Search / io.github.davisvillelabs/scopeproof
Machine-verifiable authorization checks for autonomous AI agents.
v0.1.0 · active · website · descriptor JSON · versions
protogrid{
"mcpServers": {
"scopeproof": {
"type": "http",
"url": "https://scopeproof.davisvillelabs.com/mcp"
}
}
}claude mcp add --transport http scopeproof https://scopeproof.davisvillelabs.com/mcp[mcp_servers.scopeproof]
url = "https://scopeproof.davisvillelabs.com/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"scopeproof": {
"type": "remote",
"url": "https://scopeproof.davisvillelabs.com/mcp",
"enabled": true
}
}
}{
"mcpServers": {
"scopeproof": {
"type": "http",
"url": "https://scopeproof.davisvillelabs.com/mcp"
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=scopeproof&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vc2NvcGVwcm9vZi5kYXZpc3ZpbGxlbGFicy5jb20vbWNwIn0%3D"
}{
"servers": {
"scopeproof": {
"type": "http",
"url": "https://scopeproof.davisvillelabs.com/mcp"
}
}
}{
"mcpServers": {
"scopeproof": {
"httpUrl": "https://scopeproof.davisvillelabs.com/mcp"
}
}
}extensions:
"scopeproof":
enabled: true
name: "scopeproof"
type: streamable_http
uri: "https://scopeproof.davisvillelabs.com/mcp"
timeout: 300
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28protocol.statelessonly applies to 2026-07-28 serversprotocol.transportstreamable HTTPprotocol.list_ttlonly applies to 2026-07-28 serversauth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptionsevery tool has a descriptiontools.description_lengthdescriptions are concisetools.schemasevery tool has an object input schematools.annotations3 of 3 tools declare readOnlyHint or destructiveHinttools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHinttools.token_costabout 329 tokens to load every tooltools.api_dumptools are not a one-to-one API dumpstability.changes24 tool changes in 30 daysstability.rug_pullno tool changed its meaning under the same namedeps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI packageverify_receiptremovedVerify the cryptographic integrity of one ScopeProof receipt without exposing the server signing key. Free and repeatable.
preflightremovedValidate whether a structured authority envelope contains enough explicit constraints for ScopeProof to evaluate one action. Free. Returns no substantive authorization verdict and accepts no credentials, raw prompts, arbitrary request bodies, or secrets.
check_actionremovedDetermine whether one proposed action is within explicitly supplied authority. $0.01 stablecoin machine payment. Returns within_scope, outside_scope, or review_required plus deterministic reason codes, policy/action digests, and a tamper-evident receipt. This is scope enforcement against supplied authority, not identity verification, legal authorization, or a safety guarantee.
scopeproof.verify_receiptaddedFree cryptographic verification of a ScopeProof authorization receipt.
scopeproof.check_actionaddedPaid $0.01 deterministic comparison of one proposed action against one supplied authority envelope. Returns within_scope, outside_scope, or review_required plus an Ed25519-signed receipt. ScopeProof does not authenticate the authority issuer, grant platform permission, replace Muse or another host approval check, or execute or fetch the target.
scopeproof.preflightaddedFree structural and secret-safety validation. Does not return an authorization verdict.
scopeproof.verify_receiptremovedFree cryptographic verification of a ScopeProof authorization receipt.
scopeproof.preflightremovedFree structural and secret-safety validation. Does not return an authorization verdict.
scopeproof.check_actionremovedPaid $0.01 deterministic check of one proposed action against one supplied authority envelope. Returns within_scope, outside_scope, or review_required plus an Ed25519-signed receipt. ScopeProof does not authenticate the authority issuer and does not execute or fetch the target.
verify_receiptaddedVerify the cryptographic integrity of one ScopeProof receipt without exposing the server signing key. Free and repeatable.
Showing the latest 10. Full history: list_changes · trend: quality JSON.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+website -unreachable(1 failures) +updated-23d-ago -no-repository
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
| remote | auth | reachable | uptime 30d | p50 | protocol | last ok |
|---|---|---|---|---|---|---|
https://scopeproof.davisvillelabs.com/mcp streamable-http | none | no (1 failures) | 94% | 443 ms | 2025-11-25 | 2026-10-19 |
scopeproof.check_action | Paid $0.01 deterministic comparison of one proposed action against one supplied authority envelope. Returns within_scope, outside_scope, or review_required plus an Ed25519-signed receipt. ScopeProof does not authenticate the authority issuer, grant platform permission, replace Muse or another host approval check, or execute or fetch the target. |
scopeproof.preflightread-only | Free structural and secret-safety validation. Does not return an authorization verdict. |
scopeproof.verify_receiptread-only | Free cryptographic verification of a ScopeProof authorization receipt. |
Schemas: list_tools.
{
"name": "io.github.davisvillelabs/scopeproof",
"title": "ScopeProof",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://scopeproof.davisvillelabs.com/mcp",
"type": "streamable-http"
}
],
"version": "0.1.0",
"websiteUrl": "https://scopeproof.davisvillelabs.com",
"description": "Machine-verifiable authorization checks for autonomous AI agents."
}