# sebbi.pro - the proof layer for AI

> Score, seal and prove AI decisions in Bitcoin, plus 739 compliance checks, free to verify.

- name: pro.sebbi/governance
- version: 1.1.2
- connection class: R0 (autonomous)
- trust: 82/100 flags: no-repository
- quality: 72/100 (needs work)
- owner: not claimed
- descriptor: https://api.protogrid.dev/v1/servers/pro.sebbi%2Fgovernance
- tools: https://api.protogrid.dev/v1/servers/pro.sebbi%2Fgovernance/tools

**An agent can connect right now, no human step.** Remote endpoint, no authentication, reachable on the last probe.

## Connection (mcpServers)

```json
{
  "mcpServers": {
    "governance": {
      "type": "http",
      "url": "https://sebbi.pro/mcp"
    }
  }
}
```


## Trust

- hygiene: 80
- liveness: 98
- freshness: 100
- provenance: 55
- drivers: +dns-namespace +website +reachable +uptime-96% +updated-0d-ago -no-repository
- Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed.

## Quality 72/100 (needs work)

### protocol: 75 (weight 25)

- warn `protocol.modern`: newest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
- n/a `protocol.stateless`: only applies to 2026-07-28 servers
- pass `protocol.transport`: streamable HTTP
- n/a `protocol.list_ttl`: only applies to 2026-07-28 servers

### authorization: n/a (weight 15)

- n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth
- n/a `auth.secret_in_url`: no templated URL

### tool hygiene: 93 (weight 30)

- pass `tools.descriptions`: every tool has a description
- pass `tools.description_length`: descriptions are concise
- pass `tools.schemas`: every tool has an object input schema
- pass `tools.annotations`: 26 of 26 tools declare readOnlyHint or destructiveHint
- warn `tools.directory_hints`: 10 of 26 tools declare all four hints; missing: sebbi_overview (idempotentHint); sebbi_terms (idempotentHint); sebbi_list_packs (idempotentHint); …
- pass `tools.token_cost`: about 3,555 tokens to load every tool
- pass `tools.api_dump`: tools are not a one-to-one API dump

### stability: 25 (weight 15)

- warn `stability.changes`: 1255 tool changes in 30 days
- fail `stability.rug_pull`: 265 tools kept their name but changed most of their description in 30 days; review before trusting them

### dependencies: n/a (weight 15)

- n/a `deps.known_vulns`, `deps.mcp_sdk_version`, `deps.resolvable`: no npm or PyPI package

- tools: 26, about 3,555 tokens to load them all
- tool set hash: f0f222c38e9f5c7d0cabf5581b6a9522
- tools last changed: 2026-10-20T04:33:18.649Z
- badge: [![protogrid quality](https://protogrid.dev/badge/pro.sebbi/governance.svg)](https://protogrid.dev/servers/pro.sebbi/governance)
- Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed.

### Tool changes

- 2026-10-20 `sebbi_find_checks` changed (description)
  - before: Searches sebbi.pro's 680 compliance checks across 28 frameworks (EU AI Act, GDPR, DORA, ISO/IEC 42001 and 27001, NIST AI RMF, UK Online Safety Act, EU DSA, SOC 2, PCI DSS, HIPAA, CCPA, NIS2, Cyber Resilience Act, ICO Children's Code, US state AI laws, model risk, and agent-output gates). Filter by framework and/or words; returns each check's id, title, what it needs and the framework list. Then run one with sebbi_run_check or a whole framework with sebbi_run_framework. Read-only.
  - after: Searches sebbi.pro's 739 compliance checks across 32 frameworks (EU AI Act, GDPR, DORA, ISO/IEC 42001 and 27001, NIST AI RMF, UK Online Safety Act, EU DSA, SOC 2, PCI DSS, HIPAA, CCPA, NIS2, Cyber Resilience Act, ICO Children's Code, US state AI laws, model risk, and agent-output gates). Filter by framework and/or words; returns each check's id, title, what it needs and the framework list. Then run one with sebbi_run_check or a whole framework with sebbi_run_framework. Read-only.
- 2026-10-18 `sebbi_euaiact_017` removed
  - Conformance check (EU AI Act). EU AI Act Art.17 - quality management system - verifies the governance record's 'qms_ref' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
- 2026-10-18 `sebbi_iso42001_002` removed
  - Conformance check (ISO/IEC 42001). ISO/IEC 42001 Cl.5 - leadership commitment - verifies the governance record's 'leadership_commitment' field. Give the deployment's governance/decision record; returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
- 2026-10-18 `sebbi_sebbisounds_gate_055` removed
  - Checks the input record's 'preview_s' field: Preview length within 0..60s. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
- 2026-10-18 `sebbi_sebbisounds_gate_051` removed
  - Checks the input record's 'album' field: Album present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
- 2026-10-18 `sebbi_sebbisounds_gate_045` removed
  - Checks the input record's 'genre' field: Genre tag is lower-case. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
- 2026-10-18 `sebbi_sebbisounds_gate_042` removed
  - Checks the input record's 'bpm' field: Tempo (BPM) within 20..300. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
- 2026-10-18 `sebbi_sebbisounds_gate_040` removed
  - Checks the input record's 'rights_holder' field: Rights holder present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
- 2026-10-18 `sebbi_sebbisounds_gate_037` removed
  - Checks the input record's 'device_id' field: Device ID present. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.
- 2026-10-18 `sebbi_sebbisounds_gate_030` removed
  - Checks the input record's 'snr_db' field: SNR is at least 10 dB. Returns PASS or FAIL with a reason, and a tamper-evident SHA-256 receipt. Read-only; nothing is stored.

Full history: https://api.protogrid.dev/v1/servers/pro.sebbi%2Fgovernance/changes

## Remotes

- https://sebbi.pro/mcp (streamable-http, auth none, reachable true, uptime30d 0.9622642)

## Packages

_none_

## Tools (26)

- `sebbi_billing_link`: Returns a secure Stripe link where the person adds a card for the 50p per device per month subscription. Nothing is charged until they complete it.
- `sebbi_check_human_proof`: Looks up a Human Keys code (HK-XXXX-XXXX): whether a person typed the text live, and when. Use it to tell human-written from AI-written. Read-only.
- `sebbi_check_pack`: Checks a Signal Pack with the engine's own validator without publishing it, and explains any problem. Read-only.
- `sebbi_check_source`: Garbage-in guard. Checks whether a piece of data is really vouched for by the domain it claims to come from (a sebbi Verified Source). Returns GENUINE, UNVERIFIED or UNKNOWN, sealed into Bitcoin. Call it before trusting an input.
- `sebbi_create_account`: Opens a sebbi.pro account and returns the API key. Only call after showing sebbi_terms and the person agreeing; pass the terms_version they agreed to and customer_agreed=true. The agreement is sealed into the chain. Free for 90 days.
- `sebbi_decision_report`: The machine-proof report for one decision their key sealed: what was decided, who sent it, where it came from, and the proof it has not changed since. Hand it straight to an auditor or regulator. Needs their API key and the block number. Read-only.
- `sebbi_find_checks`: Searches sebbi.pro's 739 compliance checks across 32 frameworks (EU AI Act, GDPR, DORA, ISO/IEC 42001 and 27001, NIST AI RMF, UK Online Safety Act, EU DSA, SOC 2, PCI DSS, HIPAA, CCPA, NIS2, Cyber Resilience Act, ICO Children's Code, US state AI laws, model risk, and agent-output gates). Filter by framework and/or words; returns each check's id, title, what it needs and the framework list. Then run one with sebbi_run_check or a whole framework with sebbi_run_framework. Read-only.
- `sebbi_forever_proof`: A self-contained proof anyone can check against Bitcoin without sebbi.pro, for a notary receipt, a Human Keys code or any chain block. Give a code or a block number. Read-only.
- `sebbi_gateway_setup`: Returns a private gateway address for their API key and the exact one-line change for their stack. After that, every model call is scored, sealed, blocked if it should be, and comes back with an AI-Decision-Receipt header anyone can verify.
- `sebbi_insurability`: Rates an AI deployment against the Insurable AI Standard (I-0 Unrated to I-4 Pre-cleared) from controls it can prove, and seals an Insurability Certificate (IC-XXXX-XXXX) any insurer can verify. Records controls; it is not a guarantee against loss.
- `sebbi_list_packs`: Lists the published Signal Packs, optionally for one sector. Read-only.
- `sebbi_notarize`: Timestamps one or more SHA-256 fingerprints in Bitcoin through the free notary. Hash the file or text yourself and send only the 64-character fingerprint; the content never leaves. Returns a receipt code and link for each.
- `sebbi_notary_receipt`: Where a notary receipt (NT-XXXX-XXXX) or Human Keys code (HK-XXXX-XXXX) stands: queued, sent to Bitcoin, or confirmed in a block, with its Forever Proof link. Read-only.
- `sebbi_overview`: Start here. Lists every sebbi.pro product with what it does, who it is for, its page and its price. Read-only, no account needed.
- `sebbi_pack_reference`: The reference for writing Signal Packs, custom decision rules on top of the engine: the signals, measurements, flags, operators and verdicts. Read before writing one. Read-only.
- `sebbi_publish_pack`: Publishes a Signal Pack to the open library, sealed, dated and credited to its author. Free.
- `sebbi_run_check`: Runs one sebbi.pro compliance check by its id (from sebbi_find_checks, e.g. sebbi_euaiact_014). Framework checks take the deployment's governance or decision record as 'record'; agent-output gates take 'input_payload' and 'output_payload'. Returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Nothing is stored.
- `sebbi_run_framework`: Runs every check in one framework against a single record and returns a scorecard: how many passed and failed, each failing control with its reason, and a receipt for every result. Use it for a quick readiness view, e.g. framework=euaiact with the deployment's governance record. Nothing is stored.
- `sebbi_setup_advice`: Recommends the right sebbi.pro products for how someone builds (Python, Node, Lovable, Zapier, a website, a phone app...) and gives step-by-step setup with working code or a ready-made prompt. Pass their stack and what they want to achieve. Read-only.
- `sebbi_spend_policy`: Sets, or reads back, an AI agent's spending limits: the most it may pay in one go and per day, and optionally the only payees allowed. Must be set before the agent can be approved to spend. Needs their API key.
- `sebbi_spend_request`: Call before every payment an AI agent makes. Returns a signed APPROVED or DENIED token checked against the agent's limits. Release the money only if it is APPROVED and spendable. sebbi.pro never holds or moves money.
- `sebbi_spend_verify`: Checks a Spend Gate token's signature and whether it can still be spent. Anyone can call it; no key needed. Read-only.
- `sebbi_terms`: Returns the service terms and their version. Show the full text to the person and get a clear yes before calling sebbi_create_account. Read-only.
- `sebbi_test_decision`: Sends one decision through the live engine with their API key and returns the verdict (ALLOW, CHALLENGE or BLOCK), the reasons and the sealed block number, so they see it working end to end. Writes one record to the chain.
- `sebbi_verify_chain`: Re-checks every block in the sebbi.pro chain and returns its height, tip and whether it is intact. Anyone can run it; no account needed. Read-only.
- `sebbi_verify_insurability`: For insurers and auditors: checks an Insurability Certificate (IC-XXXX-XXXX) against the chain and returns its level, which controls are verified or declared, whether it is still current, and its Bitcoin seal. No account needed. Read-only.