MCP Radar
MCP Server

mcp

com.pcrzero/mcp
Security Public & reachable MCP 2025-11-25

What this MCP does

Issues signed receipts for policy-based attestations and verifies those receipts against published signing keys.

Capabilities

Tools

3 tools
get_keyset
Returns the current PCRZERO signing keyset — key ids, public halves, and each key's status. Public and unauthenticated: no API key, no cost, no account. This is the same document an outside party fetches to check a PCRZERO receipt without trusting us, and fetching it is how you stop taking our word for anything.
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {}}
issue_receipt
Adjudicates an attestation document against a policy and returns the verdict together with a signed receipt pair — the durable, independently checkable proof that this decision was made, by these keys, over this document. **Metered: every call bills one `receipt_verifications` unit against the API key configured for this server, and a `fail` verdict bills exactly like a `pass`. You are paying for the adjudication, not for the answer you wanted.** This is the only tool here that spends. If you already hold a receipt and want to know whether it is genuine, that is `verify_receipt`, which is free and needs no key.
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {'nonce': {'type': 'string'}, 'policy': {'type': 'object', 'description': 'Inline policy object (API wire shape).', 'additionalProperties': {}}, 'receipt': {'type': 'boolean', 'description': 'Request a signed receipt (default true).'}, 'document': {'type': 'string', 'description': 'Base64 attestation document (single-document form).'}, 'documents': {'type': 'array', 'items': {'type': 'string'}, 'description': 'Base64 attestation documents (batch form).'}, 'policy_id': {'type': 'string', 'description': 'Stored policy id (pol_…).'}}, 'additionalProperties': False}
verify_receipt
Checks a PCRZERO receipt pair against the signing keyset: whether the signature holds, and whether the receipt says what it appears to say. **Free, with no API key and no account, and it stays free.** Offline by default — supply `keyset` and this call touches the network not at all; omit it and the server fetches the public keyset from api.pcrzero.com once. The result field `keyset_source` tells you which of the two happened, every time. This tool issues nothing, bills nothing, and cannot spend. It is the half of PCRZERO you never pay for.
Input schema 
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['receipt'], 'properties': {'keyset': {'type': 'object', 'required': ['keys'], 'properties': {'keys': {'type': 'array', 'items': {'type': 'object', 'additionalProperties': {}}}}, 'description': 'Optional keyset in GET /v1/keys shape. When supplied, no network is used.', 'additionalProperties': False}, 'receipt': {'type': 'string', 'description': 'Base64url receipt envelope from issue_receipt / the API.'}, 'conformance': {'enum': ['full', 'classical-only'], 'type': 'string'}}, 'additionalProperties': False}
History

Recent tool changes

Added
get_keyset
Sept. 17, 2026, 12:36 p.m.
Added
verify_receipt
Sept. 17, 2026, 12:36 p.m.
Added
issue_receipt
Sept. 17, 2026, 12:36 p.m.
Discover

Similar MCP servers

osint-terminal

com.thetempleofdoom.osint-mcp/osint-terminal

Provides keyless OSINT and reconnaissance tools for domains, DNS, IPs, breach exposure, threat intelligence, and related lookups.

AIMEAT

io.aimeat/aimeat

Provides a self-hosted agent operating system with agent work delegation, access controls, federation, hooks, SSO, security admin…

hyperion

com.thetempleofdoom.hyperion/hyperion

Acts as a paid MCP tool marketplace and utility gateway with server discovery, HTTP and JavaScript tools, research, data conversi…

Vee3

io.github.Vee3io/vee3

Manages Clerk authentication infrastructure, including users, organizations, domains, sessions, tokens, OAuth, SSO, machines, per…

BorealHost

ai.borealhost/mcp

Provides web hosting and infrastructure management, including site deployment, DNS, domains, containers, compute, backups, cachin…

Proof Holdings

holdings.proof/mcp-server

Provides domain verification, identity and delegation proofs, human approval workflows, trusted-contact challenges, and controlle…

GoCreative Agent API

io.github.ColinHughes2121/gocreative-agent-api

Offers pay-per-call LLM completions and data services for company intelligence, KYB, sanctions screening, threat intelligence, co…

Japan Public Ledgers MCP

com.mcp-revenue-empire/japan-public-ledgers

Provides agent identity, memory, audit, trust, proxy, temporary email, webhook, CAPTCHA, and alerting capabilities alongside publ…