Servidor MCP

Proof Holdings

holdings.proof/mcp-server
Negocio y operaciones Seguridad Público y accesible MCP 2025-11-25

Qué hace este MCP

Provides domain verification, identity and delegation proofs, human approval workflows, trusted-contact challenges, and controlled access operations.

add_challenger
Pre-enroll a Proof-Me challenger (a trusted contact) on a HITL config. Enabling the first challenger opts the config into Proof-Me. A telegram challenger captures its chat_id later at enrollment; a whatsapp challenger must pre-declare its phone. Agent usage: After adding a challenger, call invite_challenger to mint the single-use enrollment link the challenger taps to bind their messenger identity. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['hitl_id', 'name', 'channel'], 'properties': {'name': {'type': 'string', 'maxLength': 100, 'minLength': 1, 'description': 'Display name of the challenger'}, 'channel': {'enum': ['telegram', 'whatsapp'], 'type': 'string', 'description': 'Messenger channel the challenger uses'}, 'hitl_id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'HITL config ID to enroll the challenger on'}, 'whatsapp_phone': {'type': 'string', 'description': 'E.164 phone with country code (required for the whatsapp channel)'}}, 'additionalProperties': False}
add_circle_member
Add a pending member to a Circle by name, with an optional pre-declared WhatsApp phone. The Telegram chat id is captured later when the member taps the enrollment deep link. Agent usage: after adding a member, call invite_circle_member to mint the single-use enrollment link the member taps to bind their messenger identity. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id', 'name'], 'properties': {'id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'Circle ID to add the member to'}, 'name': {'type': 'string', 'maxLength': 100, 'minLength': 1, 'description': 'Display name of the member'}, 'whatsapp_phone': {'type': 'string', 'pattern': '^\\+[1-9]\\d{7,14}$', 'description': 'E.164 WhatsApp phone with a leading + (optional, declared)'}}, 'additionalProperties': False}
add_circle_member_channel
Declare a channel for a Circle member. Returns 409 if that channel type already exists on the member. The identifier is a Telegram chat id or an E.164 WhatsApp phone (per-channel format validated server-side). ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id', 'member_id', 'channel', 'identifier'], 'properties': {'id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'Circle ID'}, 'channel': {'enum': ['telegram', 'whatsapp'], 'type': 'string', 'description': 'Channel type (telegram or whatsapp)'}, 'member_id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'Member ID to add the channel to'}, 'identifier': {'type': 'string', 'maxLength': 100, 'minLength': 1, 'description': 'Telegram chat id, or E.164 WhatsApp phone with a leading +'}}, 'additionalProperties': False}
add_domain
Add a new domain to verify ownership. Optionally specify email sending intent and verification method. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['domain'], 'properties': {'domain': {'type': 'string', 'maxLength': 255, 'minLength': 1, 'description': 'Domain name to add (e.g. example.com)'}, 'for_email_sending': {'type': 'boolean', 'description': 'Whether this domain is for email sending'}, 'verification_method': {'enum': ['auto_dns', 'manual_dns', 'http_file', 'email'], 'type': 'string', 'description': 'Preferred verification method'}}, 'additionalProperties': False}
add_verification_provider
Add an additional DNS provider for verification to an already-verified domain. Note: credentials will be visible in the AI conversation context. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id', 'provider', 'credentials'], 'properties': {'id': {'type': 'string', 'description': 'Domain ID'}, 'provider': {'type': 'string', 'maxLength': 50, 'minLength': 1, 'description': 'DNS provider identifier'}, 'credentials': {'type': 'object', 'description': 'Provider-specific credential key-value pairs', 'additionalProperties': {'type': 'string', 'maxLength': 2000}}}, 'additionalProperties': False}
cancel_user_request
Cancel a pending verification request. Only the creator can cancel. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Verification request ID to cancel'}}, 'additionalProperties': False}
cancel_verification_request
Cancel a pending verification request. Only pending requests can be cancelled. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Verification request ID'}}, 'additionalProperties': False}
check_domain_credentials
Check if stored DNS credentials have access to a domain. Use before triggering verification to confirm the credentials work. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Domain ID to check credentials for'}}, 'additionalProperties': False}
check_domain_email_status
Check the email sending setup status for a domain, including DNS record configuration progress. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Domain ID'}}, 'additionalProperties': False}
check_domain_verification
Check the status of a pending domain verification. Triggers a DNS/HTTP check and returns the updated status. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Domain verification ID'}}, 'additionalProperties': False}
check_user_domain_verification
Trigger a check on the domain verification challenge. Call after placing DNS record or HTTP file. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['session_id'], 'properties': {'session_id': {'type': 'string', 'description': 'Domain verification session ID'}}, 'additionalProperties': False}
claim_request_assets
Claim shared assets from a completed verification request. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Verification request ID'}}, 'additionalProperties': False}
claim_username
Claim a unique username for the authenticated user's public profile. Usernames must be 3-30 characters, alphanumeric and underscores only. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['username'], 'properties': {'username': {'type': 'string', 'pattern': '^[a-zA-Z0-9_]+$', 'maxLength': 30, 'minLength': 3, 'description': 'Username to claim (3-30 chars, alphanumeric and underscores)'}}, 'additionalProperties': False}
confirm_domain_email_code
Confirm domain email verification by submitting the code sent to the corporate email address. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id', 'code'], 'properties': {'id': {'type': 'string', 'description': 'Domain ID'}, 'code': {'type': 'string', 'maxLength': 10, 'minLength': 1, 'description': 'Verification code from the email'}}, 'additionalProperties': False}
connect_cloudflare
Connect a Cloudflare API token to a domain for automated DNS record management. Note: the API token will be visible in the AI conversation context. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id', 'api_token'], 'properties': {'id': {'type': 'string', 'description': 'Domain ID'}, 'api_token': {'type': 'string', 'minLength': 1, 'description': 'Cloudflare API token with DNS edit permissions'}}, 'additionalProperties': False}
connect_dns_provider
Connect a generic DNS provider to a domain using provider-specific credentials. Note: credentials will be visible in the AI conversation context. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id', 'provider', 'credentials'], 'properties': {'id': {'type': 'string', 'description': 'Domain ID'}, 'provider': {'type': 'string', 'maxLength': 50, 'minLength': 1, 'description': 'DNS provider identifier'}, 'credentials': {'type': 'object', 'description': 'Provider-specific credential key-value pairs', 'additionalProperties': {'type': 'string', 'maxLength': 2000}}}, 'additionalProperties': False}
connect_godaddy
Connect GoDaddy API credentials to a domain for automated DNS record management. Note: the API key and secret will be visible in the AI conversation context. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id', 'api_key', 'api_secret'], 'properties': {'id': {'type': 'string', 'description': 'Domain ID'}, 'api_key': {'type': 'string', 'minLength': 1, 'description': 'GoDaddy API key'}, 'api_secret': {'type': 'string', 'minLength': 1, 'description': 'GoDaddy API secret'}}, 'additionalProperties': False}
create_account
Create an account-bootstrap session for agent-driven onboarding. Public endpoint (no API key required). Returns a session id, channel-specific instructions, and — FOR TELEGRAM AND WHATSAPP ONLY — deep_link, qr_code (base64 PNG) and qr_text (UTF-8 text QR). The endpoint is safe to call regardless of whether the submitted identity is new: completing verification transparently creates a User when none exists, or logs the user in when one already does. The response is intentionally uniform — the server does NOT reveal whether the identity is already registered (this would be a user-enumeration oracle). If the agent needs to distinguish new-vs-returning users, call `get_current_user` after verification and inspect the user's `created_at`. EMAIL CHANNEL SENDS NOTHING HERE. The response carries email_sent=false and send_required=true: confirm with the user that the address is theirs, then call send_account_email. The other channels dispatch nothing either way — the user sends the first message themselves (reverse OTP). Agent usage: (1) Call create_account with the user's chosen channel. (2) For email, confirm with the user and call send_account_email. On telegram/whatsapp pass `deep_link` to render_auth_link, which prints the clickable link and a QR code beneath it. On sms `deep_link` is an EMPTY STRING and render_auth_link will reject it — show `sms_message`, which is what the user sends; this response carries no destination number, so do not invent one. Do not hand `qr_text` to a link renderer either — it is the link already rendered as QR art; print it verbatim inside a fenced code block if a real terminal needs the QR. (3) Call wait_for_account_creation with the session id until verification completes. (4) On verified, JWT + refresh cookies are set; proceed with whatever follow-up the agent was asked to do.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['channel'], 'properties': {'email': {'type': 'string', 'format': 'email', 'description': 'Email address. Required for email channel.'}, 'channel': {'enum': ['telegram', 'whatsapp', 'sms', 'email'], 'type': 'string', 'description': 'Authentication channel the user will verify through'}, 'phone_number': {'type': 'string', 'description': 'E.164 phone number. Required for SMS channel (determines DID routing).'}}, 'additionalProperties': False}
create_api_key
Create a new API key. The secret key value is returned ONLY in this response — store it securely. Note: the secret will be visible in the AI conversation context. Optionally bind the key to a sub-account (project) via profile_id — outbound messages sent with the key are then branded as that project. Agent usage: This operation requires 2FA. Before calling, complete the 2FA flow: (1) call start_2fa with action_type "api_key_create" and the user's preferred channel, (2) tell the user a code was sent and wait for them to verify, (3) poll get_2fa_status until status is "verified", (4) then call create_api_key — the backend session will be elevated. If you get a 403, the 2FA session has expired — restart the flow. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {'name': {'type': 'string', 'maxLength': 100, 'minLength': 1, 'description': 'Human-readable key name'}, 'scopes': {'type': 'array', 'items': {'enum': ['verifications:read', 'verifications:write', 'verifications:create', 'verifications:*', 'proofs:read', 'proofs:*', 'delegations:read', 'delegations:write', 'delegations:create', 'delegations:*', 'lookalike-watch:read', 'lookalike-watch:write', 'lookalike-watch:*', 'templates:read', 'templates:write', 'templates:*', 'authorizations:read', 'authorizations:write', 'authorizations:create', 'authorizations:*', 'hitl:read', 'hitl:write', 'hitl:create', 'hitl:*', 'confirmations:read', 'confirmations:write', 'confirmations:create', 'confirmations:*', 'circles:read', 'circles:write', 'circles:create', 'circles:*', 'profiles:read', 'profiles:write', 'profiles:*', 'billing:read', 'billing:write', 'billing:*', 'settings:read', 'settings:write', 'settings:*', 'assets:read', 'assets:write', 'assets:*', 'webhooks:read', 'webhooks:write', 'webhooks:*', 'auth:read', 'auth:write', 'auth:*'], 'type': 'string'}, 'maxItems': 20, 'description': 'Permission scopes for the key'}, 'profile_id': {'type': 'string', 'description': 'Bind the new key to a sub-account (PublicProfile) project you own (24-hex id). Immutable after creation; omit for an unbound account-wide key.'}, 'environment': {'enum': ['production', 'test'], 'type': 'string', 'description': 'Key environment (default: production)'}}, 'additionalProperties': False}
create_authorization
Create a new authorization request. Authorizations grant permission to send confirmations to a user via a specific channel. The user must approve the authorization before confirmations can be sent. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['hitl_id', 'recipient', 'phone', 'channel', 'business_name'], 'properties': {'bsuid': {'type': 'string', 'pattern': '^[A-Z]{2}\\.[a-zA-Z0-9]{10,140}$', 'description': 'WhatsApp Business-Scoped User ID (alternative to phone for WhatsApp channel)'}, 'phone': {'type': 'string', 'pattern': '^\\+[1-9]\\d{1,14}$', 'description': 'Target phone number in E.164 format (e.g., +15551234567)'}, 'scope': {'enum': ['confirmations'], 'type': 'string', 'description': 'Authorization scope (default: confirmations)'}, 'channel': {'enum': ['whatsapp', 'telegram', 'sms', 'email'], 'type': 'string', 'description': 'Channel for sending confirmations'}, 'hitl_id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'HITL configuration ID to link this authorization to'}, 'recipient': {'type': 'string', 'maxLength': 255, 'minLength': 1, 'description': 'Channel-specific recipient identifier (chat_id for Telegram, phone/BSUID for WhatsApp)'}, 'expires_in': {'type': 'integer', 'maximum': 7776000, 'description': 'Expiry in seconds (max 90 days, default 90 days)', 'exclusiveMinimum': 0}, 'business_name': {'type': 'string', 'maxLength': 200, 'minLength': 1, 'description': 'Business name displayed to user during authorization'}, 'business_profile_id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'Public profile ID for branding'}}, 'additionalProperties': False}
create_chat_id_discovery
Create a Telegram chat ID discovery token. Returns a deep_link, qr_code (base64 PNG), and qr_text (UTF-8 text QR for terminal display). The user opens the link in Telegram, which reveals their chat ID for HITL config setup. Agent usage: pass the response's `deep_link` to render_auth_link so the user can click or scan it. Never hand `qr_text` to a link renderer — it is that same link already rendered as QR art. Print it verbatim inside a fenced code block only when a real terminal needs the QR. Then poll poll_chat_id_discovery with the returned token until the chat_id appears. Use the discovered chat_id when creating a HITL config with a Telegram channel. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {}}
create_circle
Create a Circle — a named group of trusted contacts (the people-primitive powering Proof-Me and Approvals-on-Circle). Optionally seed initial members; each member's declared channels are stored so they can be invited to enroll. Agent usage: after creating a Circle, add members with add_circle_member (or seed them here), then invite_circle_member to mint the enrollment deep link each contact taps to bind their messenger identity. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['name'], 'properties': {'name': {'type': 'string', 'maxLength': 200, 'minLength': 1, 'description': 'Human-readable name for the Circle'}, 'members': {'type': 'array', 'items': {'type': 'object', 'required': ['name'], 'properties': {'name': {'type': 'string', 'maxLength': 100, 'minLength': 1, 'description': 'Display name of the member'}, 'whatsapp_phone': {'type': 'string', 'pattern': '^\\+[1-9]\\d{7,14}$', 'description': 'E.164 WhatsApp phone with a leading + (declared)'}, 'telegram_chat_id': {'type': 'string', 'maxLength': 50, 'description': 'Telegram chat id (declared; usually captured at enrollment instead)'}}, 'additionalProperties': False}, 'maxItems': 100, 'description': 'Initial members (name + optional declared channels)'}, 'profile_id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'Public profile (sub-account) to bind for branded messages â\x80\x94 create-only'}, 'proof_me_enabled': {'type': 'boolean', 'description': 'Enable Proof-Me drills for this Circle'}}, 'additionalProperties': False}
create_circle_member_drill
Fire an on-demand Proof-Me drill against one enrolled member — a real cross-channel identity challenge carrying the scheduled-safety-check label (the account owner practices confirming). Complements the automated daily drill + monthly reinforcement sweeps. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id', 'member_id'], 'properties': {'id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'Circle ID'}, 'member_id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'Member ID to drill'}}, 'additionalProperties': False}
create_confirmation
Create a HITL confirmation request. Sends an approval request to the channels configured on the referenced HITL config. First response wins. Agent usage: The HITL config referenced by hitl_id must be authorized before you can create confirmations. If this returns a 403 or "not authorized" error, call request_hitl_authorization on the HITL config first, then wait for the user to approve via the messaging channel. After creating a confirmation, poll get_confirmation to check for approval/denial, or use get_confirmation_approval_link to generate a fresh link for the user. Encryption is NOT optional: a HITL config cannot send confirmations without a keypair, the human approves by decrypting in their browser, and `message` must be a JSON ciphertext envelope. Plaintext is refused with 400 `message_not_encrypted`; an envelope sealed to another key with 400 `message_key_mismatch`. Choose the version by who must be able to decrypt: - v1 (single-recipient): wraps the content key for the config owner only. Use ONLY when there are no enrolled non-owner approvers — with approvers enrolled it is refused with 400 `envelope_missing_approvers`. - v2 (multi-recipient): additionally wraps the content key for each enrolled approver via an `approver_ek` map, so every approver can decrypt. Build it with the SDK `encryptMessageV2(plaintext, ownerPublicKey, hitlId, approverKeys)` after fetching the approvers via the SDK `getApproverKeys(hitlId)` (`GET /api/v1/hitl/:id/approver-keys`). AAD is the `hitlId`. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['hitl_id', 'message'], 'properties': {'hitl_id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'HITL config ID whose channels will receive the approval request'}, 'message': {'type': 'string', 'maxLength': 10000, 'minLength': 1, 'description': 'The client-encrypted ciphertext envelope as a JSON string (v1 or v2) â\x80\x94 NOT the human-readable text. Encrypt the sentence the approver should read; passing it directly is refused with 400 `message_not_encrypted`, because the approval page can only decrypt an envelope.'}, 'proof_expiry_days': {'type': 'integer', 'description': 'Per-request proof expiry override in days (7, 30, 90, or 365)'}}, 'additionalProperties': False}
create_delegation
Create a delegation (Proof of Delegation): a control-proven domain authorizes a typed url/purl artifact for a set of capability scopes and receives a publishable signed token. The attestation is that the domain's controller authorized this artifact — nothing more; it says nothing about the artifact or the business behind it. Each mint is a billable proof. A requested lifetime longer than the control proof's remainder is rejected, never truncated. The result carries the publishable token AND the DERIVED effective_status/is_valid — the same pair the list and get tools return, so the shape does not depend on which verb produced it. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['control_proof', 'delegate', 'scope'], 'properties': {'scope': {'type': 'array', 'items': {'type': 'string', 'maxLength': 64, 'minLength': 1}, 'maxItems': 32, 'minItems': 1, 'description': '1-32 capability scopes: lowercase kebab-case tokens, at most 64 characters each (e.g. send-email). NOT API scopes â\x80\x94 an API-style resource:action such as payments:read is rejected with invalid_scope.'}, 'delegate': {'type': 'object', 'required': ['type', 'value'], 'properties': {'type': {'enum': ['url', 'purl'], 'type': 'string', 'description': 'Identifier type: https URL or package URL (purl)'}, 'value': {'type': 'string', 'maxLength': 2048, 'minLength': 1, 'description': 'The artifact identifier (canonicalized server-side)'}}, 'description': 'The typed artifact being authorized', 'additionalProperties': False}, 'expires_in': {'type': 'integer', 'maximum': 315360000, 'description': "Lifetime in seconds (must not exceed the control proof's remainder)", 'exclusiveMinimum': 0}, 'control_proof': {'type': 'string', 'pattern': '^ph_ctl_[a-f0-9]{32}$', 'description': 'Public handle (ph_ctl_<32 hex>) of YOUR active domain control proof'}}, 'additionalProperties': False}
create_dns_credential
Store DNS provider credentials for automated domain verification. Note: credentials will be visible in the AI conversation context. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['provider', 'credentials'], 'properties': {'provider': {'type': 'string', 'maxLength': 50, 'minLength': 1, 'description': 'DNS provider identifier (e.g. cloudflare, route53, digitalocean)'}, 'credentials': {'type': 'object', 'description': 'Provider-specific credential key-value pairs', 'additionalProperties': {'type': 'string', 'maxLength': 2000}}}, 'additionalProperties': False}
create_hitl
Create a HITL (Human-in-the-Loop) config. Defines which messaging channels receive approval requests and the default timeout. Agent usage: After creating a HITL config, you must call request_hitl_authorization before it can be used with create_confirmation. For Telegram channels, use create_chat_id_discovery first to discover the user's chat ID, then include it in the channel config. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['name', 'channels'], 'properties': {'name': {'type': 'string', 'maxLength': 200, 'minLength': 1, 'description': 'Human-readable name for this HITL config'}, 'channels': {'type': 'array', 'items': {'anyOf': [{'type': 'object', 'required': ['type', 'config'], 'properties': {'type': {'type': 'string', 'const': 'telegram'}, 'config': {'type': 'object', 'required': ['chat_id'], 'properties': {'chat_id': {'type': 'string', 'maxLength': 50, 'minLength': 1}}, 'additionalProperties': False}}, 'additionalProperties': False}, {'type': 'object', 'required': ['type', 'config'], 'properties': {'type': {'type': 'string', 'const': 'whatsapp'}, 'config': {'type': 'object', 'properties': {'bsuid': {'type': 'string', 'pattern': '^[A-Z]{2}\\.[a-zA-Z0-9]{10,140}$', 'description': 'WhatsApp Business-Scoped User ID (e.g. US.abc123...)'}, 'phone_number': {'type': 'string', 'pattern': '^\\+?[1-9]\\d{6,14}$', 'description': 'Phone number in E.164 format'}}, 'additionalProperties': False}}, 'additionalProperties': False}]}, 'minItems': 1, 'description': 'Messaging channels for approval requests (telegram or whatsapp)'}, 'timeout_seconds': {'type': 'integer', 'maximum': 86400, 'minimum': 60, 'description': 'Default timeout in seconds (60â\x80\x9386400, default: 3600)'}}, 'additionalProperties': False}
create_identity_challenge
Create a Proof-Me cross-channel identity challenge (CONFIRM) for an enrolled challenger. The account holder approves/denies on a channel different from the one the suspicious contact reached the challenger on. Agent usage: poll get_identity_challenge with the returned ID until it reaches a terminal state (active = confirmed, denied, expired). ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['hitl_id', 'challenger_id'], 'properties': {'hitl_id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'HITL config that holds the challenger'}, 'challenger_id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'Enrolled challenger initiating the check'}, 'suspicious_channel': {'enum': ['telegram', 'whatsapp'], 'type': 'string', 'description': 'Channel the suspicious contact reached the challenger on; defaults to the challenger channel'}}, 'additionalProperties': False}
create_multi_channel_verification
Create a multi-channel phone verification: one phone number challenged over several channels at once (OR / first-wins). The first channel the user completes wins, yields a single proof token, and cancels the losing siblings. Exactly one proof is billed, at the winning channel's completion — not one per channel, and nothing at creation. Agent usage: the response includes a `group_id` (format vg_<hex>) and a `channels` array — each block carries a `deep_link` (WhatsApp/Telegram) or an `sms_message` to present to the user — pass the `deep_link` to render_auth_link. A block's `qr_text` is that same link already rendered as QR art, not an alternative address: print it verbatim inside a fenced code block or leave it out. Poll get_multi_channel_verification_status with the group_id to track completion and retrieve the proof token when a channel verifies. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['type', 'identifier', 'channels'], 'properties': {'type': {'enum': ['phone'], 'type': 'string', 'description': 'Asset type â\x80\x94 only "phone" is supported'}, 'channels': {'type': 'array', 'items': {'enum': ['whatsapp', 'telegram', 'sms'], 'type': 'string'}, 'maxItems': 4, 'minItems': 1, 'description': '1-4 unique channels attempted in parallel (first to complete wins)'}, 'identifier': {'type': 'string', 'maxLength': 500, 'minLength': 1, 'description': 'Phone number in E.164 format'}, 'client_metadata': {'type': 'object', 'description': 'Custom key-value metadata', 'additionalProperties': {'type': 'string'}}, 'external_user_id': {'type': 'string', 'maxLength': 255, 'minLength': 1, 'description': 'Your application user ID for grouping verifications'}, 'proof_expiry_days': {'type': 'integer', 'maximum': 365, 'minimum': 1, 'description': 'Per-request proof expiry override in days (1-365)'}}, 'additionalProperties': False}
create_profile
Create a new profile with optional display name, bio, avatar, business info, and theme settings. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {'bio': {'type': 'string', 'maxLength': 500, 'description': 'Profile bio'}, 'theme': {'type': 'object', 'properties': {'font_style': {'enum': ['default', 'modern', 'classic'], 'type': 'string', 'description': 'Font style'}, 'gradient_end': {'type': 'string', 'pattern': '^#[0-9A-Fa-f]{6}$', 'description': 'Gradient end color'}, 'primary_color': {'type': 'string', 'pattern': '^#[0-9A-Fa-f]{6}$', 'description': 'Primary color (hex)'}, 'gradient_start': {'type': 'string', 'pattern': '^#[0-9A-Fa-f]{6}$', 'description': 'Gradient start color'}, 'background_type': {'enum': ['solid', 'gradient'], 'type': 'string', 'description': 'Background type'}, 'background_color': {'type': 'string', 'pattern': '^#[0-9A-Fa-f]{6}$', 'description': 'Background color (hex)'}}, 'description': 'Profile theme settings', 'additionalProperties': False}, 'is_public': {'type': 'boolean', 'description': 'Whether the profile is publicly visible'}, 'avatar_url': {'type': 'string', 'maxLength': 100000, 'description': 'Avatar as base64 data URI or URL (~75KB limit)'}, 'is_primary': {'type': 'boolean', 'description': 'Set as primary profile'}, 'is_business': {'type': 'boolean', 'description': 'Whether this is a business profile'}, 'display_name': {'type': 'string', 'maxLength': 100, 'description': 'Display name'}, 'business_name': {'type': 'string', 'maxLength': 100, 'description': 'Business name'}}, 'additionalProperties': False}
create_session
Create a new phone verification session. Returns deep_link, qr_code (base64 PNG), and qr_text (UTF-8 text QR for terminal display). Sessions provide a hosted verification flow with callbacks. Agent usage: After creating a session, pass the response's `deep_link` to render_auth_link so the user can open or scan it. Never hand `qr_text` to a link renderer — it is that link already rendered as QR art. Print it verbatim inside a fenced code block only when a real terminal needs the QR. Then use wait_for_session to poll until the session reaches a terminal state (verified, failed, or expired). ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['channel', 'phone_number'], 'properties': {'channel': {'enum': ['sms', 'whatsapp', 'telegram'], 'type': 'string', 'description': 'Verification channel'}, 'metadata': {'type': 'object', 'description': 'Custom key-value metadata', 'additionalProperties': {'type': 'string'}}, 'template_id': {'type': 'string', 'description': 'Custom template ID'}, 'callback_url': {'type': 'string', 'description': 'URL to redirect after verification'}, 'phone_number': {'type': 'string', 'description': 'Phone number in E.164 format'}, 'external_user_id': {'type': 'string', 'description': 'Your application user ID'}}, 'additionalProperties': False}
create_user_request
Create a new verification request to ask another user to share verified assets. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['assets'], 'properties': {'assets': {'type': 'array', 'items': {'type': 'string'}, 'maxItems': 10, 'minItems': 1, 'description': 'Asset type identifiers to request (e.g. email, phone, identity)'}, 'partial_ok': {'type': 'boolean', 'description': 'Whether partial asset sharing is acceptable (default: false)'}, 'action_type': {'enum': ['verification', 'onboarding', 'compliance'], 'type': 'string', 'description': 'Purpose of the request (default: verification)'}, 'callback_url': {'type': 'string', 'format': 'uri', 'description': 'Webhook URL for request status updates'}, 'redirect_url': {'type': 'string', 'format': 'uri', 'description': 'URL to redirect the subject after completing the request'}, 'reference_id': {'type': 'string', 'description': 'External reference ID for tracking'}, 'action_context': {'type': 'string', 'description': 'Additional context about why assets are needed'}, 'expires_in_hours': {'type': 'integer', 'maximum': 720, 'minimum': 1, 'description': 'Hours until request expires (default: 24)'}, 'public_profile_id': {'type': 'string', 'description': 'Public profile ID for branding'}, 'validity_requirement': {'type': 'string', 'description': 'Required validity level for shared assets'}}, 'additionalProperties': False}
create_verification
Create a new identity verification. Initiates a verification flow for an asset identifier (phone number, email, domain, social handle, wallet address, account, or Telegram bot). Agent usage: pass the asset `type`, the delivery `channel`, and the `identifier` (e.g. type "phone", channel "sms", identifier "+37060000000"; or type "email", channel "email", identifier "user@example.com"). The response carries a `challenge` object with the instruction for the chosen channel — except a `telegram_bot` verification made with a LIVE key, which the server completes on the spot and answers with `status: verified` plus a proof token and no challenge at all; with a `pk_test_` key that same call stays pending and does carry a challenge. On the messenger channels it also carries `challenge.deep_link` — pass THAT to render_auth_link to give the user a clickable link and a QR code. This endpoint returns no `qr_text` at all. For OTP-based flows (sms/email), the user receives a code — poll get_verification or use wait_for_verification to track completion. For Telegram/WhatsApp, the user clicks the deep link to verify. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['type', 'channel', 'identifier'], 'properties': {'type': {'enum': ['phone', 'email', 'domain', 'social', 'wallet', 'account', 'telegram_bot'], 'type': 'string', 'description': 'Asset type being verified'}, 'channel': {'enum': ['whatsapp', 'telegram', 'sms', 'email', 'dns', 'http', 'auto', 'github', 'google', 'facebook', 'x', 'linkedin', 'instagram', 'youtube', 'tiktok', 'ethereum', 'solana', 'bitcoin', 'coinbase', 'kraken', 'telegram_bot_token'], 'type': 'string', 'description': 'Verification channel (must match the asset type, e.g. sms/whatsapp/telegram for phone)'}, 'bot_token': {'type': 'string', 'maxLength': 500, 'minLength': 1, 'description': 'Telegram bot token (required for channel "telegram_bot_token")'}, 'identifier': {'type': 'string', 'maxLength': 500, 'minLength': 1, 'description': 'The asset identifier to verify (E.164 phone, email address, domain, handle, wallet address, ...)'}, 'dns_provider': {'type': 'object', 'description': 'DNS provider credentials (required for channel "auto")', 'additionalProperties': {'type': 'string', 'maxLength': 2000}}, 'email_prefix': {'enum': ['admin', 'administrator', 'webmaster', 'hostmaster', 'postmaster'], 'type': 'string', 'description': 'Mailbox prefix for domain email verification'}, 'client_metadata': {'type': 'object', 'description': 'Custom key-value metadata', 'additionalProperties': {'type': 'string'}}, 'external_user_id': {'type': 'string', 'maxLength': 255, 'minLength': 1, 'description': 'Your application user ID for grouping verifications'}, 'proof_expiry_days': {'type': 'integer', 'maximum': 365, 'minimum': 1, 'description': 'Per-request proof expiry override in days (1-365)'}}, 'additionalProperties': False}
create_verification_request
Create a multi-asset verification request. Allows verifying multiple assets (phone, email, domain, social, wallet, account, telegram_bot) in a single flow. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['assets'], 'properties': {'assets': {'type': 'array', 'items': {'type': 'object', 'required': ['type'], 'properties': {'type': {'enum': ['phone', 'email', 'domain', 'social', 'wallet', 'account', 'telegram_bot'], 'type': 'string', 'description': 'Asset type to verify'}, 'channel': {'enum': ['whatsapp', 'telegram', 'sms', 'email', 'dns', 'http', 'auto', 'github', 'google', 'facebook', 'x', 'linkedin', 'instagram', 'youtube', 'tiktok', 'ethereum', 'solana', 'bitcoin', 'coinbase', 'kraken', 'telegram_bot_token'], 'type': 'string', 'description': 'Preferred verification channel'}, 'required': {'type': 'boolean', 'description': 'Whether this asset must be verified for the request to complete (default: true)'}, 'identifier': {'type': 'string', 'description': 'The identifier to verify (phone number, email, domain, etc.). If omitted, the user provides their own.'}, 'allowed_channels': {'type': 'array', 'items': {'$ref': '#/properties/assets/items/properties/channel'}, 'description': 'Restrict to specific channels for this asset'}}, 'additionalProperties': False}, 'maxItems': 10, 'minItems': 1, 'description': 'Array of assets to verify (1-10)'}, 'expires_in': {'type': 'integer', 'description': 'Request expiry in seconds (default: 86400, max: 604800)', 'exclusiveMinimum': 0}, 'partial_ok': {'type': 'boolean', 'description': 'Allow partial completion (default: false)'}, 'action_type': {'enum': ['verification', '2fa', 'login', 'custom', 'confirmation'], 'type': 'string', 'description': 'Purpose of the verification (default: verification)'}, 'callback_url': {'type': 'string', 'description': 'Webhook URL for status updates (HTTPS only)'}, 'redirect_url': {'type': 'string', 'description': 'URL to redirect user after verification completes (HTTPS only)'}, 'reference_id': {'type': 'string', 'description': 'Your unique reference ID for this request'}, 'action_context': {'type': 'object', 'properties': {'title': {'type': 'string', 'description': 'Action title shown to user (required for custom/confirmation)'}, 'description': {'type': 'string', 'description': 'Action description shown to user'}}, 'description': 'Context displayed to user during verification', 'additionalProperties': False}, 'proof_expiry_days': {'type': 'integer', 'description': 'Per-request proof expiry override in days (7, 30, 90, or 365)'}, 'public_profile_id': {'type': 'string', 'description': 'Public profile ID for branding'}}, 'additionalProperties': False}
delete_circle
Archive a Circle (soft delete — sets status to archived). It stops appearing in the default list but is recoverable via list_circles with status="archived". ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'Circle ID to archive'}}, 'additionalProperties': False}
delete_dns_credential
Delete a stored DNS provider credential. Domains using this credential will need new credentials for automated verification. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'DNS credential ID to delete'}}, 'additionalProperties': False}
delete_domain
Remove a domain from the account. This cannot be undone. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Domain ID to delete'}}, 'additionalProperties': False}
delete_hitl
Delete (archive) a HITL config. Sets status to archived. Cannot be used for new confirmations after deletion. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'HITL config ID to delete'}}, 'additionalProperties': False}
delete_hitl_keys
Delete the encryption keypair from a HITL config. WARNING: Existing ciphertexts will become permanently unreadable. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['hitl_id'], 'properties': {'hitl_id': {'type': 'string', 'description': 'HITL config ID'}}, 'additionalProperties': False}
delete_profile
Delete a profile by ID. Cannot delete the primary profile if it is the only one. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['profile_id'], 'properties': {'profile_id': {'type': 'string', 'description': 'Profile ID'}}, 'additionalProperties': False}
delete_profile_template
Delete a custom profile template, reverting to the default template for that channel and message type. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['profile_id', 'channel', 'type'], 'properties': {'type': {'type': 'string', 'description': 'Message type (e.g. verification_request, login_request)'}, 'channel': {'enum': ['telegram', 'whatsapp', 'sms', 'email'], 'type': 'string', 'description': 'Message channel'}, 'profile_id': {'type': 'string', 'description': 'Profile ID'}}, 'additionalProperties': False}
delete_template
Delete a custom template, reverting to the default template for that channel and message type. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['channel', 'message_type'], 'properties': {'channel': {'enum': ['telegram', 'whatsapp', 'sms', 'email'], 'type': 'string', 'description': 'Message channel'}, 'message_type': {'type': 'string', 'description': 'Message type (e.g. verification_request, login_request)'}}, 'additionalProperties': False}
export_authorizations
Export authorizations as CSV or JSON. Supports date range and status filtering. Maximum 10,000 records. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {'to': {'type': 'string', 'description': 'End date filter (ISO 8601)'}, 'from': {'type': 'string', 'description': 'Start date filter (ISO 8601)'}, 'format': {'enum': ['csv', 'json'], 'type': 'string', 'description': 'Export format (default: json)'}, 'status': {'enum': ['pending', 'active', 'expired', 'revoked', 'denied'], 'type': 'string', 'description': 'Filter by status'}}, 'additionalProperties': False}
export_data
Export all account data (GDPR Article 20 - Right to Data Portability). Rate limited to 1 export per 24 hours. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {}}
extend_request
Extend the expiration time of a pending verification request. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Verification request ID to extend'}}, 'additionalProperties': False}
get_2fa_status
Check the status of a 2FA session by session ID. Returns whether the challenge has been completed, is pending, or has expired. Agent usage: Poll this after calling start_2fa. Check every few seconds. Terminal states: "verified" (proceed with protected operation), "expired" (restart with start_2fa). While "pending", the user has not yet entered their code. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['session_id'], 'properties': {'session_id': {'type': 'string', 'description': '2FA session ID'}}, 'additionalProperties': False}
get_add_email_status
Check the status of an in-progress email addition by session ID. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['session_id'], 'properties': {'session_id': {'type': 'string', 'description': 'Add-email session ID'}}, 'additionalProperties': False}
get_add_phone_status
Check the status of an in-progress phone addition by session ID. Poll until terminal state. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['session_id'], 'properties': {'session_id': {'type': 'string', 'description': 'Add-phone session ID'}}, 'additionalProperties': False}
get_api_key_usage
Get per-API-key usage for a given key id: verification counts by type/channel/status, plus verification-request/confirmation/authorization totals, and attribution context (attribution_cutoff_at, attributed_fraction). Counts only — no recipient identifiers. Scoped to the authenticated account; an API-key caller may read only its own key. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'The API key id to fetch usage for'}, 'environment': {'enum': ['production', 'test'], 'type': 'string', 'description': 'Scope metrics to test or production data (default: production)'}}, 'additionalProperties': False}
get_asset
Get a single verified asset by ID. Returns details including type, value, status, and verification timestamps. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Asset ID'}}, 'additionalProperties': False}
get_authorization
Get an authorization by ID. Returns the current state of the authorization including status and usage statistics. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Authorization ID'}}, 'additionalProperties': False}
get_circle
Get a Circle by ID. Returns the Circle including its members and per-member channel presence booleans (an identifier is NEVER returned — SEC-PM-006). ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'Circle ID'}}, 'additionalProperties': False}
get_confirmation
Get a confirmation by ID. Returns the full confirmation including status, response, and proof token. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Confirmation ID'}}, 'additionalProperties': False}
get_confirmation_approval_link
Generate a fresh approval link for a pending confirmation. The link expiry inherits the confirmation timeout. Only works for pending confirmations. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'Confirmation ID'}}, 'additionalProperties': False}
get_current_user
Get the current authenticated user. Returns account details, plan, and settings for the API key owner. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {}}
get_default_templates
Get all default message templates. These are the built-in templates used when no custom template is set. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {}}
get_delegation
Get one of your delegations by Mongo id or ph_dlg_* handle. Returns the stored publishable token plus the DERIVED effective_status/is_valid — the delegation is only as live as the control proof it stands on (a revoked, suspended or expired domain proof invalidates it) and never outlives its own expires_at, whichever comes first. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'pattern': '^([0-9a-fA-F]{24}|ph_dlg_[a-f0-9]{32})$', 'description': 'Delegation ID (24-hex Mongo id or ph_dlg_<32 hex> handle)'}}, 'additionalProperties': False}
get_dns_providers
Get metadata for all supported DNS providers, including required credential fields and documentation links. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {}}
get_domain
Get details of a specific domain by ID, including verification status, DNS records, and provider connections. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Domain ID'}}, 'additionalProperties': False}
get_hitl
Get a HITL config by ID. Returns the config including channels, timeout, and status. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'HITL config ID'}}, 'additionalProperties': False}
get_hitl_keys
Get the encryption keypair for a HITL config. Returns public key, encrypted private key, KDF salt, and key ID (kid). ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['hitl_id'], 'properties': {'hitl_id': {'type': 'string', 'description': 'HITL config ID'}}, 'additionalProperties': False}
get_identity_challenge
Get a Proof-Me identity challenge by ID. Returns status, the channel the CONFIRM ran on, and the proof token once confirmed. Poll this for resolution. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'Identity challenge ID'}}, 'additionalProperties': False}
get_multi_channel_verification_status
Get the status of a multi-channel verification group by its group_id. Returns the aggregate status (pending/verified/expired), the winning_channel once one completes, per-channel statuses, and the proof token (with expires_at) when the group is verified. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['group_id'], 'properties': {'group_id': {'type': 'string', 'description': 'Multi-channel verification group ID (format vg_<hex>)'}}, 'additionalProperties': False}
get_my_profile
Get the current user's primary profile. Returns profile details, theme, custom links, and public proof display settings. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {}}
get_platform_summary
Get a one-call account snapshot: quota with end-of-month projection, request health (pending/completed/expired counts + success rate), per-channel completion rates, HITL counts, and active API key count. The same data the dashboard home renders. The hitl_channels sub-object requires the hitl:read scope. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {'environment': {'enum': ['production', 'test'], 'type': 'string', 'description': 'Scope request/channel/HITL metrics to test or production data (default: production)'}}, 'additionalProperties': False}
get_profile
Get a specific profile by ID. Returns full profile details including theme, custom links, and verification display settings. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['profile_id'], 'properties': {'profile_id': {'type': 'string', 'description': 'Profile ID'}}, 'additionalProperties': False}
get_profile_assets
Get available verified assets that can be displayed on the user's profile. Returns assets eligible for public proof display. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {}}
get_proof_status
Get the status of a proof by its public handle (ph_ctl_* / ph_dlg_*) or a verification ID. Returns whether the proof is active, suspended, expired, or revoked — a live proof reads "active". ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Public proof handle (ph_ctl_* / ph_dlg_*) or verification ID'}}, 'additionalProperties': False}
get_request_by_reference
Get a verification request by its reference ID (your unique identifier). ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['reference_id'], 'properties': {'reference_id': {'type': 'string', 'description': 'Your unique reference ID'}}, 'additionalProperties': False}
get_request_proofs
Get proof tokens for verified assets in a verification request. Returns proof tokens that can be used for offline verification. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Verification request ID'}}, 'additionalProperties': False}
get_self_api_key
Get the calling API key's own redacted metadata (id, name, key_prefix, environment, scopes, last_used_at, revoked_at, created_at) for agent self-inspection. Never returns the key hash or full secret. Requires API-key auth — a JWT session has no single-key context (returns 400 api_key_required). ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {}}
get_session
Get a session by ID. Returns the session status, verification details, and proof token if verified. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Session ID'}}, 'additionalProperties': False}
get_settings
Get account settings: branding (business name, logo, colors, support email, email theme), the outbound webhook endpoint with its event subscriptions, and the default proof lifetime. The webhook signing secret is NOT returned to an API key — the response reports webhook.secret_set instead, and the value itself is visible only in the dashboard or in the update_settings response that created or rotated it. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {}}
get_subscription
Get the current subscription details including plan, status, billing period, and usage limits. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {}}
get_template
Get a specific template by channel and message type. Returns the custom template if set, otherwise the default. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['channel', 'message_type'], 'properties': {'channel': {'enum': ['telegram', 'whatsapp', 'sms', 'email'], 'type': 'string', 'description': 'Message channel'}, 'message_type': {'type': 'string', 'description': 'Message type (e.g. verification_request, login_request)'}}, 'additionalProperties': False}
get_usage
Get usage metrics for the authenticated account. Shows verification counts, API calls, and quota usage. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {'months': {'type': 'integer', 'maximum': 12, 'minimum': 1, 'description': 'Number of months of history'}, 'period': {'type': 'string', 'pattern': '^\\d{4}-\\d{2}$', 'description': 'Month to query in YYYY-MM format (e.g. 2026-01)'}}, 'additionalProperties': False}
get_user_domain_verification_status
Get the current status of a domain verification session, including challenge details. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['session_id'], 'properties': {'session_id': {'type': 'string', 'description': 'Domain verification session ID'}}, 'additionalProperties': False}
get_verification
Get a verification by ID. Returns the full verification object including status, channel, and proof token if verified. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Verification ID'}}, 'additionalProperties': False}
get_verification_request
Get a verification request by ID. Returns the request with all its asset verification statuses. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Verification request ID'}}, 'additionalProperties': False}
get_verified_user
Get a single verified user and their verifications by external user ID. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['external_user_id'], 'properties': {'external_user_id': {'type': 'string', 'description': 'The external user ID'}}, 'additionalProperties': False}
get_webhook_delivery
Get details of a single webhook delivery attempt including request/response payloads and retry history. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Webhook delivery ID'}}, 'additionalProperties': False}
get_webhook_stats
Get webhook delivery statistics including total deliveries, success/failure counts, and recent activity. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {}}
invite_challenger
Mint a single-use Proof-Me enrollment invite for a challenger. Returns Telegram + WhatsApp deep links and a QR code; the challenger taps the channel-matched link to bind their messenger identity to the config. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['hitl_id', 'challenger_id'], 'properties': {'hitl_id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'HITL config ID'}, 'challenger_id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'Challenger ID to invite'}}, 'additionalProperties': False}
invite_circle_member
Mint a single-use enrollment invite for a Circle member. Returns Telegram + WhatsApp deep links and a QR code; the member taps the channel-matched link to bind their messenger identity to the Circle. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id', 'member_id'], 'properties': {'id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'Circle ID'}, 'member_id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'Member ID to invite'}}, 'additionalProperties': False}
list_api_keys
List all API keys for the authenticated account. Returns key metadata (not the secret key values). ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {}}
list_assets
List all verified assets for the authenticated user. Assets are verified identities (phones, emails, domains). ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {'page': {'type': 'integer', 'description': 'Page number', 'exclusiveMinimum': 0}, 'type': {'enum': ['phone', 'email', 'domain', 'social', 'wallet'], 'type': 'string', 'description': 'Filter by asset type'}, 'limit': {'type': 'integer', 'maximum': 100, 'minimum': 1, 'description': 'Items per page'}, 'status': {'enum': ['active', 'revoked', 'expired'], 'type': 'string', 'description': 'Filter by status'}}, 'additionalProperties': False}
list_authorizations
List authorizations with optional filters. Returns paginated results. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {'page': {'type': 'integer', 'description': 'Page number', 'exclusiveMinimum': 0}, 'limit': {'type': 'integer', 'maximum': 100, 'minimum': 1, 'description': 'Items per page'}, 'phone': {'type': 'string', 'description': 'Filter by phone number'}, 'status': {'enum': ['pending', 'active', 'expired', 'revoked', 'denied'], 'type': 'string', 'description': 'Filter by authorization status'}, 'channel': {'enum': ['whatsapp', 'telegram', 'sms', 'email'], 'type': 'string', 'description': 'Filter by channel'}}, 'additionalProperties': False}
list_auth_sessions
List all active authentication sessions for the current user. Shows session details including channel, user agent, and expiry. When called via API key, no session is marked as is_current. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {}}
list_challengers
List the Proof-Me challengers enrolled on a HITL config. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['hitl_id'], 'properties': {'hitl_id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'HITL config ID'}}, 'additionalProperties': False}
list_circle_member_channels
List a Circle member's channels. Returns channel metadata only (channel, status, verified_at) — an identifier is NEVER returned (SEC-PM-006). ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id', 'member_id'], 'properties': {'id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'Circle ID'}, 'member_id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'Member ID'}}, 'additionalProperties': False}
list_circle_members
List a Circle's members. Each member carries channel-presence booleans only (has_telegram / has_whatsapp) — an identifier is NEVER returned (SEC-PM-006). ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'Circle ID'}}, 'additionalProperties': False}
list_circles
List Circles with optional filters. Archived Circles are excluded by default; pass status="archived" to surface them. Returns paginated results. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {'page': {'type': 'integer', 'maximum': 10000, 'description': 'Page number (default 1)', 'exclusiveMinimum': 0}, 'limit': {'type': 'integer', 'maximum': 100, 'description': 'Items per page (default 20, max 100)', 'exclusiveMinimum': 0}, 'status': {'enum': ['active', 'archived'], 'type': 'string', 'description': 'Filter by status (archived excluded unless requested)'}, 'profile_id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'Filter by bound public profile (sub-account)'}, 'environment': {'enum': ['production', 'test'], 'type': 'string', 'description': 'Filter by environment (production or test)'}}, 'additionalProperties': False}
list_confirmations
List confirmations with optional filters. Returns paginated results with status and HITL config filtering. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {'page': {'type': 'integer', 'description': 'Page number', 'exclusiveMinimum': 0}, 'limit': {'type': 'integer', 'maximum': 100, 'minimum': 1, 'description': 'Items per page'}, 'status': {'enum': ['pending', 'approved', 'denied'], 'type': 'string', 'description': 'Filter by confirmation status'}, 'hitl_id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'Filter by HITL config ID'}}, 'additionalProperties': False}
list_delegations
List your own delegations with optional filters. Each item carries the DERIVED effective_status/is_valid beside its stored status — read effective_status, since status records only whether the owner revoked the delegation themselves, so a delegation still reads active there after its domain control proof was revoked, suspended or expired, and after its OWN lifetime ran out. effective_status accounts for all of those: it reports expired once either lifetime has passed, whichever is earlier. Tokens are not included in the list — use get_delegation for the stored token. There is no public enumeration of third-party delegations. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {'page': {'type': 'integer', 'description': 'Page number', 'exclusiveMinimum': 0}, 'limit': {'type': 'integer', 'maximum': 100, 'minimum': 1, 'description': 'Items per page'}, 'status': {'enum': ['active', 'revoked'], 'type': 'string', 'description': "Filter by the delegation's OWN stored status (active|revoked). Does NOT filter the derived effective_status â\x80\x94 status=active still returns delegations whose control proof died, and ones that simply ran out."}}, 'additionalProperties': False}
list_dns_credentials
List all stored DNS provider credentials for the authenticated account. Returns credential metadata (not secret values). ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {}}
list_domains
List all domains for the authenticated account. Returns domain metadata including verification status. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {}}
list_emails
List all email addresses associated with the authenticated account. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {}}
list_hitls
List HITL configs with optional filters. Returns paginated results. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {'page': {'type': 'integer', 'description': 'Page number', 'exclusiveMinimum': 0}, 'limit': {'type': 'integer', 'maximum': 100, 'minimum': 1, 'description': 'Items per page'}, 'status': {'enum': ['active', 'archived'], 'type': 'string', 'description': 'Filter by status (active or archived)'}, 'environment': {'enum': ['production', 'test'], 'type': 'string', 'description': 'Filter by environment (production or test)'}}, 'additionalProperties': False}
list_incoming_requests
List incoming verification requests where the authenticated user is the subject. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {}}
list_my_requests
List verification requests created by the authenticated user. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {}}
list_phones
List all phone numbers associated with the authenticated account. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {}}
list_profiles
List all profiles for the authenticated account. Returns all profiles including primary and secondary. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {}}
list_profile_templates
List all templates for a profile. Returns templates organized by channel and message type, merged with defaults. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['profile_id'], 'properties': {'profile_id': {'type': 'string', 'description': 'Profile ID'}}, 'additionalProperties': False}
list_revoked_proofs
Get the revocation list for offline proof validation. Returns a signed list of all revoked proof IDs, cacheable for 5 minutes.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {}}
list_templates
List all custom message templates for the authenticated account. Returns templates organized by channel and message type. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {}}
list_verification_requests
List verification requests with optional filters. Returns paginated results. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {'page': {'type': 'integer', 'description': 'Page number', 'exclusiveMinimum': 0}, 'limit': {'type': 'integer', 'maximum': 100, 'minimum': 1, 'description': 'Items per page'}, 'status': {'enum': ['pending', 'partial', 'completed', 'expired', 'cancelled', 'active'], 'type': 'string', 'description': "Filter by status. 'active' = live (not-yet-expired) pending or partial requests; persisted statuses are time-aware."}, 'reference_id': {'type': 'string', 'description': 'Filter by reference ID'}}, 'additionalProperties': False}
list_verifications
List verifications with optional filters. Returns paginated results. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {'page': {'type': 'integer', 'description': 'Page number', 'exclusiveMinimum': 0}, 'limit': {'type': 'integer', 'maximum': 100, 'minimum': 1, 'description': 'Items per page'}, 'status': {'enum': ['pending', 'verified', 'failed', 'expired', 'revoked'], 'type': 'string', 'description': 'Filter by status'}, 'channel': {'enum': ['sms', 'whatsapp', 'telegram', 'email'], 'type': 'string', 'description': 'Filter by channel'}, 'external_user_id': {'type': 'string', 'description': 'Filter by external user ID'}}, 'additionalProperties': False}
list_verified_users
List verified users grouped by external_user_id. Shows all verifications per user. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {'page': {'type': 'integer', 'description': 'Page number', 'exclusiveMinimum': 0}, 'limit': {'type': 'integer', 'maximum': 100, 'minimum': 1, 'description': 'Items per page'}}, 'additionalProperties': False}
list_webhook_deliveries
List webhook delivery attempts with pagination and filtering. Shows delivery status, response codes, and timestamps. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {'page': {'type': 'integer', 'description': 'Page number', 'exclusiveMinimum': 0}, 'limit': {'type': 'integer', 'maximum': 100, 'minimum': 1, 'description': 'Items per page'}, 'status': {'enum': ['pending', 'success', 'failed'], 'type': 'string', 'description': 'Filter by delivery status'}, 'event_type': {'type': 'string', 'description': 'Filter by event type (e.g. verification.completed)'}}, 'additionalProperties': False}
poll_chat_id_discovery
Poll a chat ID discovery token. Returns the discovered Telegram chat ID, user ID, and username once the user interacts with the bot. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['token'], 'properties': {'token': {'type': 'string', 'description': 'Discovery token from create_chat_id_discovery'}}, 'additionalProperties': False}
preview_profile_template
Preview a profile template with sample data before saving. Shows how the message will look with placeholder variables filled in. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['profile_id', 'channel', 'message_type', 'body'], 'properties': {'body': {'type': 'string', 'maxLength': 2000, 'minLength': 1, 'description': 'Template body text'}, 'channel': {'enum': ['telegram', 'whatsapp', 'sms', 'email'], 'type': 'string', 'description': 'Message channel'}, 'subject': {'type': 'string', 'maxLength': 200, 'description': 'Email subject line'}, 'profile_id': {'type': 'string', 'description': 'Profile ID'}, 'button_text': {'type': 'string', 'maxLength': 50, 'description': 'Button text'}, 'message_type': {'enum': ['verification_request', 'verification_success', 'verification_expired', 'login_request', 'login_success', '2fa_request', '2fa_success'], 'type': 'string', 'description': 'Message type'}, 'button_url_template': {'type': 'string', 'maxLength': 500, 'description': 'Button URL template'}}, 'additionalProperties': False}
preview_template
Preview a template with sample data before saving. Shows how the message will look with placeholder variables filled in. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['channel', 'message_type', 'body'], 'properties': {'body': {'type': 'string', 'maxLength': 2000, 'minLength': 1, 'description': 'Template body text'}, 'channel': {'enum': ['telegram', 'whatsapp', 'sms', 'email'], 'type': 'string', 'description': 'Message channel'}, 'subject': {'type': 'string', 'maxLength': 200, 'description': 'Email subject line'}, 'button_text': {'type': 'string', 'maxLength': 50, 'description': 'Button text'}, 'message_type': {'enum': ['verification_request', 'verification_success', 'verification_expired', 'login_request', 'login_success', '2fa_request', '2fa_success'], 'type': 'string', 'description': 'Message type'}, 'button_url_template': {'type': 'string', 'maxLength': 500, 'description': 'Button URL template'}}, 'additionalProperties': False}
regenerate_api_key
Regenerate an API key, issuing a new secret while keeping the same ID and settings. The old key stops working immediately. The new secret is returned ONLY in this response. Note: the secret will be visible in the AI conversation context. Agent usage: This operation requires 2FA. Before calling, complete the 2FA flow: (1) call start_2fa with action_type "api_key_regenerate", (2) wait for user to verify the code, (3) poll get_2fa_status until "verified", (4) then call regenerate_api_key. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'API key ID to regenerate'}}, 'additionalProperties': False}
remove_challenger
Remove a Proof-Me challenger from a HITL config. Removing the last challenger disables Proof-Me on the config. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['hitl_id', 'challenger_id'], 'properties': {'hitl_id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'HITL config ID'}, 'challenger_id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'Challenger ID to remove'}}, 'additionalProperties': False}
remove_circle_member
Remove a member from a Circle. Deletes the member's channels and revokes any live authorizations that routed through them. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id', 'member_id'], 'properties': {'id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'Circle ID'}, 'member_id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'Member ID to remove'}}, 'additionalProperties': False}
remove_circle_member_channel
Remove a channel from a Circle member. Removing the last channel is allowed (the member simply becomes unreachable). ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id', 'member_id', 'channel_id'], 'properties': {'id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'Circle ID'}, 'member_id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'Member ID'}, 'channel_id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'Channel ID to remove'}}, 'additionalProperties': False}
remove_email
Remove an email address from the account by ID. May require 2FA verification for sensitive operations. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Email record ID'}}, 'additionalProperties': False}
remove_phone
Remove a phone number from the account by ID. May require 2FA verification for sensitive operations. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Phone record ID'}}, 'additionalProperties': False}
render_auth_link
Render an authorization or verification URL as a clickable link followed by a scannable QR code inside a fenced code block. This is a local computation tool — no HTTP request is made. Agent usage: pass a LINK field from an earlier response — `deep_link` (create_session, create_chat_id_discovery always; start_login, create_account, start_2fa, start_2fa_for_action on telegram/whatsapp ONLY, where on sms and email that field is empty or absent altogether and this tool rejects it either way), `challenge.deep_link` (create_verification, messenger channels only), or `telegram_deep_link` / `whatsapp_deep_link`. Do NOT pass `qr_text` to this tool: that field is a QR code already rendered as text, and this tool takes a link. When a response gives you `qr_text` and no link, print it verbatim inside a fenced code block instead — its rows only scan while they stay adjacent, so a blank line or wrapped row destroys the code.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['url'], 'properties': {'url': {'type': 'string', 'format': 'uri', 'description': 'The link to render â\x80\x94 e.g. a deep_link response field. Never a qr_text value: that is the link already rendered as QR art.'}, 'label': {'type': 'string', 'maxLength': 200, 'description': 'Optional label to display above the link (e.g. "Verify your phone number")'}}, 'additionalProperties': False}
render_template
Render a template with provided variables. Returns the fully rendered message content. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['channel', 'message_type'], 'properties': {'channel': {'enum': ['telegram', 'whatsapp', 'sms', 'email'], 'type': 'string', 'description': 'Message channel'}, 'variables': {'type': 'object', 'properties': {'code': {'type': 'string', 'description': 'Verification or login code'}, 'expires_in': {'type': 'string', 'description': 'Expiry duration text (e.g. "10 minutes")'}, 'callback_url': {'type': 'string', 'description': 'Callback URL for the action'}, 'user_identifier': {'type': 'string', 'description': 'User identifier (phone, email, or domain)'}}, 'description': 'Variables to substitute into the template', 'additionalProperties': False}, 'message_type': {'type': 'string', 'description': 'Message type'}}, 'additionalProperties': False}
request_hitl_authorization
Request authorization for a HITL config. Sends consent requests to all configured channels (Telegram/WhatsApp). Users must approve before confirmations can be sent. Agent usage: This must be completed before create_confirmation will work for this HITL config. The consent request is DELIVERED to each channel — the response carries no link to show. It returns `authorizations` — one entry per resolved recipient, each with its `channel`, `recipient`, `authorization_id` and `status` — plus a `message`. Read the entries rather than assuming: `status: 'pending'` means consent was just sent and the user must approve in Telegram/WhatsApp itself, while `status: 'active'` means that recipient had already authorized and nothing was sent to them. An EMPTY array does not mean everyone is authorized — it means no recipient could be resolved at all (usually a HITL config bound to a missing or inactive circle, or channels whose recipient is blank), so nobody was asked and waiting for an approval would hang forever. Do not relay `message` on that branch: it reads 'All channels already have active or pending authorizations', which is exactly the wrong conclusion. Read the array. After requesting, you can proceed once the user confirms they have approved. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'HITL config ID to request authorization for'}}, 'additionalProperties': False}
resend_domain_email
Resend the domain verification email. Rate limited to 3 requests per minute. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Domain ID'}, 'email_prefix': {'enum': ['admin', 'administrator', 'webmaster', 'hostmaster', 'postmaster'], 'type': 'string', 'description': 'Email prefix to resend verification to'}}, 'additionalProperties': False}
resend_email_otp
Resend the OTP code for an in-progress email addition. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['session_id'], 'properties': {'session_id': {'type': 'string', 'description': 'Add-email session ID'}}, 'additionalProperties': False}
resend_verification
Resend a verification message (email channel only). Generates and sends a new code. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Verification ID'}}, 'additionalProperties': False}
retry_webhook_delivery
Retry a failed webhook delivery. Creates a new delivery attempt with the same payload to the configured endpoint. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Webhook delivery ID to retry'}}, 'additionalProperties': False}
revoke_api_key
Revoke an API key by ID. The key will immediately stop working. This action cannot be undone. Agent usage: This operation requires 2FA. Before calling, complete the 2FA flow: (1) call start_2fa with action_type "api_key_revoke", (2) wait for user to verify the code, (3) poll get_2fa_status until "verified", (4) then call revoke_api_key. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'API key ID to revoke'}}, 'additionalProperties': False}
revoke_asset
Revoke a verified asset by ID. The asset will be marked as revoked and associated proofs will no longer validate. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Asset ID'}}, 'additionalProperties': False}
revoke_authorization
Revoke an active or pending authorization. Only authorizations with status "active" or "pending" can be revoked. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Authorization ID to revoke'}, 'reason': {'type': 'string', 'maxLength': 500, 'minLength': 1, 'description': 'Reason for revocation'}}, 'additionalProperties': False}
revoke_auth_session
Revoke a specific authentication session by ID. When called via JWT, cannot revoke the current session. When called via API key, any session can be revoked. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['session_id'], 'properties': {'session_id': {'type': 'string', 'description': 'Session ID to revoke'}}, 'additionalProperties': False}
revoke_delegation
Revoke ONE delegation. The domain control proof and sibling delegations stay valid; the revocation is mirrored into the proof registry so the CRL, status list and public status lookup all see it. Idempotent: a repeat revoke answers success with the same body, both here and through revoke_proof with the ph_dlg_ handle — unlike a PROOF, where a repeat answers already_revoked. The result carries the DERIVED effective_status/is_valid beside the stored status. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'pattern': '^([0-9a-fA-F]{24}|ph_dlg_[a-f0-9]{32})$', 'description': 'Delegation ID (24-hex Mongo id or ph_dlg_<32 hex> handle)'}, 'reason': {'enum': ['user_request', 'fraud', 'key_compromise', 'other'], 'type': 'string', 'description': 'Reason for revocation'}}, 'additionalProperties': False}
revoke_proof
Revoke a proof by its public handle (ph_ctl_* / ph_dlg_*) or a verification ID — the same addresses get_proof_status takes. The proof token will no longer validate anywhere: the status endpoint, the public validator, the revocation list and the Token Status List all report it revoked. This action is irreversible. It revokes the PROOF only — the asset, consent or delegation the proof is about is not withdrawn. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Public proof handle (ph_ctl_* / ph_dlg_*) or verification ID'}, 'reason': {'type': 'string', 'description': 'Reason for revocation'}}, 'additionalProperties': False}
search
Prefix-anchored global account search across six resource buckets (verification_requests, verifications, hitl, confirmations, authorizations, api_keys). Case-sensitive prefix match over indexed plaintext fields only; recipient identifiers are masked. Results are scoped to the authenticated account. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['q'], 'properties': {'q': {'type': 'string', 'maxLength': 100, 'minLength': 3, 'description': 'Prefix-anchored search query (minimum 3 characters)'}, 'type': {'enum': ['verification_requests', 'verifications', 'hitl', 'confirmations', 'authorizations', 'api_keys'], 'type': 'string', 'description': 'Narrow the search to a single result bucket'}, 'limit': {'type': 'integer', 'maximum': 25, 'description': 'Max results per bucket (default 10, max 25)', 'exclusiveMinimum': 0}, 'environment': {'enum': ['production', 'test'], 'type': 'string', 'description': 'Scope results to test or production data (default: production)'}}, 'additionalProperties': False}
send_account_email
Deliver the verification email for an account-bootstrap session created with channel "email". Public endpoint (no API key required). Why this is a separate call: create_account deliberately sends NOTHING. A message from proof.holdings arriving in someone's inbox is an act with a person on the other end, so it takes an explicit second step rather than being a side effect of creating a session. ASK THE USER to confirm the address is theirs before calling this — do not call it automatically after create_account. The other channels (telegram, whatsapp, sms) never need this: the user sends the first message themselves (reverse OTP), so nothing is dispatched to them at all. One session sends at most one email, including under concurrent calls. A repeat answers 410 already_sent, which means the material backing the send is gone: usually because the email went out, occasionally because an attempt was interrupted mid-send and nothing was delivered. Do not tell the user a message was sent on the strength of a 410 — create a new session instead. (A session the recipient cancelled via the decline link, or an expired one, answers 404, not 410.) If delivery fails the response carries email_sent=false and the call can be retried.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Account session id from create_account'}}, 'additionalProperties': False}
set_primary_email
Set an email address as the primary email for the account. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Email record ID to set as primary'}}, 'additionalProperties': False}
set_primary_phone
Set a phone number as the primary phone for the account. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Phone record ID to set as primary'}}, 'additionalProperties': False}
set_primary_profile
Set a profile as the primary profile. The previous primary profile becomes secondary. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['profile_id'], 'properties': {'profile_id': {'type': 'string', 'description': 'Profile ID to set as primary'}}, 'additionalProperties': False}
setup_domain_email
Set up email sending for a verified domain. Configures the domain for sending verification emails from a custom address. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Domain ID'}, 'from_email': {'type': 'string', 'format': 'email', 'description': 'Custom from email address for the domain'}}, 'additionalProperties': False}
share_request_email
Send an email notification to the subject of a verification request. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Verification request ID'}}, 'additionalProperties': False}
start_2fa
Start a two-factor authentication challenge for a sensitive operation. Sends a verification code via the chosen channel. Returns a session ID, and for messaging channels: deep_link, qr_code (base64 PNG), and qr_text (UTF-8 text QR for terminal display). Agent usage — full 2FA flow: (1) Call start_2fa with the appropriate action_type and channel. (2) Present the challenge, and do NOT announce a message the server did not send: email is the ONLY channel it dispatches on. On telegram/whatsapp the user opens `deep_link` and sends the message themselves; on sms they send `sms_message` to a number from `sms_dids`; the response's own `instructions` field says which. On email, a 200 carrying `requires_email_selection: true` and `available_emails` means nothing was sent and no session exists — ask which address and call again with `email_id`. For telegram/whatsapp, pass `deep_link` to render_auth_link; for sms, show `sms_message`. Never hand `qr_text` to a link renderer — it is the link already rendered as QR art, so print it verbatim inside a fenced code block only when a real terminal needs the QR. (3) Poll get_2fa_status with the returned session_id until status is "verified" (the user enters the code on their device) or "expired". (4) If verified, proceed with the protected operation (e.g. create_api_key). If expired, inform the user and offer to restart. Typical channels: "telegram" or "email". For email, the user may receive a magic link instead of a code — the backend handles this automatically. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['action_type', 'channel'], 'properties': {'channel': {'enum': ['telegram', 'whatsapp', 'sms', 'email'], 'type': 'string', 'description': 'Channel to receive the verification code'}, 'email_id': {'type': 'string', 'description': 'Specific email ID for email channel (optional)'}, 'action_type': {'enum': ['api_key_view', 'api_key_create', 'api_key_revoke', 'api_key_regenerate', 'phone_add', 'phone_remove', 'email_add', 'email_remove', 'account_delete'], 'type': 'string', 'description': 'The sensitive action requiring 2FA'}}, 'additionalProperties': False}
start_2fa_for_action
Start a 2FA challenge that grants the authenticated user permission to perform a sensitive action. The 2FA must complete on a channel DIFFERENT from the user's last login channel (the backend enforces this). On success a grant is stored keyed by the user id and action_type; middleware on the protected endpoint reads the grant and allows the mutation. Destructive action types (api_key_create, api_key_revoke, api_key_regenerate, api_key_view, account_delete, phone_remove, email_remove, revocation_bulk) are capped at 5min TTL and forced single-use by server policy. Configuration scopes (settings_write, profile_update, templates_write) allow up to 24h TTL and caller-chosen single_use — useful for agents making multiple settings mutations in one session. Agent usage: (1) Attempt the sensitive call; if you get `403 2fa_required` note the `action_type`. (2) Call start_2fa_for_action with that action_type and a channel different from the login channel. (3) Present the challenge: on telegram/whatsapp pass `deep_link` to render_auth_link; on sms show `sms_message` and the number to send it to; on email check the response first: with more than one verified email and no `email_id` given, it answers 200 with `requires_email_selection: true` and `available_emails` — NO session was started and nothing was sent, so ask the user which address and call again with `email_id` rather than telling them to open a mailbox. Never hand `qr_text` to a link renderer — it is the link already rendered as QR art. Print it verbatim inside a fenced code block only when a real terminal needs the QR. (4) Call wait_for_2fa until the session is verified. (5) Retry the original sensitive call. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['action_type', 'channel'], 'properties': {'channel': {'enum': ['telegram', 'whatsapp', 'sms', 'email'], 'type': 'string', 'description': "Channel for the 2FA challenge â\x80\x94 must differ from the user's last login channel"}, 'email_id': {'type': 'string', 'description': 'Optional: specific UserEmail id for email-channel 2FA'}, 'phone_id': {'type': 'string', 'description': 'Optional: specific UserPhone id for phone-channel 2FA'}, 'single_use': {'type': 'boolean', 'description': 'Whether the grant is consumed on first use. Server forces true for destructive action types. Defaults to true.'}, 'action_type': {'enum': ['api_key_create', 'api_key_revoke', 'api_key_regenerate', 'api_key_view', 'phone_remove', 'email_remove', 'account_delete', 'revocation_bulk', 'settings_write', 'profile_update', 'templates_write'], 'type': 'string', 'description': 'The sensitive action the 2FA grant will authorize. Destructive scopes (api_key_*, account_delete, phone_remove, email_remove, revocation_bulk) are capped at 5 min TTL + forced single-use. Configuration scopes (settings_write, profile_update, templates_write) allow up to 24h TTL with caller-chosen single_use. See config/twoFAPolicy.ts on the backend for the canonical policy.'}, 'ttl_seconds': {'type': 'integer', 'maximum': 86400, 'minimum': 60, 'description': 'Requested grant lifetime in seconds. Server caps to 300s for destructive action types, 86400s for configuration scopes. Defaults to 300 if omitted.'}}, 'additionalProperties': False}
start_add_email
Start adding a new email address. Sends an OTP code to the email. Returns a session ID to verify with. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['email'], 'properties': {'email': {'type': 'string', 'format': 'email', 'description': 'Email address to add'}}, 'additionalProperties': False}
start_add_phone
Start adding a new phone number. Uses reverse OTP: the system sends a message and the user replies. Returns a session ID, deep_link, qr_code (base64 PNG), and qr_text (UTF-8 text QR for terminal display). ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['channel'], 'properties': {'channel': {'enum': ['telegram', 'whatsapp', 'sms'], 'type': 'string', 'description': 'Channel for phone verification'}}, 'additionalProperties': False}
start_domain_email_verification
Start domain verification via corporate email. Sends a verification code to a standard admin email address at the domain. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Domain ID'}, 'email_prefix': {'enum': ['admin', 'administrator', 'webmaster', 'hostmaster', 'postmaster'], 'type': 'string', 'description': 'Email prefix to send verification to (default: admin)'}}, 'additionalProperties': False}
start_domain_verification
Start a B2B domain verification. Creates a verification record and returns DNS/HTTP instructions for the customer to complete. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['domain'], 'properties': {'domain': {'type': 'string', 'maxLength': 255, 'minLength': 1, 'description': 'Domain to verify (e.g. example.com)'}, 'customer_id': {'type': 'string', 'description': 'Customer identifier for B2B tracking'}, 'verification_method': {'enum': ['manual_dns', 'http_file'], 'type': 'string', 'description': 'Verification method (default: manual_dns)'}}, 'additionalProperties': False}
start_login
Start a login session by sending an authentication challenge to the user's chosen channel (Telegram, WhatsApp, SMS, or email). Returns a session ID and, FOR TELEGRAM AND WHATSAPP ONLY, deep_link, qr_code (base64 PNG) and qr_text (UTF-8 text QR for terminal display); on sms it returns sms_message with sms_dids instead, and on email nothing to display. Agent usage: (1) Call start_login with the desired channel and phone_number (for SMS) or email (for email). (2) Present the challenge, and WHICH FIELD depends on the channel. On telegram/whatsapp pass `deep_link` to render_auth_link, which prints the clickable link and a QR code; in a chat client the link is what the user acts on, since they are usually on the same machine. On sms `deep_link` is an EMPTY STRING and render_auth_link will reject it — show `sms_message` and let the user pick a number from `sms_dids`. `suggested_region` is always set, but the matching ENTRY in `sms_dids` may be missing (europe and israel appear only when a number is configured) or present with an empty `did`, so offer that region first only when `sms_dids[suggested_region]` exists and carries a number, and otherwise offer whatever the object does. On email there is nothing to display at all, and nothing to check either: a result means the mail was accepted for delivery, so tell the user to open their inbox. A delivery failure is an ERROR here, not a field — the tool answers `challenge_delivery_failed` and NO session exists, so do not call wait_for_login; retry, or offer another channel. Never hand `qr_text` to a link renderer — it is the link already rendered as QR art, so print it verbatim inside a fenced code block or not at all, because its rows stop scanning the moment one wraps or a blank line lands between them. (3) Call wait_for_login with the returned session ID to poll until the user completes authentication. Terminal states: "verified" (login succeeded), "failed", "expired".
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['channel'], 'properties': {'email': {'type': 'string', 'format': 'email', 'description': 'Email address (required for email channel)'}, 'channel': {'enum': ['telegram', 'whatsapp', 'sms', 'email'], 'type': 'string', 'description': 'Authentication channel'}, 'phone_number': {'type': 'string', 'description': 'Phone number in E.164 format (required for SMS channel)'}}, 'additionalProperties': False}
start_user_domain_verification
Start a self-service domain verification session. The user proves ownership of a domain via DNS or HTTP challenge. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['domain'], 'properties': {'domain': {'type': 'string', 'maxLength': 255, 'minLength': 1, 'description': 'Domain name to verify (e.g. example.com)'}, 'channel': {'enum': ['dns', 'http'], 'type': 'string', 'description': 'Verification channel (default: dns)'}}, 'additionalProperties': False}
submit_verification_code
Submit an OTP/challenge code for a pending verification. Accepted ONLY where we delivered the code out-of-band to the party being verified: type "email", and type "domain" with channel "email". Any other pair answers 400 unsupported_for_type and completes elsewhere — use trigger_verification (POST /verifications/:id/verify) for a domain over dns/http/auto; a phone completes when the code reaches us FROM that number; social completes through its OAuth callback; a telegram_bot is already verified at creation. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id', 'code'], 'properties': {'id': {'type': 'string', 'description': 'Verification ID'}, 'code': {'type': 'string', 'description': 'The OTP or challenge code to submit'}}, 'additionalProperties': False}
test_verify
Auto-complete a verification in test mode (pk_test_* API keys only). Useful for testing flows without real OTP delivery. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Verification ID'}}, 'additionalProperties': False}
trigger_drill
Fire an on-demand Proof-Me drill against one enrolled challenger — a real cross-channel identity challenge carrying the scheduled-safety-check label. Complements the automated daily drill + monthly reinforcement sweeps. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['hitl_id', 'challenger_id'], 'properties': {'hitl_id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'HITL config ID'}, 'challenger_id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'Challenger ID to drill'}}, 'additionalProperties': False}
trigger_verification
Trigger a DNS/HTTP verification check for a pending domain verification. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Verification ID'}}, 'additionalProperties': False}
update_circle
Update a Circle's name. Only the display name is mutable — the profile/identity binding is create-only. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'pattern': '^[0-9a-fA-F]{24}$', 'description': 'Circle ID'}, 'name': {'type': 'string', 'maxLength': 200, 'minLength': 1, 'description': 'New name for the Circle'}}, 'additionalProperties': False}
update_hitl
Update a HITL config. Can change name, channels, or timeout. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'HITL config ID'}, 'name': {'anyOf': [{'type': 'string', 'maxLength': 200, 'minLength': 1}, {'type': 'null'}], 'description': 'New name (null to clear)'}, 'channels': {'type': 'array', 'items': {'anyOf': [{'type': 'object', 'required': ['type', 'config'], 'properties': {'type': {'type': 'string', 'const': 'telegram'}, 'config': {'type': 'object', 'required': ['chat_id'], 'properties': {'chat_id': {'type': 'string', 'maxLength': 50, 'minLength': 1}}, 'additionalProperties': False}}, 'additionalProperties': False}, {'type': 'object', 'required': ['type', 'config'], 'properties': {'type': {'type': 'string', 'const': 'whatsapp'}, 'config': {'type': 'object', 'properties': {'bsuid': {'type': 'string', 'pattern': '^[A-Z]{2}\\.[a-zA-Z0-9]{10,140}$', 'description': 'WhatsApp Business-Scoped User ID (e.g. US.abc123...)'}, 'phone_number': {'type': 'string', 'pattern': '^\\+?[1-9]\\d{6,14}$', 'description': 'Phone number in E.164 format'}}, 'additionalProperties': False}}, 'additionalProperties': False}]}, 'minItems': 1, 'description': 'Updated channels'}, 'timeout_seconds': {'type': 'integer', 'maximum': 86400, 'minimum': 60, 'description': 'Updated timeout in seconds (60â\x80\x9386400)'}}, 'additionalProperties': False}
update_my_profile
Update the current user's primary profile. Supports display name, bio, avatar, theme, custom links, and verification display settings. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {'bio': {'type': 'string', 'maxLength': 500, 'description': 'Profile bio'}, 'theme': {'type': 'object', 'properties': {'font_style': {'enum': ['default', 'modern', 'classic'], 'type': 'string', 'description': 'Font style'}, 'gradient_end': {'type': 'string', 'pattern': '^#[0-9A-Fa-f]{6}$', 'description': 'Gradient end color'}, 'primary_color': {'type': 'string', 'pattern': '^#[0-9A-Fa-f]{6}$', 'description': 'Primary color (hex)'}, 'gradient_start': {'type': 'string', 'pattern': '^#[0-9A-Fa-f]{6}$', 'description': 'Gradient start color'}, 'background_type': {'enum': ['solid', 'gradient'], 'type': 'string', 'description': 'Background type'}, 'background_color': {'type': 'string', 'pattern': '^#[0-9A-Fa-f]{6}$', 'description': 'Background color (hex)'}}, 'description': 'Profile theme settings', 'additionalProperties': False}, 'is_public': {'type': 'boolean', 'description': 'Whether the profile is publicly visible'}, 'avatar_url': {'anyOf': [{'anyOf': [{'not': {}}, {'type': 'string', 'maxLength': 500000}]}, {'type': 'null'}], 'description': 'Avatar (HTTPS URL or base64 data URI, null to remove)'}, 'custom_links': {'type': 'array', 'items': {'type': 'object', 'required': ['title', 'url'], 'properties': {'url': {'type': 'string', 'format': 'uri', 'maxLength': 500, 'description': 'Link URL'}, 'icon': {'type': 'string', 'maxLength': 50, 'description': 'Icon identifier'}, 'title': {'type': 'string', 'maxLength': 100, 'description': 'Link title'}, 'is_visible': {'type': 'boolean', 'description': 'Whether the link is visible'}, 'display_order': {'type': 'integer', 'minimum': 0, 'description': 'Display order'}}, 'additionalProperties': False}, 'maxItems': 20, 'description': 'Custom links (max 20)'}, 'display_name': {'type': 'string', 'maxLength': 100, 'description': 'Display name'}, 'show_proof_channels': {'type': 'boolean', 'description': 'Show proof channels'}, 'show_verification_dates': {'type': 'boolean', 'description': 'Show verification dates'}}, 'additionalProperties': False}
update_profile
Update a profile by ID. Supports changing display info, theme, custom links, and verification display settings. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['profile_id'], 'properties': {'bio': {'type': 'string', 'maxLength': 500, 'description': 'Profile bio'}, 'theme': {'type': 'object', 'properties': {'font_style': {'enum': ['default', 'modern', 'classic'], 'type': 'string', 'description': 'Font style'}, 'gradient_end': {'type': 'string', 'pattern': '^#[0-9A-Fa-f]{6}$', 'description': 'Gradient end color'}, 'primary_color': {'type': 'string', 'pattern': '^#[0-9A-Fa-f]{6}$', 'description': 'Primary color (hex)'}, 'gradient_start': {'type': 'string', 'pattern': '^#[0-9A-Fa-f]{6}$', 'description': 'Gradient start color'}, 'background_type': {'enum': ['solid', 'gradient'], 'type': 'string', 'description': 'Background type'}, 'background_color': {'type': 'string', 'pattern': '^#[0-9A-Fa-f]{6}$', 'description': 'Background color (hex)'}}, 'description': 'Profile theme settings', 'additionalProperties': False}, 'is_public': {'type': 'boolean', 'description': 'Whether the profile is publicly visible'}, 'avatar_url': {'anyOf': [{'anyOf': [{'not': {}}, {'type': 'string', 'maxLength': 100000}]}, {'type': 'null'}], 'description': 'Avatar (base64 or URL, null to remove)'}, 'is_primary': {'type': 'boolean', 'description': 'Set as primary profile'}, 'profile_id': {'type': 'string', 'description': 'Profile ID'}, 'is_business': {'type': 'boolean', 'description': 'Whether this is a business profile'}, 'custom_links': {'type': 'array', 'items': {'type': 'object', 'required': ['title', 'url'], 'properties': {'url': {'type': 'string', 'format': 'uri', 'maxLength': 500, 'description': 'Link URL'}, 'icon': {'type': 'string', 'maxLength': 50, 'description': 'Icon identifier'}, 'title': {'type': 'string', 'maxLength': 100, 'description': 'Link title'}, 'is_visible': {'type': 'boolean', 'description': 'Whether the link is visible'}, 'display_order': {'type': 'integer', 'minimum': 0, 'description': 'Display order'}}, 'additionalProperties': False}, 'maxItems': 20, 'description': 'Custom links (max 20)'}, 'display_name': {'type': 'string', 'maxLength': 100, 'description': 'Display name'}, 'business_name': {'type': 'string', 'maxLength': 100, 'description': 'Business name'}, 'show_proof_channels': {'type': 'boolean', 'description': 'Show proof channels on public profile'}, 'show_verification_dates': {'type': 'boolean', 'description': 'Show verification dates on public profile'}}, 'additionalProperties': False}
update_profile_proofs
Update which verified assets (proofs) are displayed on a specific profile. Controls visibility, privacy masking, ordering, and labels. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['profile_id', 'proofs'], 'properties': {'proofs': {'type': 'array', 'items': {'type': 'object', 'required': ['asset_id'], 'properties': {'label': {'type': 'string', 'maxLength': 50, 'description': 'Custom label (e.g. "Support Phone")'}, 'asset_id': {'type': 'string', 'description': 'Asset ID to display'}, 'is_visible': {'type': 'boolean', 'description': 'Whether this proof is visible'}, 'mask_level': {'enum': ['full', 'partial', 'hidden'], 'type': 'string', 'description': 'Privacy masking level'}, 'display_order': {'type': 'integer', 'minimum': 0, 'description': 'Display order'}}, 'additionalProperties': False}, 'maxItems': 50, 'description': 'Proofs to display on profile'}, 'profile_id': {'type': 'string', 'description': 'Profile ID'}}, 'additionalProperties': False}
update_profile_template
Create or update a custom template for a specific profile, channel, and message type. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['profile_id', 'channel', 'type', 'body'], 'properties': {'body': {'type': 'string', 'maxLength': 2000, 'minLength': 1, 'description': 'Template body text with variable placeholders'}, 'type': {'type': 'string', 'description': 'Message type (e.g. verification_request, login_request)'}, 'channel': {'enum': ['telegram', 'whatsapp', 'sms', 'email'], 'type': 'string', 'description': 'Message channel'}, 'subject': {'type': 'string', 'maxLength': 200, 'description': 'Email subject line (email channel only)'}, 'is_active': {'type': 'boolean', 'description': 'Whether the template is active'}, 'profile_id': {'type': 'string', 'description': 'Profile ID'}, 'button_text': {'type': 'string', 'maxLength': 50, 'description': 'Button text (email channel only)'}, 'button_url_template': {'type': 'string', 'maxLength': 500, 'description': 'Button URL template with placeholders'}}, 'additionalProperties': False}
update_public_proofs
Update which verified proofs are visible on the user's public profile, including visibility, masking, and display order. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['proofs'], 'properties': {'proofs': {'type': 'array', 'items': {'type': 'object', 'required': ['asset_id'], 'properties': {'label': {'type': 'string', 'maxLength': 50, 'description': 'Custom label for the proof'}, 'asset_id': {'type': 'string', 'description': 'Asset ID to display'}, 'is_visible': {'type': 'boolean', 'description': 'Whether the proof is visible on the public profile'}, 'mask_level': {'enum': ['full', 'partial', 'hidden'], 'type': 'string', 'description': 'How much of the proof value to show'}, 'display_order': {'type': 'integer', 'minimum': 0, 'description': 'Display position (0-based)'}}, 'additionalProperties': False}, 'maxItems': 50, 'description': 'Array of proof display configurations (max 50)'}}, 'additionalProperties': False}
update_settings
Update account settings: branding, the outbound webhook endpoint with its event subscriptions, and the default proof lifetime. Setting the first webhook endpoint creates the signing secret and returns it in this response; the value is returned only when this call created or rotated it, so record it then. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {'webhook': {'type': 'object', 'properties': {'url': {'anyOf': [{'type': 'string', 'format': 'uri', 'maxLength': 2000}, {'type': 'null'}], 'description': 'HTTPS endpoint outbound webhooks are delivered to, at most 2000 characters; null removes it. Private, loopback and link-local addresses are refused.'}, 'events': {'type': 'array', 'items': {'type': 'string'}, 'maxItems': 32, 'description': 'Subscription patterns: an exact event type, a family wildcard such as "proof.*", or "*". An empty list means every event.'}, 'rotate_secret': {'type': 'boolean', 'description': 'Replace the signing secret and return the new value. The previous value stops verifying immediately.'}}, 'description': 'Outbound webhook configuration. Deliveries carry an HMAC-SHA256 X-Proof-Signature over "<X-Proof-Timestamp>.<body>".', 'additionalProperties': False}, 'branding': {'type': 'object', 'properties': {'logo_url': {'anyOf': [{'anyOf': [{'not': {}}, {'type': 'string', 'format': 'uri'}]}, {'type': 'null'}], 'description': 'HTTPS URL to business logo'}, 'email_theme': {'enum': ['dark', 'light'], 'type': 'string', 'description': 'Email template theme'}, 'business_name': {'type': 'string', 'maxLength': 100, 'description': 'Business name displayed in verifications'}, 'primary_color': {'type': 'string', 'pattern': '^#[0-9A-Fa-f]{6}$', 'description': 'Primary brand color (hex, e.g. #FF5733)'}, 'support_email': {'type': 'string', 'format': 'email', 'description': 'Support email shown in verification messages'}}, 'description': 'Branding settings to update', 'additionalProperties': False}, 'proof_expiry_days': {'type': 'integer', 'maximum': 365, 'minimum': 1, 'description': 'Default proof-token lifetime in days for newly issued proofs'}}, 'additionalProperties': False}
update_template
Create or update a custom template for a specific channel and message type. Replaces the default template. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['channel', 'message_type', 'body'], 'properties': {'body': {'type': 'string', 'maxLength': 2000, 'minLength': 1, 'description': 'Template body text with variable placeholders'}, 'channel': {'enum': ['telegram', 'whatsapp', 'sms', 'email'], 'type': 'string', 'description': 'Message channel'}, 'subject': {'type': 'string', 'maxLength': 200, 'description': 'Email subject line (email channel only)'}, 'button_text': {'type': 'string', 'maxLength': 50, 'description': 'Button text (email channel only)'}, 'message_type': {'type': 'string', 'description': 'Message type (e.g. verification_request, login_request)'}, 'button_url_template': {'type': 'string', 'maxLength': 500, 'description': 'Button URL template with placeholders'}}, 'additionalProperties': False}
upload_hitl_keys
Upload an encryption keypair for a HITL config. The server validates the RSA-4096 public key and computes the key ID. Note: the encrypted_private_key is already encrypted client-side with the user's password — the server never sees the password. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['hitl_id', 'public_key', 'encrypted_private_key', 'kdf_salt'], 'properties': {'hitl_id': {'type': 'string', 'description': 'HITL config ID'}, 'kdf_salt': {'type': 'string', 'description': 'Base64url-encoded PBKDF2 salt'}, 'public_key': {'type': 'string', 'description': 'PEM-encoded RSA-4096 SPKI public key'}, 'encrypted_private_key': {'type': 'string', 'description': 'JSON-serialized encrypted private key envelope (PBKDF2-SHA256+AES-256-GCM)'}}, 'additionalProperties': False}
validate_proof
Validate a proof token online. Checks the token signature, expiry, and revocation status against the server, and optionally that the proof is about the identifier you expect. Public endpoint — no API key required.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['proof_token'], 'properties': {'identifier': {'type': 'string', 'description': 'Optional: the identifier this proof should be about (phone, email, domain, ...). When supplied, a proof about anything else answers valid:false with reason "identifier_mismatch"; a proof of an encrypted decision answers "identifier_unverifiable".'}, 'proof_token': {'type': 'string', 'description': 'The JWT proof token to validate'}}, 'additionalProperties': False}
verify_2fa
Submit a verification code to complete a 2FA challenge. Rate limited to 10 attempts per minute. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['session_id', 'code'], 'properties': {'code': {'type': 'string', 'maxLength': 10, 'minLength': 1, 'description': 'Verification code'}, 'session_id': {'type': 'string', 'description': '2FA session ID'}}, 'additionalProperties': False}
verify_2fa_magic_link
Complete a 2FA challenge using a magic link token (received via email). No code submission needed — the token itself is the proof. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['token'], 'properties': {'token': {'type': 'string', 'description': 'Magic link token from the verification email'}}, 'additionalProperties': False}
verify_delegation
Verify a Proof of Delegation — the attestation that a domain authorized a specific agent artifact. Pass either the artifact's card (MCP server.json / A2A agent card) or a raw delegation token, PLUS two facts you established yourself: the artifact identity you resolved (the package you are installing, the endpoint you are calling) and the domain you expect to stand behind it. Both are required — a token can be copied into someone else's card, and any domain owner can mint a valid delegation naming someone else's package, so a verdict without both pins would mean 'some domain said something about some artifact'. WHERE THE IDENTITY MAY COME FROM: it is the artifact you are acting on, and never a value read from inside the artifact you are checking. A name in the artifact's own package.json, card or manifest is self-declared and editable by whoever ships it, so checking it against the delegation compares the artifact with itself. Resolve it afresh at call time instead of reusing a value from earlier in this conversation, which may already be stale. When no independently resolvable identity exists — a local or unpublished artifact — you have nothing to compare against, and that is the honest answer: report it rather than a mismatch, because a mismatch here reads as an accusation against the domain named in the delegation. The verifier walks signature → principal → delegate → revocation status, including the cascade down to the domain control proof. Requires no API key. What a verified result means: the expected domain's controller authorized this artifact for these scopes — NOT that the artifact is safe, audited or endorsed.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['delegate', 'expected_principal'], 'properties': {'card': {'type': 'object', 'description': 'The MCP server card or A2A agent card to read the delegation from', 'additionalProperties': {}}, 'token': {'type': 'string', 'description': 'A raw delegation token, when you already have it instead of a card'}, 'delegate': {'type': 'object', 'required': ['type', 'value'], 'properties': {'type': {'enum': ['url', 'purl'], 'type': 'string', 'description': 'Identifier type: https URL or package URL (purl)'}, 'value': {'type': 'string', 'maxLength': 2048, 'minLength': 1, 'description': 'The artifact identifier YOU resolved â\x80\x94 never a value read from inside the artifact you are checking, and resolved afresh rather than carried over from earlier in the conversation'}}, 'description': 'The artifact identity you resolved independently. Required: this comparison is what defeats a copied token.', 'additionalProperties': False}, 'check_status': {'type': 'boolean', 'description': 'Default true. When false the signature and claims are checked but revocation is NOT â\x80\x94 treat the result as "not revoked-checked", never as "not revoked".'}, 'required_scopes': {'type': 'array', 'items': {'type': 'string', 'maxLength': 64, 'minLength': 1}, 'maxItems': 32, 'minItems': 1, 'description': 'Capability scopes the delegation must grant'}, 'expected_principal': {'type': 'string', 'maxLength': 253, 'minLength': 1, 'description': 'Required. The domain you expect to have authorized this artifact (e.g. postmarkapp.com) â\x80\x94 an issuer binds the artifact to nothing, so any domain owner can mint a valid delegation for someone else\'s package. Without this pin the answer is only "some domain claims this".'}}, 'additionalProperties': False}
verify_delegations
Batch-verify up to 50 Proof of Delegation artifacts in one call — the inventory half of the checker (h-proof-checker-mcp): re-check everything you already trust instead of one verify_delegation call per artifact. Each item takes the same shape verify_delegation requires (card XOR token, delegate, expected_principal, optional required_scopes) and follows the same rule about where identity comes from: each `delegate` is the artifact you are acting on, never a value read from inside the artifact you are checking, and resolved afresh at call time. Items are verified INDEPENDENTLY — no cross-item state, nothing persisted, one item failing never affects another item's result. This tool does NOT discover what you have installed and does NOT fetch anything on your behalf: it verifies material you already hold, the same trust boundary verify_delegation draws. Revocation is always checked (there is no check_status:false here — the point of a batch re-check is to see what changed since you last looked). Each result carries an `outcome`: confirmed_valid (verified), confirmed_invalid (a genuine negative verdict — revoked, expired, mismatched, malformed, and similar), no_claim_found (the artifact publishes no delegation at all — an absence, never an accusation), or unconfirmed (we could not reach the issuer or otherwise get a confident answer right now — NEVER treat this as a bad verdict). Requires no API key. `checked_at` on each result is the moment THAT item's own check completed, not one timestamp shared across the call.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['items'], 'properties': {'items': {'type': 'array', 'items': {'type': 'object', 'required': ['delegate', 'expected_principal'], 'properties': {'card': {'type': 'object', 'description': 'The MCP server card or A2A agent card to read the delegation from', 'additionalProperties': {}}, 'token': {'type': 'string', 'description': 'A raw delegation token, when you already have it instead of a card'}, 'delegate': {'type': 'object', 'required': ['type', 'value'], 'properties': {'type': {'enum': ['url', 'purl'], 'type': 'string', 'description': 'Identifier type: https URL or package URL (purl)'}, 'value': {'type': 'string', 'maxLength': 2048, 'minLength': 1, 'description': 'The artifact identifier YOU resolved â\x80\x94 never a value read from inside the artifact you are checking, and resolved afresh rather than carried over from earlier in the conversation'}}, 'description': 'The artifact identity you resolved independently. Required: this comparison is what defeats a copied token.', 'additionalProperties': False}, 'required_scopes': {'type': 'array', 'items': {'type': 'string', 'maxLength': 64, 'minLength': 1}, 'maxItems': 32, 'minItems': 1, 'description': 'Capability scopes the delegation must grant'}, 'expected_principal': {'type': 'string', 'maxLength': 253, 'minLength': 1, 'description': 'Required. The domain you expect to have authorized this artifact (e.g. postmarkapp.com) â\x80\x94 an issuer binds the artifact to nothing, so any domain owner can mint a valid delegation for someone else\'s package. Without this pin the answer is only "some domain claims this".'}}, 'additionalProperties': False}, 'maxItems': 50, 'minItems': 1, 'description': '1-50 artifacts to verify in this call, each shaped like a verify_delegation call'}}, 'additionalProperties': False}
verify_domain
Trigger domain verification. Checks DNS records or other verification method to confirm domain ownership. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Domain ID to verify'}}, 'additionalProperties': False}
verify_domain_with_credentials
Verify a pending domain using previously stored DNS credentials. Use when credentials are already connected. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Domain ID to verify'}}, 'additionalProperties': False}
verify_email_otp
Submit the OTP code to verify an email addition. Completes the add-email flow if the code is correct. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), or sign in with start_login — a session opens this tool — then call this tool again.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['session_id', 'code'], 'properties': {'code': {'type': 'string', 'maxLength': 10, 'minLength': 1, 'description': 'OTP code received via email'}, 'session_id': {'type': 'string', 'description': 'Add-email session ID'}}, 'additionalProperties': False}
wait_for_2fa
Poll a 2FA session until the user completes the challenge. Uses exponential backoff (2s initial, 1.5x, 30s max) with jitter. Agent usage: Call this after start_2fa with the returned session_id. Terminal states: "verified" (challenge completed — proceed with the protected operation), "expired" (offer to restart with start_2fa). Before polling, present start_2fa's challenge: pass its `deep_link` to render_auth_link on telegram/whatsapp, or show its `sms_message` on sms. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['session_id'], 'properties': {'session_id': {'type': 'string', 'description': '2FA session ID from start_2fa'}, 'timeout_seconds': {'type': 'integer', 'maximum': 600, 'minimum': 1, 'description': 'Maximum wait time in seconds (default: 50, max: 600). Keep it under your MCP client\'s request timeout (the SDK default is 60 s) â\x80\x94 a longer wait is cut off by the client while the server is still polling. On timeout the tool answers status "pending"; call it again with the same identifier.'}}, 'additionalProperties': False}
wait_for_account_creation
Poll an account-bootstrap session until the user completes verification. Uses exponential backoff (2s initial, 1.5x, 30s max) with jitter. Agent usage: Call this after create_account with the returned session id. Terminal states: "verified" (this server keeps the session for this connection; the `user_id` field in the terminal body identifies the authenticated user), "expired". A result with status "pending" means the wait ran out before the user finished — call this tool again with the same id. Works identically whether the underlying flow created a new User or logged in an existing one.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Account session id from create_account'}, 'timeout_seconds': {'type': 'integer', 'maximum': 600, 'minimum': 1, 'description': 'Maximum wait time in seconds (default: 50, max: 600). Keep it under your MCP client\'s request timeout (the SDK default is 60 s) â\x80\x94 a longer wait is cut off by the client while the server is still polling. On timeout the tool answers status "pending"; call it again with the same identifier.'}}, 'additionalProperties': False}
wait_for_chat_id_discovery
Poll a chat ID discovery token until the user interacts with the Telegram bot. Uses exponential backoff (2s initial, 1.5x, 30s max) with jitter. Agent usage: Call this after create_chat_id_discovery. Present the discovery response's `deep_link` with render_auth_link first, then poll with the returned token. Terminal states: "completed" (chat_id discovered — use it when creating a HITL config with a Telegram channel), "expired". While "pending", the user has not yet opened the Telegram link. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['token'], 'properties': {'token': {'type': 'string', 'description': 'Discovery token from create_chat_id_discovery'}, 'timeout_seconds': {'type': 'integer', 'maximum': 600, 'minimum': 1, 'description': 'Maximum wait time in seconds (default: 50, max: 600). Keep it under your MCP client\'s request timeout (the SDK default is 60 s) â\x80\x94 a longer wait is cut off by the client while the server is still polling. On timeout the tool answers status "pending"; call it again with the same identifier.'}}, 'additionalProperties': False}
wait_for_confirmation
Poll a confirmation until the approver responds. Uses exponential backoff (2s initial, 1.5x, 30s max) with jitter. Agent usage: Call this after create_confirmation with the returned confirmation ID. Terminal states: "approved" (action authorized — check the proof_token), "denied" (action rejected). While "pending", the approver has not yet responded. This poll returns no link — the approval request is delivered to the approver's own channel. If the approver needs one anyway, call get_confirmation_approval_link for a fresh `approval_url`; it needs the confirmation to be still pending — the state this tool waits in — and also refuses once `timeout_at` has passed, so a long wait can outlive the link even while the status has not moved. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Confirmation ID from create_confirmation'}, 'timeout_seconds': {'type': 'integer', 'maximum': 600, 'minimum': 1, 'description': 'Maximum wait time in seconds (default: 50, max: 600). Keep it under your MCP client\'s request timeout (the SDK default is 60 s) â\x80\x94 a longer wait is cut off by the client while the server is still polling. On timeout the tool answers status "pending"; call it again with the same identifier.'}}, 'additionalProperties': False}
wait_for_login
Poll a login session until the user completes authentication. Uses exponential backoff (2s initial, 1.5x, 30s max) with jitter. Agent usage: Call this after start_login with the returned session ID. Terminal states: "verified" (login succeeded — this server keeps the session for this connection and signs your own account records with it: emails, phones, domains, API keys, 2FA, DNS credentials, verification requests, your public profile's username and proof list), "failed", "expired". A result with status "pending" means the wait ran out before the user finished — call this tool again with the same id.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Auth session ID from start_login'}, 'timeout_seconds': {'type': 'integer', 'maximum': 600, 'minimum': 1, 'description': 'Maximum wait time in seconds (default: 50, max: 600). Keep it under your MCP client\'s request timeout (the SDK default is 60 s) â\x80\x94 a longer wait is cut off by the client while the server is still polling. On timeout the tool answers status "pending"; call it again with the same identifier.'}}, 'additionalProperties': False}
wait_for_request
Poll a verification request until it reaches a terminal state (completed, expired, or cancelled). Uses exponential backoff (2s initial, 1.5x, 30s max) with jitter. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Verification request ID to poll'}, 'timeout_seconds': {'type': 'integer', 'maximum': 300, 'minimum': 1, 'description': 'Maximum wait time in seconds (default: 50, max: 300). Keep it under your MCP client\'s request timeout (the SDK default is 60 s) â\x80\x94 a longer wait is cut off by the client while the server is still polling. On timeout the tool answers status "pending"; call it again with the same identifier.'}}, 'additionalProperties': False}
wait_for_session
Poll a session until it reaches a terminal state (verified, failed, or expired). Uses exponential backoff (2s initial, 1.5x, 30s max) with jitter. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Session ID to poll'}, 'timeout_seconds': {'type': 'integer', 'maximum': 300, 'minimum': 1, 'description': 'Maximum wait time in seconds (default: 50, max: 300). Keep it under your MCP client\'s request timeout (the SDK default is 60 s) â\x80\x94 a longer wait is cut off by the client while the server is still polling. On timeout the tool answers status "pending"; call it again with the same identifier.'}}, 'additionalProperties': False}
wait_for_verification
Poll a verification until it reaches a terminal state (verified, failed, expired, revoked, or cancelled). Uses exponential backoff (2s initial, 1.5x, 30s max) with jitter. A multi-channel verification that lost the race is "cancelled" and one whose proof was withdrawn is "revoked"; both are final, so the wait returns rather than polling on. ACCESS: needs a Proof account. Authenticate this client (Claude Code: /mcp → Authenticate), then call this tool again. start_login does NOT open this tool.
Esquema de entrada
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['id'], 'properties': {'id': {'type': 'string', 'description': 'Verification ID to poll'}, 'timeout_seconds': {'type': 'integer', 'maximum': 300, 'minimum': 1, 'description': 'Maximum wait time in seconds (default: 50, max: 300). Keep it under your MCP client\'s request timeout (the SDK default is 60 s) â\x80\x94 a longer wait is cut off by the client while the server is still polling. On timeout the tool answers status "pending"; call it again with the same identifier.'}}, 'additionalProperties': False}
Modificado
create_confirmation
25 de September de 2026 a las 02:49
Añadido
render_auth_link
21 de September de 2026 a las 02:40
Añadido
start_2fa_for_action
21 de September de 2026 a las 02:40
Añadido
wait_for_account_creation
21 de September de 2026 a las 02:40
Añadido
send_account_email
21 de September de 2026 a las 02:40
Añadido
create_account
21 de September de 2026 a las 02:40
Añadido
wait_for_login
21 de September de 2026 a las 02:40
Añadido
start_login
21 de September de 2026 a las 02:40
Añadido
verify_delegations
21 de September de 2026 a las 02:40
Añadido
verify_delegation
21 de September de 2026 a las 02:40
Añadido
revoke_delegation
21 de September de 2026 a las 02:40
Añadido
get_delegation
21 de September de 2026 a las 02:40
Añadido
list_delegations
21 de September de 2026 a las 02:40
Añadido
create_delegation
21 de September de 2026 a las 02:40
Añadido
remove_circle_member_channel
21 de September de 2026 a las 02:40
Añadido
list_circle_member_channels
21 de September de 2026 a las 02:40
Añadido
add_circle_member_channel
21 de September de 2026 a las 02:40
Añadido
remove_circle_member
21 de September de 2026 a las 02:40
Añadido
create_circle_member_drill
21 de September de 2026 a las 02:40
Añadido
invite_circle_member
21 de September de 2026 a las 02:40
Añadido
list_circle_members
21 de September de 2026 a las 02:40
Añadido
add_circle_member
21 de September de 2026 a las 02:40
Añadido
delete_circle
21 de September de 2026 a las 02:40
Añadido
update_circle
21 de September de 2026 a las 02:40
Añadido
get_circle
21 de September de 2026 a las 02:40
Añadido
list_circles
21 de September de 2026 a las 02:40
Añadido
create_circle
21 de September de 2026 a las 02:40
Añadido
get_identity_challenge
21 de September de 2026 a las 02:40
Añadido
create_identity_challenge
21 de September de 2026 a las 02:40
Añadido
trigger_drill
21 de September de 2026 a las 02:40