Read-only checks for DIDs, credentials, MCP servers, A2A cards and agent delegation.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Check whether a DID.is delegation chain (compact JWTs, root first) allows an agent to call a given tool. Returns ALLOW or DENY with the verified chain. Read-only; nothing is stored.
Check whether a DID.is delegation chain (compact JWTs, root first) allows an agent to call a given tool. Returns ALLOW or DENY with the verified chain. Read-only; nothing is stored.
| Argument | Type | Description |
|---|---|---|
| tool* | string | |
| chain* | array | |
| trustedRoots | array |
{
"type": "object",
"required": [
"chain",
"tool"
],
"properties": {
"tool": {
"type": "string",
"maxLength": 256,
"minLength": 1
},
"chain": {
"type": "array",
"items": {
"type": "string",
"maxLength": 16384,
"minLength": 1
},
"maxItems": 8,
"minItems": 1
},
"trustedRoots": {
"type": "array",
"items": {
"type": "string",
"minLength": 1
},
"maxItems": 16
}
},
"additionalProperties": false
}Evaluate a DID against declarative rules (allowed methods, curves, domain binding, TLS, linked accounts, verifiable history, credential status). Returns PASS, FAIL or INDETERMINATE (not a pass). Read-only.
| Argument | Type | Description |
|---|---|---|
| did* | string | |
| policy* | object | |
| credential | any | Credential as a JSON object (W3C VC with Data Integrity proof) or compact string (VC-JWT, SD-JWT VC). |
{
"type": "object",
"required": [
"did",
"policy"
],
"properties": {
"did": {
"type": "string",
"maxLength": 2048,
"minLength": 1
},
"policy": {
"type": "object",
"required": [
"rules"
],
"properties": {
"name": {
"type": "string"
},
"rules": {
"type": "object"
}
}
},
"credential": {
"oneOf": [
{
"type": "object"
},
{
"type": "string",
"minLength": 1
}
],
"description": "Credential as a JSON object (W3C VC with Data Integrity proof) or compact string (VC-JWT, SD-JWT VC)."
}
},
"additionalProperties": false
}Fetch an A2A agent card (agent URL or card URL) and report its signature status, interfaces and skills. Read-only.
| Argument | Type | Description |
|---|---|---|
| url* | string | Agent base URL or agent card URL |
{
"type": "object",
"required": [
"url"
],
"properties": {
"url": {
"type": "string",
"maxLength": 2048,
"minLength": 1,
"description": "Agent base URL or agent card URL"
}
},
"additionalProperties": false
}Inspect a remote MCP server over Streamable HTTP: protocol version, tool inventory fingerprints, declared annotations versus DID.is side-effect heuristics, and changes since the last observation. Read-only; never authenticates to the server.
| Argument | Type | Description |
|---|---|---|
| endpoint* | string | https URL of the MCP endpoint |
{
"type": "object",
"required": [
"endpoint"
],
"properties": {
"endpoint": {
"type": "string",
"maxLength": 2048,
"minLength": 1,
"description": "https URL of the MCP endpoint"
}
},
"additionalProperties": false
}Resolve a DID (did:key, did:jwk, did:web, did:webvh) and report which evidence dimensions are established and which are not. Read-only; fetches the DID document from its origin.
| Argument | Type | Description |
|---|---|---|
| did* | string | The DID, e.g. did:web:did.is |
{
"type": "object",
"required": [
"did"
],
"properties": {
"did": {
"type": "string",
"maxLength": 2048,
"minLength": 1,
"description": "The DID, e.g. did:web:did.is"
}
},
"additionalProperties": false
}Search the public DID.is directory of DIDs whose controllers proved control and chose to be listed. Matches names and domains. Read-only.
| Argument | Type | Description |
|---|---|---|
| q | string | |
| limit | integer | |
| cursor | string | |
| method | string |
{
"type": "object",
"properties": {
"q": {
"type": "string",
"maxLength": 100
},
"limit": {
"type": "integer",
"maximum": 50,
"minimum": 1
},
"cursor": {
"type": "string",
"maxLength": 512
},
"method": {
"type": "string",
"maxLength": 32
}
},
"additionalProperties": false
}Verify a W3C Verifiable Credential or SD-JWT VC (JSON object or compact string): signature, validity period and status list. Optional requiredClaims checks issuer-signed claim values. Read-only.
| Argument | Type | Description |
|---|---|---|
| credential* | any | Credential as a JSON object (W3C VC with Data Integrity proof) or compact string (VC-JWT, SD-JWT VC). |
| expectedNonce | string | |
| requiredClaims | array | |
| expectedAudience | string | |
| trustedIssuerCertificates | array |
{
"type": "object",
"required": [
"credential"
],
"properties": {
"credential": {
"oneOf": [
{
"type": "object"
},
{
"type": "string",
"minLength": 1
}
],
"description": "Credential as a JSON object (W3C VC with Data Integrity proof) or compact string (VC-JWT, SD-JWT VC)."
},
"expectedNonce": {
"type": "string",
"maxLength": 512,
"minLength": 1
},
"requiredClaims": {
"type": "array",
"items": {
"type": "object",
"required": [
"path",
"equals"
],
"properties": {
"path": {
"type": "string",
"minLength": 1
},
"equals": {
"type": [
"string",
"integer",
"boolean"
]
}
},
"additionalProperties": false
},
"maxItems": 16,
"minItems": 1
},
"expectedAudience": {
"type": "string",
"minLength": 1
},
"trustedIssuerCertificates": {
"type": "array",
"items": {
"type": "string",
"minLength": 1
},
"maxItems": 8
}
},
"additionalProperties": false
}