Search / io.github.stillmarcus24/stillos-notary-mcp
stillos-notary-mcp
not classifiedAttestation infrastructure for the agentic economy: signed, independently verifiable verdicts.
v1.3.4 · active · repository · descriptor JSON · versions
Search / io.github.stillmarcus24/stillos-notary-mcp
Attestation infrastructure for the agentic economy: signed, independently verifiable verdicts.
v1.3.4 · active · repository · descriptor JSON · versions
{
"mcpServers": {
"stillos-notary-mcp": {
"type": "http",
"url": "https://stillos-notary-mcp-edge.stillos.workers.dev/mcp"
}
}
}claude mcp add --transport http stillos-notary-mcp https://stillos-notary-mcp-edge.stillos.workers.dev/mcp[mcp_servers.stillos-notary-mcp]
url = "https://stillos-notary-mcp-edge.stillos.workers.dev/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"stillos-notary-mcp": {
"type": "remote",
"url": "https://stillos-notary-mcp-edge.stillos.workers.dev/mcp",
"enabled": true
}
}
}{
"mcpServers": {
"stillos-notary-mcp": {
"type": "http",
"url": "https://stillos-notary-mcp-edge.stillos.workers.dev/mcp"
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=stillos-notary-mcp&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vc3RpbGxvcy1ub3RhcnktbWNwLWVkZ2Uuc3RpbGxvcy53b3JrZXJzLmRldi9tY3AifQ%3D%3D"
}{
"servers": {
"stillos-notary-mcp": {
"type": "http",
"url": "https://stillos-notary-mcp-edge.stillos.workers.dev/mcp"
}
}
}{
"mcpServers": {
"stillos-notary-mcp": {
"httpUrl": "https://stillos-notary-mcp-edge.stillos.workers.dev/mcp"
}
}
}extensions:
"stillos-notary-mcp":
enabled: true
name: "stillos-notary-mcp"
type: streamable_http
uri: "https://stillos-notary-mcp-edge.stillos.workers.dev/mcp"
timeout: 300
protocol.modernsupports 2026-07-28 (server/discover)protocol.statelessanswers without a sessionprotocol.transportstreamable HTTPprotocol.list_ttltools/list declares ttlMs 0, so clients re-fetch it on every useauth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptionsevery tool has a descriptiontools.description_lengthdescriptions are concisetools.schemasevery tool has an object input schematools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky onestools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: screen_entity (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); distress_score (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); claim_verdict (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …tools.token_costabout 861 tokens to load every tooltools.api_dumptools are not a one-to-one API dumpstability.changesno tool changes in 30 daysstability.rug_pullno tool changed its meaning under the same namedeps.known_vulns1 advisory to act on (malicious, or rated high or critical with a fix available): GHSA-96hv-2xvq-fx4p in [email protected] (indirect, fixed in 8.21.0); 4 more of lower severity or without a fixdeps.mcp_sdk_versionthe official MCP SDK is not in the dependency graphdeps.resolvable[email protected] resolved: 469 packagesNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+repository +namespace-matches-repo -unreachable(1 failures) +updated-27d-ago
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
[email protected] npm468 dependencies, resolved · advisories checked 2026-10-19
| advisory | severity | package | fixed in |
|---|---|---|---|
| GHSA-96hv-2xvq-fx4pws: Memory exhaustion DoS from tiny fragments and data chunks | high | [email protected]indirect | fixed in 8.21.0 |
| GHSA-vcc3-ghjq-m6frdecode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input | moderate | [email protected]indirect | fixed in 0.5.0 |
| GHSA-w5hq-g745-h8pquuid: Missing buffer bounds check in v3/v5/v6 when buf is provided | moderate | [email protected]indirect | fixed in 11.1.1 |
| GHSA-w5hq-g745-h8pquuid: Missing buffer bounds check in v3/v5/v6 when buf is provided | moderate | [email protected]indirect | fixed in 11.1.1 |
| GHSA-58qx-3vcg-4xpxws: Uninitialized memory disclosure | moderate | [email protected]indirect | fixed in 8.20.1 |
Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.
| remote | auth | reachable | uptime 30d | p50 | protocol | last ok |
|---|---|---|---|---|---|---|
https://stillos-notary-mcp-edge.stillos.workers.dev/mcp streamable-http | none | no (1 failures) | 95% | 338 ms | 2026-07-28 | 2026-10-19 |
| package | registry | version | runtime | secrets |
|---|---|---|---|---|
stillos-notary-mcp | npm | 1.3.4 | npx |
claim_verdict | Submits a claim and returns a signed verdict: settled against real external ground truth (GitHub PR, on-chain tx, HTTP status, JSON field, Kalshi market, or multi-exchange price consensus), Ed25519-signed, hash-chained. Free tier -- no account, no card. Returns CONFIRMED, REFUTED, or ERROR -- never a forced guess. |
distress_score | Validated corporate distress-foresight score for a single equity ticker: Altman Z-score computed from live SEC XBRL filings, backtested 71% sensitivity / 100% specificity with a ~109-day median lead time, Ed25519-signed. Paid: $0.15 USDC (Base) via x402 -- no free tier. A call without an attached x402 payment returns the payment requirement, not a verdict. |
file_dispute | Files a bonded dispute against a verdict receipt: the disputed verdict is re-resolved immediately against the identical resolver specification that produced it -- independent re-run, not a re-vote. An upheld dispute overturns the verdict and queues a slashable payout against the notary's on-chain correctness bond. Paid: $1.00 USDC (Base) via x402 -- no free tier. A call without an attached x402 payment returns the payment requirement (price, payTo, asset), not a verdict. |
screen_entity | OFAC SDN sanctions name screen: matches a legal name against the OFAC Specially Designated Nationals list, with a source_as_of freshness timestamp, Ed25519-signed. Paid: $0.001 USDC (Base) via x402 -- no free tier. A call without an attached x402 payment returns the payment requirement, not a verdict. |
verify_receipt | Independently verifies any StillOS notary receipt by its hash: confirms the hash chain is intact and the Ed25519 signature is valid. Read-only, free, no auth. |
Schemas: list_tools.
{
"name": "io.github.stillmarcus24/stillos-notary-mcp",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://stillos-notary-mcp-edge.stillos.workers.dev/mcp",
"type": "streamable-http"
}
],
"version": "1.3.4",
"packages": [
{
"version": "1.3.4",
"transport": {
"type": "stdio"
},
"identifier": "stillos-notary-mcp",
"runtimeHint": "npx",
"registryType": "npm",
"runtimeArguments": [
{
"type": "positional",
"value": "mcp",
"description": "run as MCP stdio server"
}
]
}
],
"repository": {
"url": "https://github.com/stillmarcus24/stillos-notary-mcp",
"source": "github"
},
"description": "Attestation infrastructure for the agentic economy: signed, independently verifiable verdicts."
}