@forestrie/mcp-verify

Verify a SCITT receipt under a trust root you hold — offline, no backend, no key, no network

npm · fingerprint 3b0be50fcf8add3dc3deb446 · repository · RSS

4tools

1recorded versions

3htracked

tracking started

What changed

Nothing, since tracking began. That is the good outcome, and it is what most servers look like.

Show all 4 tool fingerprints

decode_receipt

9972d06bfd40bc75

verify_grant_receipt

2ad2e81b643cc28f

verify_receipt

070a7366467585bc

verify_self

cc29bb47bf35d473

If you run this server, put the proxy in front of it. It pins these exact fingerprints on first connect and stops the session if they move.

npx --yes mcp-pin@0.1.4 -- <your @forestrie/mcp-verify command>

Or subscribe to this page's RSS feed to be told when it changes.

The badge states one fact about time and nothing else. It never claims a server is safe.

[![mcp-pin](https://mcp-pin.gautamkhosla.com/badge/2561a5aefb698049.svg)](https://mcp-pin.gautamkhosla.com/servers/2561a5aefb698049.html)