Search / io.github.theoddden/stamp
protogridR0· no sign-inConcierge MCP for agentic workflows: verified time + drift, uuid, diff, calc, attest, verify.
v0.6.1 · active · repository · descriptor JSON · versions
{
"mcpServers": {
"stamp": {
"type": "http",
"url": "https://stamp-mcp.terradev.cloud/mcp"
}
}
}claude mcp add --transport http stamp https://stamp-mcp.terradev.cloud/mcp[mcp_servers.stamp]
url = "https://stamp-mcp.terradev.cloud/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"stamp": {
"type": "remote",
"url": "https://stamp-mcp.terradev.cloud/mcp",
"enabled": true
}
}
}{
"mcpServers": {
"stamp": {
"type": "http",
"url": "https://stamp-mcp.terradev.cloud/mcp"
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=stamp&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vc3RhbXAtbWNwLnRlcnJhZGV2LmNsb3VkL21jcCJ9"
}{
"servers": {
"stamp": {
"type": "http",
"url": "https://stamp-mcp.terradev.cloud/mcp"
}
}
}{
"mcpServers": {
"stamp": {
"httpUrl": "https://stamp-mcp.terradev.cloud/mcp"
}
}
}extensions:
"stamp":
enabled: true
name: "stamp"
type: streamable_http
uri: "https://stamp-mcp.terradev.cloud/mcp"
timeout: 300
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28protocol.statelessonly applies to 2026-07-28 serversprotocol.transportstreamable HTTPprotocol.list_ttlonly applies to 2026-07-28 serversauth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptionsevery tool has a descriptiontools.description_lengthdescriptions are concisetools.schemasevery tool has an object input schematools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky onestools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: diff (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); attest (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_time (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …tools.token_costabout 606 tokens to load every tooltools.api_dumptools are not a one-to-one API dumpstability.changesno tool changes in 30 daysstability.rug_pullno tool changed its meaning under the same namedeps.known_vulns2 advisories to act on (malicious, or rated high or critical with a fix available): GHSA-2g87-pp6c-29x5 in [email protected] (direct, fixed in 3.14.4), GHSA-5wr8-gcqf-gqf3 in [email protected] (direct, fixed in 3.14.4); 1 more of lower severity or without a fixdeps.mcp_sdk_versionthe official MCP SDK is not in the dependency graphdeps.resolvable[email protected] resolved: 10 packagesNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+repository +namespace-matches-repo +reachable +uptime-100% ~updated-38d-ago
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
[email protected] PyPI9 dependencies, resolved · advisories checked 2026-10-19
| advisory | severity | package | fixed in |
|---|---|---|---|
| GHSA-2g87-pp6c-29x5aiohttp: Multiple instances of excessive or unbounded memory/CPU use | high | [email protected]direct | fixed in 3.14.4 |
| GHSA-5wr8-gcqf-gqf3aiohttp server lacks an initial request/header timeout | high | [email protected]direct | fixed in 3.14.4 |
| GHSA-494j-54xm-rwp3AIOHTTP: Secure attribute not enforced for shared cookie | low | [email protected]direct | fixed in 3.14.4 |
Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.
| remote | auth | reachable | uptime 30d | p50 | protocol | last ok |
|---|---|---|---|---|---|---|
https://stamp-mcp.terradev.cloud/mcp streamable-http | none | yes | 100% | 223 ms | 2025-11-25 | 2026-10-20 |
| package | registry | version | runtime | secrets |
|---|---|---|---|---|
stamp-mcp | pypi | 0.6.1 | – |
attest | Wrap any payload in a tamper-evident record: a UUID, a timestamp (NTP-verified when reachable, local clock otherwise -- the record says which), and a sha256 over the canonical record. One call, the record is complete and tamper-evident. |
calculate | Evaluate a math expression safely: + - * / // % **, parentheses, functions (abs round min max sqrt floor ceil exp log log2 log10 pow sin cos tan), constants pi e tau inf. Parsed to an AST and only whitelisted nodes are computed -- no eval(), no names, no arbitrary code. |
diff | Unified diff between two texts, with added/removed line counts. For reviewing edits, comparing outputs, or validating transformations. |
generate_uuid | Generate one or more random UUIDv4 identifiers -- for records, sessions, and IDs created in agent pipelines. |
get_time | Query an NTP server for current UTC time and this clock's offset. Appends the sample to the drift log and returns the trend inline: current offset, drift rate (ms/day), and whether the clock is stable, drifting, or accelerating. |
verify | Check a record produced by attest: recompute the sha256 over the record and compare. Pass/fail -- did this payload produce this hash at this timestamp. Any modified field breaks it. |
Schemas: list_tools.
{
"name": "io.github.theoddden/stamp",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://stamp-mcp.terradev.cloud/mcp",
"type": "streamable-http"
}
],
"version": "0.6.1",
"packages": [
{
"version": "0.6.1",
"transport": {
"type": "stdio"
},
"identifier": "stamp-mcp",
"registryType": "pypi"
}
],
"repository": {
"url": "https://github.com/theoddden/stamp-mcp",
"source": "github"
},
"description": "Concierge MCP for agentic workflows: verified time + drift, uuid, diff, calc, attest, verify."
}