protogrid

Search / io.github.mifori/certagent

Mifori CertAgent Trust Oracle

R0· no sign-in

Live AI agent trust oracle: audit synthetic IQ, latency & JSON compliance via x402 or free tokens.

v1.0.0 · active · website · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality85new
Trust80of 100
Uptime, 30 days100%
Latency p50279 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "certagent": {
      "type": "http",
      "url": "https://agent.mifori.com/mcp?v=1"
    }
  }
}
claude mcp add --transport http certagent https://agent.mifori.com/mcp?v=1
[mcp_servers.certagent]
url = "https://agent.mifori.com/mcp?v=1"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "certagent": {
      "type": "remote",
      "url": "https://agent.mifori.com/mcp?v=1",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "certagent": {
      "type": "http",
      "url": "https://agent.mifori.com/mcp?v=1"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=certagent&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYWdlbnQubWlmb3JpLmNvbS9tY3A%2Fdj0xIn0%3D"
}
{
  "servers": {
    "certagent": {
      "type": "http",
      "url": "https://agent.mifori.com/mcp?v=1"
    }
  }
}
{
  "mcpServers": {
    "certagent": {
      "httpUrl": "https://agent.mifori.com/mcp?v=1"
    }
  }
}
extensions:
  "certagent":
    enabled: true
    name: "certagent"
    type: streamable_http
    uri: "https://agent.mifori.com/mcp?v=1"
    timeout: 300

Quality 85 / 100new

protocol75 · weight 25
  • warn
    protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
  • n/a
    protocol.statelessonly applies to 2026-07-28 servers
  • pass
    protocol.transportstreamable HTTP
  • n/a
    protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene93 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • warn
    tools.description_length1 tools have descriptions over 1,024 characters, which crowds the context
  • pass
    tools.schemasevery tool has an object input schema
  • pass
    tools.annotations4 of 4 tools declare readOnlyHint or destructiveHint
  • pass
    tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
  • pass
    tools.token_costabout 1,631 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
stabilityn/a · weight 15
  • n/a
    stability.changes, stability.rug_pulltool history recorded for 2 of the 7 days needed
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

4 tools, about 1,631 tokens to load them all · tool set 8c8b5683851f · tools last changed 2026-10-18 · checked 2026-10-19 10:20 UTC

Tool changes

  • get_agent_certificatechangeddescription, input schema, output schemameaning changed
    before

    Retrieves and cryptographically validates a signed audit certificate by eval_id or lists chronological audit history for an agent_id in <50ms with no authentication, payment, or rate limits. Pass eval_id alone for an exact single-certificate lookup with HMAC-SHA256 signature verification, or pass agent_id (a DID or target_bot_url) with limit (1-50, default 10) to inspect historical evaluations beyond the deduplicated leaderboard snapshot; if both eval_id and agent_id are provided, eval_id takes precedence, and omitting both returns an INVALID_ARGUMENTS error. Use for zero-cost cryptographic proof verification or longitudinal drift analysis; use get_agent_leaderboard for ranked multi-agent discovery, verify_agent_reputation to execute a new live audit, or submit_agent_feedback to dispute an eval_id.

    after · 46% of words in common

    Retrieves and cryptographically validates a signed audit certificate by eval_id (including private certificates created with public=false) or lists chronological public audit history for an agent_id in <50ms with no authentication, payment, or rate limits. Pass eval_id alone for an exact single-certificate lookup with asymmetric Ed25519 signature verification against Mifori's public key (/.well-known/jwks.json), or pass agent_id (a DID or target_bot_url) with limit (1-50, default 10) to inspect historical evaluations.

  • get_agent_leaderboardchangedtitle, description, input schema, output schema, annotationsmeaning changed
    before

    Queries a free, unauthenticated single-page snapshot of top-ranked AI agents deduplicated by endpoint and ordered by Synthetic IQ descending (0-100) and round-trip latency ascending (ms), with no rate limits or cursor pagination. Set limit=1 to select the single highest-scoring agent for immediate task routing, or pass up to limit=100 (default 10) to compare candidate reliability tiers (AAA, AA, B) in one call. Use for zero-cost discovery of pre-verified agents; use get_agent_certificate to validate a specific eval_id or list chronological audit history for an agent_id, verify_agent_reputation to run a fresh live audit, or submit_agent_feedback to report telemetry.

    after · 25% of words in common

    Queries a free, unauthenticated snapshot of verified MCP servers and autonomous AI agents deduplicated by endpoint and ordered by Synthetic IQ descending (0-100) and round-trip latency ascending (ms). Each entry includes protocol_detected ('MCP 2.0', 'Mifori Cognitive v1', etc.) and verified_capabilities (listing verified MCP tool names and server versions). Pass query (e.g. 'wiki', 'search', 'cloudflare', 'crypto', 'docs') to filter agents by tool capability, DID, or domain, and optionally filter by tier ('AAA', 'AA', 'B', 'REJECTED').

  • submit_agent_feedbackchangedtitle, description, input schema, output schema, annotationsmeaning changed
    before

    Persists machine-to-machine telemetry or score disputes for an existing audit certificate (eval_id) in <100ms with no authentication or payment required, immediately granting 1 free audit credit (reward_status='1_FREE_AUDIT_CREDIT_GRANTED') whenever non-empty eval_id and reported_issue strings are provided. Reference the UUID from a prior verify_agent_reputation, get_agent_certificate, or get_agent_leaderboard result in eval_id, explain the anomaly in reported_issue, and optionally pass numeric overrides in suggested_metric (e.g. {'observed_latency_ms': 180, 'expected_iq': 95}); blank required fields fail schema validation. Use after an audit to contest a score or report runtime drift; use verify_agent_reputation to run a new live audit, get_agent_certificate to verify a certificate or view audit history, or get_agent_leaderboard to browse ranked agents.

    after · 32% of words in common

    Persists machine-to-machine telemetry, score disputes, or initial sandbox credit requests in <100ms with no authentication or payment required, immediately granting 1 free single-use audit credit token ('mfr_fbk_...'). First-time evaluators without a prior audit or dispute can pass eval_id='sandbox' (or 'onboarding') and describe their intended evaluation in reported_issue to receive a legitimate free reward_token for verify_agent_reputation without fabricating a complaint.

  • verify_agent_reputationchangedtitle, description, input schema, output schema, annotationsmeaning changed
    before

    Executes a live <500ms outbound HTTP POST challenge against target_bot_url to benchmark Synthetic IQ (0-100), round-trip latency, JSON schema compliance, and hallucination risk, persisting an HMAC-SHA256 signed certificate (eval_id) to the public ledger. Two-step parameter workflow: (1) call with target_bot_url alone (omitting payment_proof) for a free, side-effect-free PAYMENT_REQUIRED_402 invoice; (2) re-invoke with payment_proof set to a $0.005 Base Mainnet USDC transaction hash or a reward_token from submit_agent_feedback to execute the live SSRF-guarded probe, and optionally pass agent_id to bind the resulting certificate to a persistent DID across URL rotations for historical tracking in get_agent_certificate. Use before delegating tasks to an unverified endpoint; use get_agent_leaderboard for ranked discovery, get_agent_certificate to inspect an existing eval_id or agent_id audit history, or submit_agent_feedback to dispute a score.

    after · 39% of words in common

    Executes a live multi-protocol audit against target_bot_url (supporting MCP JSON-RPC 2.0 initialize + tools/list + execution probe over HTTP/SSE, SEP-1649 MCP Server Cards, Google A2A Agent Cards, and Mifori Cognitive challenge-response endpoints; non-agent static REST URLs are strictly rejected with 0 points) to benchmark Synthetic IQ (0-100), steady-state latency, JSON schema compliance, and verified tool capabilities, returning an Ed25519 asymmetrically signed certificate (eval_id). Pass public=false to run a private/confidential audit that returns a signed certificate without publishing target_bot_url to the public leaderboard. Two-step parameter workflow: (1) call with target_bot_url alone (omitting payment_proof) for a free PAYMENT_REQUIRED_402 quote, or call submit_agent_feedback with eval_id='sandbox' to obtain a free single-use 'mfr_fbk_...' credit token without needing a prior dispute; (2) invoke with payment_proof set to a 'mfr_fbk_...' token or a verified $0.005 Base Mainnet USDC transaction hash ('0x...').

  • get_agent_certificateadded

    Retrieves and cryptographically validates a signed audit certificate by eval_id or lists chronological audit history for an agent_id in <50ms with no authentication, payment, or rate limits. Pass eval_id alone for an exact single-certificate lookup with HMAC-SHA256 signature verification, or pass agent_id (a DID or target_bot_url) with limit (1-50, default 10) to inspect historical evaluations beyond the deduplicated leaderboard snapshot; if both eval_id and agent_id are provided, eval_id takes precedence, and omitting both returns an INVALID_ARGUMENTS error. Use for zero-cost cryptographic proof verification or longitudinal drift analysis; use get_agent_leaderboard for ranked multi-agent discovery, verify_agent_reputation to execute a new live audit, or submit_agent_feedback to dispute an eval_id.

  • get_agent_leaderboardchangeddescription
    before

    Queries a free, unauthenticated single-page snapshot of audited AI agents ranked by Synthetic IQ descending (0-100) and round-trip latency ascending (ms), with no rate limits or cursor pagination. Set limit=1 to select the single highest-scoring agent for immediate task routing, or pass up to limit=100 (default 10) to compare candidate reliability tiers (AAA, AA, B) in one call. Use for zero-cost discovery of pre-verified agents; use verify_agent_reputation instead to run a fresh live audit on a specific target_bot_url, or submit_agent_feedback to report telemetry for an eval_id.

    after · 83% of words in common

    Queries a free, unauthenticated single-page snapshot of top-ranked AI agents deduplicated by endpoint and ordered by Synthetic IQ descending (0-100) and round-trip latency ascending (ms), with no rate limits or cursor pagination. Set limit=1 to select the single highest-scoring agent for immediate task routing, or pass up to limit=100 (default 10) to compare candidate reliability tiers (AAA, AA, B) in one call. Use for zero-cost discovery of pre-verified agents; use get_agent_certificate to validate a specific eval_id or list chronological audit history for an agent_id, verify_agent_reputation to run a fresh live audit, or submit_agent_feedback to report telemetry.

  • submit_agent_feedbackchangeddescription, input schema
    before

    Persists machine-to-machine telemetry or score disputes for an existing audit certificate (eval_id) in <100ms with no authentication or payment required, immediately granting 1 free audit credit (reward_status='1_FREE_AUDIT_CREDIT_GRANTED') whenever non-empty eval_id and reported_issue strings are provided. Reference the UUID from a prior verify_agent_reputation or get_agent_leaderboard result in eval_id, explain the anomaly in reported_issue, and optionally pass numeric overrides in suggested_metric (e.g. {'observed_latency_ms': 180, 'expected_iq': 95}); blank required fields fail schema validation. Use after an audit to contest a score or report runtime drift; use verify_agent_reputation to run a new live audit, or get_agent_leaderboard to browse ranked agents.

    after · 98% of words in common

    Persists machine-to-machine telemetry or score disputes for an existing audit certificate (eval_id) in <100ms with no authentication or payment required, immediately granting 1 free audit credit (reward_status='1_FREE_AUDIT_CREDIT_GRANTED') whenever non-empty eval_id and reported_issue strings are provided. Reference the UUID from a prior verify_agent_reputation, get_agent_certificate, or get_agent_leaderboard result in eval_id, explain the anomaly in reported_issue, and optionally pass numeric overrides in suggested_metric (e.g. {'observed_latency_ms': 180, 'expected_iq': 95}); blank required fields fail schema validation. Use after an audit to contest a score or report runtime drift; use verify_agent_reputation to run a new live audit, get_agent_certificate to verify a certificate or view audit history, or get_agent_leaderboard to browse ranked agents.

  • verify_agent_reputationchangeddescription, input schema
    before

    Executes a live <500ms outbound HTTP audit against target_bot_url to measure Synthetic IQ (0-100), round-trip latency, JSON schema compliance, and hallucination risk, persisting a signed certificate (eval_id) to the public ledger. Call with target_bot_url alone (omitting payment_proof) for a free, side-effect-free PAYMENT_REQUIRED_402 invoice, then supply a 0x Base Mainnet USDC transaction hash ($0.005) or X-Agent-Key credit in payment_proof to run the live probe. Use before delegating tasks to a specific endpoint; use get_agent_leaderboard instead for free read-only ranking lookups, or submit_agent_feedback to dispute an existing eval_id.

    after · 58% of words in common

    Executes a live <500ms outbound HTTP POST challenge against target_bot_url to benchmark Synthetic IQ (0-100), round-trip latency, JSON schema compliance, and hallucination risk, persisting an HMAC-SHA256 signed certificate (eval_id) to the public ledger. Two-step parameter workflow: (1) call with target_bot_url alone (omitting payment_proof) for a free, side-effect-free PAYMENT_REQUIRED_402 invoice; (2) re-invoke with payment_proof set to a $0.005 Base Mainnet USDC transaction hash or a reward_token from submit_agent_feedback to execute the live SSRF-guarded probe, and optionally pass agent_id to bind the resulting certificate to a persistent DID across URL rotations for historical tracking in get_agent_certificate. Use before delegating tasks to an unverified endpoint; use get_agent_leaderboard for ranked discovery, get_agent_certificate to inspect an existing eval_id or agent_id audit history, or submit_agent_feedback to dispute a score.

Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 80 / 100

no-repository
provenance45
liveness100
freshness100
hygiene80

+website +reachable +uptime-100% +updated-3d-ago -no-repository

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://agent.mifori.com/mcp?v=1 streamable-httpnoneyes100%279 ms2025-11-252026-10-19

Tools (4)

get_agent_certificateread-onlyRetrieves and cryptographically validates a signed audit certificate by eval_id (including private certificates created with public=false) or lists chronological public audit history for an agent_id in <50ms with no authentication, payment, or rate limits. Pass eval_id alone for an exact single-certificate lookup with asymmetric Ed25519 signature verification against Mifori's public key (/.well-known/jwks.json), or pass agent_id (a DID or target_bot_url) with limit (1-50, default 10) to inspect historical evaluations.
get_agent_leaderboardread-onlyQueries a free, unauthenticated snapshot of verified MCP servers and autonomous AI agents deduplicated by endpoint and ordered by Synthetic IQ descending (0-100) and round-trip latency ascending (ms). Each entry includes protocol_detected ('MCP 2.0', 'Mifori Cognitive v1', etc.) and verified_capabilities (listing verified MCP tool names and server versions). Pass query (e.g. 'wiki', 'search', 'cloudflare', 'crypto', 'docs') to filter agents by tool capability, DID, or domain, and optionally filter by tier ('AAA', 'AA', 'B', 'REJECTED').
submit_agent_feedbackPersists machine-to-machine telemetry, score disputes, or initial sandbox credit requests in <100ms with no authentication or payment required, immediately granting 1 free single-use audit credit token ('mfr_fbk_...'). First-time evaluators without a prior audit or dispute can pass eval_id='sandbox' (or 'onboarding') and describe their intended evaluation in reported_issue to receive a legitimate free reward_token for verify_agent_reputation without fabricating a complaint.
verify_agent_reputationExecutes a live multi-protocol audit against target_bot_url (supporting MCP JSON-RPC 2.0 initialize + tools/list + execution probe over HTTP/SSE, SEP-1649 MCP Server Cards, Google A2A Agent Cards, and Mifori Cognitive challenge-response endpoints; non-agent static REST URLs are strictly rejected with 0 points) to benchmark Synthetic IQ (0-100), steady-state latency, JSON schema compliance, and verified tool capabilities, returning an Ed25519 asymmetrically signed certificate (eval_id). Pass public=false to run a private/confidential audit that returns a signed certificate without publishing target_bot_url to the public leaderboard. Two-step parameter workflow: (1) call with target_bot_url alone (omitting payment_proof) for a free PAYMENT_REQUIRED_402 quote, or call submit_agent_feedback with eval_id='sandbox' to obtain a free single-use 'mfr_fbk_...' credit token without needing a prior dispute; (2) invoke with payment_proof set to a 'mfr_fbk_...' token or a verified $0.005 Base Mainnet USDC transaction hash ('0x...').

Schemas: list_tools.

Similar MCP servers

Official server.json
{
  "name": "io.github.mifori/certagent",
  "title": "Mifori CertAgent Trust Oracle",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://agent.mifori.com/mcp?v=1",
      "type": "streamable-http"
    }
  ],
  "version": "1.0.0",
  "websiteUrl": "https://agent.mifori.com",
  "description": "Live AI agent trust oracle: audit synthetic IQ, latency & JSON compliance via x402 or free tokens."
}