MCP Server

KeyHalve - verify sealed documents

com.keyhalve/verify
Security Public & reachable MCP 2026-07-28

What this MCP does

Verifies KeyHalve-sealed documents, checks their live status and integrity, and explains cryptographic verification results without decrypting contents.

keyhalve_explain
Plain-language explanation of what a KeyHalve verification verdict means and why it can be trusted (blind rail, three-share custody, commitments, revocation). Optionally focused on one topic.
Read only
Input schema
{'type': 'object', 'properties': {'topic': {'enum': ['verdict', 'blindness', 'rail', 'revocation', 'integrity', 'issuer_trust', 'limits'], 'type': 'string', 'description': 'Optional single topic; omit for the overview.'}}}
keyhalve_status
Live status of a KeyHalve-sealed document by id: active, revoked (with reason/time), or outside its validity window. Lighter than keyhalve_verify — status only, no integrity or rail checks. Use for "is this still good right now?"
Read only Open world
Input schema
{'type': 'object', 'required': ['document_id'], 'properties': {'document_id': {'type': 'string', 'description': 'The document id, e.g. vp_…, kh_…, cb_….'}}}
keyhalve_verify
Verify a KeyHalve-sealed document. Accepts a verify URL, the raw text of a KeyHalve QR code, or a document id (vp_…, kh_…, cb_…). Returns the cryptographic verdict: whether the seal exists, its live status (active/revoked/expired), ciphertext integrity against the issuance commitment, the KeyHalve rail's independent attestation, the validity window, and the issuer's trust context. This tool NEVER decrypts sealed contents — any decryption key in the URL fragment is discarded unread; contents are only readable by opening the verify URL in a browser.
Read only Open world
Input schema
{'type': 'object', 'required': ['input'], 'properties': {'input': {'type': 'string', 'description': 'A KeyHalve verify URL, QR-code text, or bare document id.'}}}
Added
keyhalve_explain
Sept. 17, 2026, 12:35 p.m.
Added
keyhalve_status
Sept. 17, 2026, 12:35 p.m.
Added
keyhalve_verify
Sept. 17, 2026, 12:35 p.m.