SCRIPTMASTERLABS — Provider Trust + CANON

Working · 2.7 s

com.scriptmasterlabs/provider-trustv1.3.0 Domain verified

Provider Trust MCP: verify providers before agents trust them + CANON bulk registry lookup (x402).

Security AI & Agents

Source Website Registry entry

Maintain this server? Claim it

Try it

Call this server's tools from your browser. Nothing to install.

https://provider-trust-mcp.onrender.com/mcp

Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.

Tool list from our last check. Connect live to refresh it.

canon_registry_bulk_lookup Read-only

PAID tool ($0.01 USDC via x402, Base). Resolve up to 100 artifact freshness records in one call against live registries and cryptographically verified CANON publisher manifests: detects stale mirrors, superseded artifacts, and publisher/registry conflicts. Send the x402 PAYMENT-SIGNATURE header on the /mcp request; without payment the call returns the canonical x402 challenge (HTTP 402, amount 10000 = $0.01 USDC, payTo of the CANON endpoint). Settlement is performed by the canonical CANON endpoint on SqueezeOS; this MCP never holds funds and never pays on your behalf.

itemsarray, required

One to 100 package or artifact freshness checks.

Tools (7)

canon_registry_bulk_lookup

read-only

Argument	Type	Description
items*	array	One to 100 package or artifact freshness checks.

Input schema (JSON)

{
  "type": "object",
  "required": [
    "items"
  ],
  "properties": {
    "items": {
      "type": "array",
      "items": {
        "type": "object",
        "required": [
          "id"
        ],
        "properties": {
          "id": {
            "type": "string",
            "maxLength": 2048,
            "minLength": 1,
            "description": "Package or artifact identifier to resolve, e.g. an npm package name."
          },
          "type": {
            "enum": [
              "npm",
              "pypi",
              "api",
              "doc"
            ],
            "type": "string",
            "description": "Artifact family; omit only when CANON can infer it from the identifier."
          },
          "held_version": {
            "type": "string",
            "description": "Optional version currently held by the caller or mirror, for freshness comparison."
          },
          "held_integrity": {
            "type": "string",
            "description": "Optional integrity value currently held by the caller, for tamper comparison when evidence supports it."
          },
          "publisher_domain": {
            "type": "string",
            "description": "Optional public publisher domain whose CANON manifest and Ed25519 keyset should be verified."
          }
        },
        "additionalProperties": false
      },
      "maxItems": 100,
      "minItems": 1,
      "description": "One to 100 package or artifact freshness checks."
    }
  },
  "additionalProperties": false
}

check_history

Check recent evidence-backed provider history. Traffic volume is context only and is never presented as buyers, trust, or reputation.

read-only

Argument	Type	Description
hours	integer

Input schema (JSON)

{
  "type": "object",
  "properties": {
    "hours": {
      "type": "integer",
      "default": 720,
      "maximum": 2160,
      "minimum": 1
    }
  },
  "additionalProperties": false
}

check_identity

Check live provider identity evidence.

read-only

No arguments.

Input schema (JSON)

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}

check_payment

Check live x402 payment readiness and real settlement evidence.

read-only

No arguments.

Input schema (JSON)

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}

check_status

Check whether the Provider Trust backend is live.

read-only

No arguments.

Input schema (JSON)

{
  "type": "object",
  "properties": {},
  "additionalProperties": false
}

compare_providers

Compare 2-5 providers using live evidence. No made-up score or winner.

read-only

Argument	Type	Description
targets*	array

Input schema (JSON)

{
  "type": "object",
  "required": [
    "targets"
  ],
  "properties": {
    "targets": {
      "type": "array",
      "items": {
        "type": "string",
        "maxLength": 2048,
        "minLength": 8
      },
      "maxItems": 5,
      "minItems": 2
    }
  },
  "additionalProperties": false
}

verify_provider

Verify a provider or source before an AI agent trusts or uses it. Returns live evidence only; unknown stays unknown.

read-only

Argument	Type	Description
target*	string	Public HTTPS provider, source, MCP, A2A, or API URL.

Input schema (JSON)

{
  "type": "object",
  "required": [
    "target"
  ],
  "properties": {
    "target": {
      "type": "string",
      "maxLength": 2048,
      "minLength": 8,
      "description": "Public HTTPS provider, source, MCP, A2A, or API URL."
    }
  },
  "additionalProperties": false
}