",
      "type": "streamable-http"
    }
  ],
  "version": "1.2.0",
  "repository": {
    "url": "https://gitlab.com/timothy.walton45/sml-portfolio",
    "source": "gitlab"
  },
  "websiteUrl": "https://www.scriptmasterlabs.com/stack.html",
  "description": "Verify a source or provider before an AI agent trusts it. Evidence only; unknown stays unknown."
}