# KGLD Reserve Attestation

> KGLD gold-token reserve proof: custody vs supply, auditor report hash, human verification by email

- name: my.sitey/kgld-attestation
- version: 0.2.0
- connection class: R0 (autonomous)
- trust: 83/100 flags: no-repository
- quality: 79/100 (good)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/my.sitey%2Fkgld-attestation
- tools: https://api.protogrid.dev/v1/servers/my.sitey%2Fkgld-attestation/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "kgld-attestation": {
      "type": "http",
      "url": "https://mcp.sitey.my/mcp"
    }
  }
}
```


## Trust

- hygiene: 80
- liveness: 100
- freshness: 100
- provenance: 55
- drivers: +dns-namespace +website +reachable +uptime-100% +updated-29d-ago -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 79/100 (good)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 71 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- fail `tools.annotations`: no tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
- fail `tools.directory_hints`: no tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: get_reserve (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_attestation (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); request_verification (readOnlyHint, destructiveHint, idempotentHint, openWorldHint)
- pass `tools.token_cost`: about 462 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 100 (weight 15)

- pass `stability.changes`: 2 tool changes in 30 days
- pass `stability.rug_pull`: no tool changed its meaning under the same name

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 3, about 462 tokens to load them all
- tool set hash: 3e8774819a1104647e8b20438f5f9d9d
- tools last changed: 2026-10-08T11:49:05.165Z
- badge: [![protogrid quality](https://protogrid.dev/badge/my.sitey/kgld-attestation.svg)](https://protogrid.dev/servers/my.sitey/kgld-attestation)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-10-08 `request_verification` changed (description)
  - before: KGLD: ask the independent auditor to confirm the reserve report by email. Give ownerEmail (the requester's address): the auditor replies directly to that address from the auditor's own mail — this server is NOT in the reply path, so the reply cannot be fabricated by the issuer. The response returns verificationCode (the auditor writes it in the reply) and expectedSenderDomain. The requester checks: sender domain matches, code matches, hash/as-of match get_attestation. May take business days; may not be answered. Ask the user for their email before calling; call once per report. / 회계법인이 요청자 메일로 직접 답장. 호출 전 메일 주소 확인.
  - after: KGLD: ask the independent auditor to confirm the reserve report by email. Give ownerEmail (the requester's address): the auditor replies directly to that address from the auditor's own mail — this server is NOT in the reply path, so the reply cannot be fabricated by the issuer. The response returns verificationCode (the auditor writes it in the reply). The requester checks: the sender is the auditor's official domain (look it up independently — this server does not disclose it), code matches, hash/as-of match get_attestation. May take business days; may not be answered. Ask the user for their email before calling; call once per report. / 회계법인이 요청자 메일로 직접 답장. 호출 전 메일 주소 확인.
- 2026-10-08 `get_attestation` changed (description)
  - before: Independent auditor's proof-of-reserve report for KGLD: public PDF URL, SHA-256, as-of date, attested custody (troy oz), auditor name and reply domain; active token contract addresses with block-explorer links; and independentChecks — how to verify without trusting this server (hash the PDF, read totalSupply on-chain, compare). Start here for any 'is KGLD really backed' question. / 독립 감사 보고서 주소·해시·기준일·수탁량, 컨트랙트 주소·탐색기, 서버 밖 검증 방법.
  - after: Independent auditor's proof-of-reserve report for KGLD: public PDF URL, SHA-256, as-of date, attested custody (troy oz), auditor name; active token contract addresses with block-explorer links; and independentChecks — how to verify without trusting this server (hash the PDF, read totalSupply on-chain, compare). Start here for any 'is KGLD really backed' question. / 독립 감사 보고서 주소·해시·기준일·수탁량, 컨트랙트 주소·탐색기, 서버 밖 검증 방법.

Full history: https://api.protogrid.dev/v1/servers/my.sitey%2Fkgld-attestation/changes

## Remotes

- https://mcp.sitey.my/mcp (streamable-http, auth none, reachable true, uptime30d 1)

## Packages

_none_

## Tools (3)

- `get_attestation`: Independent auditor's proof-of-reserve report for KGLD: public PDF URL, SHA-256, as-of date, attested custody (troy oz), auditor name; active token contract addresses with block-explorer links; and independentChecks — how to verify without trusting this server (hash the PDF, read totalSupply on-chain, compare). Start here for any 'is KGLD really backed' question. / 독립 감사 보고서 주소·해시·기준일·수탁량, 컨트랙트 주소·탐색기, 서버 밖 검증 방법.
- `get_reserve`: KGLD current reserve: custody gold weight (g, troy oz), on-chain total supply, mintable allowance. Issuer's own tally (KorDA); the auditor's assurance covers only up to get_attestation.asOf. Verify supply on-chain via get_attestation.contracts. / KGLD 현재 준비금·발행량·발행 가능량. 코르다 자체 집계.
- `request_verification`: KGLD: ask the independent auditor to confirm the reserve report by email. Give ownerEmail (the requester's address): the auditor replies directly to that address from the auditor's own mail — this server is NOT in the reply path, so the reply cannot be fabricated by the issuer. The response returns verificationCode (the auditor writes it in the reply). The requester checks: the sender is the auditor's official domain (look it up independently — this server does not disclose it), code matches, hash/as-of match get_attestation. May take business days; may not be answered. Ask the user for their email before calling; call once per report. / 회계법인이 요청자 메일로 직접 답장. 호출 전 메일 주소 확인.