protogrid

Search / io.github.tjcgraham-rgb/gaip-trust-assurance

GAIP Trust & Assurance Agent

R0· no sign-in

Now part of GAIP Witness: verifies GAIP receipts; evidence packs and incident bundles.

v1.5.0 · active · repository · website · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality75good
Trust93of 100
Uptime, 30 days100%
Latency p502361 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "gaip-trust-assurance": {
      "type": "http",
      "url": "https://www.gaipagents.com/mcp/agents/trust-assurance"
    }
  }
}
claude mcp add --transport http gaip-trust-assurance https://www.gaipagents.com/mcp/agents/trust-assurance
[mcp_servers.gaip-trust-assurance]
url = "https://www.gaipagents.com/mcp/agents/trust-assurance"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "gaip-trust-assurance": {
      "type": "remote",
      "url": "https://www.gaipagents.com/mcp/agents/trust-assurance",
      "enabled": true
    }
  }
}
{
  "mcpServers": {
    "gaip-trust-assurance": {
      "type": "http",
      "url": "https://www.gaipagents.com/mcp/agents/trust-assurance"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=gaip-trust-assurance&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vd3d3LmdhaXBhZ2VudHMuY29tL21jcC9hZ2VudHMvdHJ1c3QtYXNzdXJhbmNlIn0%3D"
}
{
  "servers": {
    "gaip-trust-assurance": {
      "type": "http",
      "url": "https://www.gaipagents.com/mcp/agents/trust-assurance"
    }
  }
}
{
  "mcpServers": {
    "gaip-trust-assurance": {
      "httpUrl": "https://www.gaipagents.com/mcp/agents/trust-assurance"
    }
  }
}
extensions:
  "gaip-trust-assurance":
    enabled: true
    name: "gaip-trust-assurance"
    type: streamable_http
    uri: "https://www.gaipagents.com/mcp/agents/trust-assurance"
    timeout: 300

Quality 75 / 100good

protocol75 · weight 25
  • warn
    protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
  • n/a
    protocol.statelessonly applies to 2026-07-28 servers
  • pass
    protocol.transportstreamable HTTP
  • n/a
    protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene100 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • pass
    tools.annotations6 of 6 tools declare readOnlyHint or destructiveHint
  • pass
    tools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHint
  • pass
    tools.token_costabout 2,513 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
stability25 · weight 15
  • warn
    stability.changes15 tool changes in 30 days
  • fail
    stability.rug_pull3 tools kept their name but changed most of their description in 30 days; review before trusting them
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

6 tools, about 2,513 tokens to load them all · tool set e9a45e7331ad · tools last changed 2026-10-05 · checked 2026-10-21 01:06 UTC

Tool changes

  • gaip_receipt_exportchangedinput schema
  • gaip_incident_bundlechangedinput schema
  • gaip_check_sar_receiptadded

    Use this when handed an x402 SAR-shaped receipt (draft proposal shape; may change). Pass `sar_receipt`, optionally the issuer's `public_key`. Returns missing fields, whether receipt_id matches the core and whether the signature checks out against that key. Free, read-only, no account; inputs must be public and non-personal.

  • gaip_receipt_exportchangeddescription
    before

    Use this when you need a GAIP receipt in another format. Pass `receipt_id` and `format`: x402 (attestation style), erc8004 (validation-response shape) or vc (W3C-VC-like JSON-LD). Unsigned; integrity via hash chain and Merkle proof; no on-chain write. Free, read-only, no account; inputs must be public and non-personal.

    after · 82% of words in common

    Use this when you need a GAIP receipt in another format. Pass `receipt_id` and `format`: x402 (attestation style), erc8004 (validation-response shape) or vc (W3C-VC-like JSON-LD). Ed25519-signed when the runtime key is available; hash chain and Merkle proof; no on-chain write. Free, read-only, no account; inputs must be public and non-personal.

  • inspect_counterparty_evidencechangedinput schema
  • gaip_incident_bundlechangeddescription, input schema
    before

    Something went wrong with an agent and you need the facts in order? Pass the `receipt_ids` you hold and attributed `observations` ({source, statement, observed_at_utc}). GAIP verifies each receipt, orders a timeline, attributes every entry to its source and adds an EU AI Act Article 73 reference aid. No fault, cause or liability finding; not a regulatory filing. If BLOCKED, read `hint`. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

    after · 57% of words in common

    Use this when something went wrong with an agent and you need the facts in order. Pass the `receipt_ids` you hold and attributed `observations`. Returns a verified, source-attributed timeline with an EU AI Act Art. 73 reference aid. No fault, cause or liability finding. Free, read-only, no account; inputs must be public and non-personal.

  • gaip_evidence_packchangeddescription, input schemameaning changed
    before

    An insurer, auditor or buyer asking what evidence exists about an agent or supplier? Pass its `subject` (public id or https URL), an optional `scope` (receipt_ids, since/until, categories, max_items) and optional `requester` (continuity_handle to include your own receipts). Get conformance, watch, witness, repair and incident records, each with a verify URL and Merkle proof, a manifest of counts and gaps, and a reference table of where it may help locate evidence for AIUC-1 / ISO/IEC 42001 reviews. An evidence compilation, not a certification or advice. If BLOCKED, read `hint`. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

    after · 44% of words in common

    Use this when an insurer, auditor or buyer asks what evidence exists about an agent or supplier. Pass its `subject` (public id or https URL). Returns conformance, watch, witness, repair and incident records with Merkle proofs, plus gaps. A compilation, not certification or advice. Free, read-only, no account; inputs must be public and non-personal.

  • verify_gaip_receiptchangedtitle, description, input schema, annotations
    before

    Verify any GAIP receipt ID: retained history, hash chain and Merkle inclusion proof. Integrity only; it does not make the underlying claim true. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

    after · 60% of words in common

    Use this when you hold a GAIP receipt_id and want to confirm it ("is this receipt genuine?"). Returns the retained record, hash chain and Merkle inclusion proof. Integrity only: it does not make the underlying claim true. Free, read-only, no account; inputs must be public and non-personal.

  • gaip_receipt_exportchangeddescription, input schema
    before

    Need a GAIP receipt in another ecosystem's shape? Pass `receipt_id` and `format`: `x402` (Settlement Attestation Receipt proposal style), `erc8004` (validation-response shape for off-chain publication) or `vc` (W3C-VC-like JSON-LD). Unsigned: integrity via hash chain and Merkle proof only; no on-chain write. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

    after · 71% of words in common

    Use this when you need a GAIP receipt in another format. Pass `receipt_id` and `format`: x402 (attestation style), erc8004 (validation-response shape) or vc (W3C-VC-like JSON-LD). Unsigned; integrity via hash chain and Merkle proof; no on-chain write. Free, read-only, no account; inputs must be public and non-personal.

  • inspect_counterparty_evidencechangedtitle, description, input schema, annotations
    before

    Need evidence about an agent before you delegate to it? Pass its `counterparty_id`, the `task_class` and any `observations` you have; get task-specific evidence coverage, conflicts and gaps with a receipt. No universal trust score or decision. Free, read-only, no account. Inputs must be public and non-personal; calling declares that (data_classification defaults to PUBLIC).

    after · 54% of words in common

    Use this when asked what evidence exists about an agent before delegating to it. Pass its `counterparty_id` and any `observations`. Returns task-specific evidence coverage, conflicts, gaps and GAIP's own earlier checks of it, with a receipt. Never a trust score or recommendation. Free, read-only, no account; inputs must be public and non-personal.

Showing the latest 10. Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 93 / 100

duplicate-repo
provenance90
liveness100
freshness100
hygiene80

+repository +namespace-matches-repo +website +reachable +uptime-100% +updated-11d-ago -duplicate-repo(12 names)

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://www.gaipagents.com/mcp/agents/trust-assurance streamable-httpnoneyes100%2361 ms2025-11-252026-10-20

Tools (6)

gaip_check_sar_receiptread-onlyUse this when handed an x402 SAR-shaped receipt (draft proposal shape; may change). Pass `sar_receipt`, optionally the issuer's `public_key`. Returns missing fields, whether receipt_id matches the core and whether the signature checks out against that key. Free, read-only, no account; inputs must be public and non-personal.
gaip_evidence_packread-onlyUse this when an insurer, auditor or buyer asks what evidence exists about an agent or supplier. Pass its `subject` (public id or https URL). Returns conformance, watch, witness, repair and incident records with Merkle proofs, plus gaps. A compilation, not certification or advice. Free, read-only, no account; inputs must be public and non-personal.
gaip_incident_bundleread-onlyUse this when something went wrong with an agent and you need the facts in order. Pass the `receipt_ids` you hold and attributed `observations`. Returns a verified, source-attributed timeline with an EU AI Act Art. 73 reference aid. No fault, cause or liability finding. Free, read-only, no account; inputs must be public and non-personal.
gaip_receipt_exportread-onlyUse this when you need a GAIP receipt in another format. Pass `receipt_id` and `format`: x402 (attestation style), erc8004 (validation-response shape) or vc (W3C-VC-like JSON-LD). Ed25519-signed when the runtime key is available; hash chain and Merkle proof; no on-chain write. Free, read-only, no account; inputs must be public and non-personal.
inspect_counterparty_evidenceread-onlyUse this when asked what evidence exists about an agent before delegating to it. Pass its `counterparty_id` and any `observations`. Returns task-specific evidence coverage, conflicts, gaps and GAIP's own earlier checks of it, with a receipt. Never a trust score or recommendation. Free, read-only, no account; inputs must be public and non-personal.
verify_gaip_receiptread-onlyUse this when you hold a GAIP receipt_id and want to confirm it ("is this receipt genuine?"). Returns the retained record, hash chain and Merkle inclusion proof. Integrity only: it does not make the underlying claim true. Free, read-only, no account; inputs must be public and non-personal.

Schemas: list_tools.

Also listed as

11 other active names share this repository (showing 10): io.github.tjcgraham-rgb/gaip-art-intelligence, io.github.tjcgraham-rgb/gaip-broker, io.github.tjcgraham-rgb/gaip-buyer-assurance, io.github.tjcgraham-rgb/gaip-integration-protocol, io.github.tjcgraham-rgb/gaip-integration-repair, io.github.tjcgraham-rgb/gaip-listing-observer, io.github.tjcgraham-rgb/gaip-opportunity-broker, io.github.tjcgraham-rgb/gaip-outcome-value, io.github.tjcgraham-rgb/gaip-procurement-verify, io.github.tjcgraham-rgb/gaip-supplier-watch

Similar MCP servers

More from io.github.tjcgraham-rgb

And 5 more from this publisher.

Official server.json
{
  "name": "io.github.tjcgraham-rgb/gaip-trust-assurance",
  "icons": [
    {
      "src": "https://www.gaipagents.com/assets/agents/trust-assurance.svg",
      "sizes": [
        "any"
      ],
      "mimeType": "image/svg+xml"
    }
  ],
  "title": "GAIP Trust & Assurance Agent",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://www.gaipagents.com/mcp/agents/trust-assurance",
      "type": "streamable-http"
    }
  ],
  "version": "1.5.0",
  "repository": {
    "url": "https://github.com/tjcgraham-rgb/gaip-agents",
    "source": "github"
  },
  "websiteUrl": "https://www.gaipagents.com/agents/trust-assurance",
  "description": "Now part of GAIP Witness: verifies GAIP receipts; evidence packs and incident bundles."
}