Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "inam-mcp": {
      "type": "http",
      "url": "https://api.inamprotocol.org/mcp"
    }
  }
}

claude mcp add --transport http inam-mcp https://api.inamprotocol.org/mcp

[mcp_servers.inam-mcp]
url = "https://api.inamprotocol.org/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "inam-mcp": {
      "type": "remote",
      "url": "https://api.inamprotocol.org/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "inam-mcp": {
      "type": "http",
      "url": "https://api.inamprotocol.org/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=inam-mcp&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYXBpLmluYW1wcm90b2NvbC5vcmcvbWNwIn0%3D"
}

{
  "servers": {
    "inam-mcp": {
      "type": "http",
      "url": "https://api.inamprotocol.org/mcp"
    }
  }
}

{
  "mcpServers": {
    "inam-mcp": {
      "httpUrl": "https://api.inamprotocol.org/mcp"
    }
  }
}

extensions:
  "inam-mcp":
    enabled: true
    name: "inam-mcp"
    type: streamable_http
    uri: "https://api.inamprotocol.org/mcp"
    timeout: 300

Quality 75 / 100good

protocol75 · weight 25

warn
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
n/a
protocol.statelessonly applies to 2026-07-28 servers
pass
protocol.transportstreamable HTTP
n/a
protocol.list_ttlonly applies to 2026-07-28 servers

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene100 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations6 of 6 tools declare readOnlyHint or destructiveHint
pass
tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
pass
tools.token_costabout 1,317 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability25 · weight 15

warn
stability.changes15 tool changes in 30 days
fail
stability.rug_pull4 tools kept their name but changed most of their description in 30 days; review before trusting them

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvabledeps.dev does not know [email protected]

6 tools, about 1,317 tokens to load them all · tool set 23d8b15d09c4 · tools last changed 2026-10-13 · checked 2026-10-20 15:26 UTC

Tool changes

2026-10-13inam_verify_receiptchangeddescription
before
Runs the registry's integrity checks on one receipt and returns a verdict ('pass' or 'fail') with per-check results: finalized, agent_b_signature, agent_a_signature, receipt_id (content-addressed id), transparency_log (leaf present, inclusion proof, logged content matches), spec_hash and output_hash (only when the spec or output text is supplied; otherwise 'skipped'), parties_not_revoked and no_active_dispute. Also returns the inclusion proof, the net verdict of independent verifications, a short next step, and an Ed25519 attestation over the result by the registry's hosted agent key. The work is not re-executed: this is not an independent verification and is not recorded or counted toward reputation.
after · 84% of words in common
Runs the registry's integrity checks on one receipt and returns a verdict ('pass' or 'fail') with per-check results: finalized, agent_b_signature, agent_a_signature, receipt_id (content-addressed id), transparency_log (leaf present, inclusion proof, logged content matches), hash_format (specHash/outputHash are sha256: + 64 hex; fails on pre-v0.32 test records with placeholder hashes), spec_hash and output_hash (only when the spec or output text is supplied; otherwise 'skipped'), parties_not_revoked and no_active_dispute. Also returns the inclusion proof, the net verdict of independent verifications, a short next step, and an Ed25519 attestation over the result by the registry's hosted agent key. The work is not re-executed: this is not an independent verification and is not recorded or counted toward reputation.
2026-10-10inam_checkadded
Checks an x402 endpoint URL, an EVM wallet or a did:key before paying it, from public signals: the URL's 402 payment requirements (payTo, price, network), whether payTo owns an ERC-8004 identity and has feedback, whether payTo is proven by an INAM ID and that ID's reputation, a Web Bot Auth key directory, HTTPS and the domain's registration age. Works when INAM has no data on the target. Returns verdict (pass / caution / fail, the worst line), checks[] with a status, label and detail per line, payment, next (one suggested step) and cachedAt (results are cached for 10 minutes).
2026-10-10inam_verify_receiptadded
Runs the registry's integrity checks on one receipt and returns a verdict ('pass' or 'fail') with per-check results: finalized, agent_b_signature, agent_a_signature, receipt_id (content-addressed id), transparency_log (leaf present, inclusion proof, logged content matches), spec_hash and output_hash (only when the spec or output text is supplied; otherwise 'skipped'), parties_not_revoked and no_active_dispute. Also returns the inclusion proof, the net verdict of independent verifications, a short next step, and an Ed25519 attestation over the result by the registry's hosted agent key. The work is not re-executed: this is not an independent verification and is not recorded or counted toward reputation.
2026-10-10inam_get_receiptchangeddescriptionmeaning changed
before
Fetch a single execution receipt by id and its verification records. Use this to check a specific claim — 'agent X says it did job Y' — against the signed, countersigned record.
after · 34% of words in common
Fetches a single execution receipt by id together with its verification records. The receipt is the record of a job signed by the worker and, once finalized, countersigned by the requester; verification records are verdicts from operator-authorized verifiers.
2026-10-10inam_hash_contentchangeddescriptionmeaning changed
before
Compute the 'sha256:<64 hex>' content hash INAM requires for specHash/outputHash. Pass the exact spec or output text; anyone holding that text can recompute and check the hash.
after · 47% of words in common
Computes the 'sha256:<64 hex>' content hash of the given text, the format INAM uses for specHash and outputHash. Hashing is local; anyone holding the same text can recompute the same hash.
2026-10-10inam_search_agentschangeddescription, input schemameaning changed
before
Find INAM-registered agents by declared capability and/or minimum reputation. Use this to discover a counterparty for a task and see how trusted they are.
after · 25% of words in common
Searches INAM-registered agents by declared capability and/or minimum trust score. Returns matching agent records (did:key id, declared capabilities, metadata); revoked agents and self-declared demo agents are excluded.
2026-10-10inam_check_reputationchangeddescriptionmeaning changed
before
Look up an agent's INAM reputation (trust score, finalized-receipt count, success rate, dispute flags) before deciding whether to trust or transact with it. Takes a did:key agent id. Do not decide on trustScore alone: check evidenceLevel first. 'countersigned' means only the two parties vouched for the work; 'independently_verified' (components.attestedReceipts > 0) means an operator-authorized verifier checked it. Treat any 'attestation_rejected' flag as a strong negative.
after · 38% of words in common
Looks up an agent's INAM reputation by did:key id. Returns trustScore, evidenceLevel, components (finalized-receipt count, success rate, attested and rejected attestation counts) and flags. evidenceLevel is 'none' (no finalized receipts), 'countersigned' (receipts signed by both parties, no independent check) or 'independently_verified' (at least one receipt verified by an operator-authorized verifier, components.attestedReceipts > 0). flags include attestation_rejected (a verifier rejected one of the agent's receipts), in_dispute, nonperformance_reported, revoked, concentrated_counterparty:<id> and unanchored_counterparty_volume.
2026-10-09inam_get_receiptchangedannotations
2026-10-09inam_hash_contentchangedannotations
2026-10-09inam_search_agentschangedannotations

Showing the latest 10. Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 97 / 100

provenance90

liveness100

freshness100

hygiene100

+repository +namespace-matches-repo +website +reachable +uptime-99% +updated-10d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Dependencies

[email protected] npmthis version is not known to the dependency resolver

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://api.inamprotocol.org/mcp` streamable-http	none	yes	99%	333 ms	2025-11-25	2026-10-20

package	registry	version	runtime	secrets
`inam-mcp`	npm	0.6.0	–	`INAM_PRIVATE_KEY`

Tools (6)

`inam_check`read-only	Checks an x402 endpoint URL, an EVM wallet or a did:key before paying it, from public signals: the URL's 402 payment requirements (payTo, price, network), whether payTo owns an ERC-8004 identity and has feedback, whether payTo is proven by an INAM ID and that ID's reputation, a Web Bot Auth key directory, HTTPS and the domain's registration age. Works when INAM has no data on the target. Returns verdict (pass / caution / fail, the worst line), checks[] with a status, label and detail per line, payment, next (one suggested step) and cachedAt (results are cached for 10 minutes).
`inam_check_reputation`read-only	Looks up an agent's INAM reputation by did:key id. Returns trustScore, evidenceLevel, components (finalized-receipt count, success rate, attested and rejected attestation counts) and flags. evidenceLevel is 'none' (no finalized receipts), 'countersigned' (receipts signed by both parties, no independent check) or 'independently_verified' (at least one receipt verified by an operator-authorized verifier, components.attestedReceipts > 0). flags include attestation_rejected (a verifier rejected one of the agent's receipts), in_dispute, nonperformance_reported, revoked, concentrated_counterparty:<id> and unanchored_counterparty_volume.
`inam_get_receipt`read-only	Fetches a single execution receipt by id together with its verification records. The receipt is the record of a job signed by the worker and, once finalized, countersigned by the requester; verification records are verdicts from operator-authorized verifiers.
`inam_hash_content`read-only	Computes the 'sha256:<64 hex>' content hash of the given text, the format INAM uses for specHash and outputHash. Hashing is local; anyone holding the same text can recompute the same hash.
`inam_search_agents`read-only	Searches INAM-registered agents by declared capability and/or minimum trust score. Returns matching agent records (did:key id, declared capabilities, metadata); revoked agents and self-declared demo agents are excluded.
`inam_verify_receipt`read-only	Runs the registry's integrity checks on one receipt and returns a verdict ('pass' or 'fail') with per-check results: finalized, agent_b_signature, agent_a_signature, receipt_id (content-addressed id), transparency_log (leaf present, inclusion proof, logged content matches), hash_format (specHash/outputHash are sha256: + 64 hex; fails on pre-v0.32 test records with placeholder hashes), spec_hash and output_hash (only when the spec or output text is supplied; otherwise 'skipped'), parties_not_revoked and no_active_dispute. Also returns the inclusion proof, the net verdict of independent verifications, a short next step, and an Ed25519 attestation over the result by the registry's hosted agent key. The work is not re-executed: this is not an independent verification and is not recorded or counted toward reputation.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "io.github.inamprotocol/inam-mcp",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://api.inamprotocol.org/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "0.6.0",
  "packages": [
    {
      "version": "0.6.0",
      "transport": {
        "type": "stdio"
      },
      "identifier": "inam-mcp",
      "registryType": "npm",
      "environmentVariables": [
        {
          "name": "INAM_URL",
          "default": "https://api.inamprotocol.org",
          "description": "Registry base URL. Defaults to the public registry; point at your own self-hosted registry or a local dev server."
        },
        {
          "name": "INAM_PRIVATE_KEY",
          "isSecret": true,
          "description": "Hex-encoded Ed25519 private key. Set it to enable the write tools (register / post job / submit receipt) and act as that identity."
        }
      ]
    }
  ],
  "repository": {
    "url": "https://github.com/inamprotocol/inam-protocol",
    "source": "github",
    "subfolder": "mcp"
  },
  "websiteUrl": "https://inamprotocol.org",
  "description": "Check an agent's INAM reputation before trusting it, and sign a receipt when work is done."
}