What this MCP does
Creates timestamped observations of public URLs with HTTP metadata and SHA-256 fingerprints, and verifies proof records and policies.
Capabilities
Tools
4
tools
freshproof_info
Describe FreshProof, its observation semantics, current MCP price and payment network. This tool is free.
Input schema
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'properties': {}}
observe_url
Buy a timestamped FreshProof observation of a public HTTP/HTTPS URL. Returns final URL, observation timestamp, age, HTTP status, SHA-256 body hash, body size, ETag, Last-Modified, fetch duration, and whether the observation came from shared cache or a fresh public-network request. Set max_age=0 when a new public-network request is required. The response body itself is not returned.
Read only
Open world
Input schema
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['url'], 'properties': {'url': {'type': 'string', 'format': 'uri', 'description': 'Public HTTP or HTTPS URL to observe'}, 'max_age': {'type': 'integer', 'maximum': 9007199254740991, 'minimum': 0, 'description': 'Maximum acceptable observation age in seconds. Defaults to 300. Set to 0 to force a fresh public-network request.'}}}
verify_proof
Verify an existing FreshProof Proof Receipt without making a new network request. This free tool checks deterministic receipt integrity and optionally evaluates trust policy rules. Use it when you already have a proof_id from observe_url or verify_url and want to re-check evidence without paying for another observation. The result includes valid, decision (PASS, FAIL, or UNKNOWN), per-rule checks, and the stored receipt.
Read only
Idempotent
Input schema
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['proof_id'], 'properties': {'policy': {'type': 'object', 'properties': {'status_in': {'type': 'array', 'items': {'type': 'integer', 'maximum': 599, 'minimum': 100}, 'minItems': 1, 'description': 'Allowed HTTP status codes. The rule passes when the observed status is in this list.'}, 'max_age_seconds': {'type': 'integer', 'maximum': 9007199254740991, 'minimum': 0, 'description': 'Maximum allowed age of the stored observation in seconds at verification time.'}, 'final_host_equals': {'type': 'string', 'minLength': 1, 'description': 'Expected lowercase hostname after redirects, for example example.com. Provide a hostname, not a full URL.'}, 'content_hash_equals': {'type': 'string', 'pattern': '^sha256:[a-f0-9]{64}$', 'description': 'Expected SHA-256 response-body fingerprint, including the sha256: prefix. Passes only on exact equality.'}, 'original_host_equals': {'type': 'string', 'minLength': 1, 'description': 'Expected lowercase hostname from the originally requested URL. Provide a hostname, not a full URL.'}, 'changed_since_content_hash': {'type': 'string', 'pattern': '^sha256:[a-f0-9]{64}$', 'description': 'Prior SHA-256 response-body fingerprint. Passes when the current proof has a different content hash.'}, 'require_same_origin_redirect': {'type': 'boolean', 'description': 'When true, fails if the final URL origin differs from the original URL origin after redirects.'}}, 'description': 'Optional declarative trust policy. All supplied rules must pass for decision PASS; any failed rule yields FAIL. UNKNOWN is reserved for cases where FreshProof cannot make a reliable policy decision.', 'additionalProperties': False}, 'proof_id': {'type': 'string', 'pattern': '^fp1_[a-f0-9]{64}$', 'description': 'FreshProof proof identifier returned by observe_url or verify_url.'}}}
Output schema
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['proof_id', 'valid', 'decision', 'checks', 'receipt'], 'properties': {'valid': {'type': 'boolean', 'description': 'True when the stored receipt passes deterministic integrity verification.'}, 'checks': {'type': 'array', 'items': {'type': 'object', 'required': ['rule', 'pass', 'actual', 'expected'], 'properties': {'pass': {'type': 'boolean', 'description': 'Whether this individual rule passed.'}, 'rule': {'type': 'string', 'description': 'Policy rule that was evaluated.'}, 'actual': {'description': 'Observed value used by the rule.'}, 'expected': {'description': 'Expected value or condition used by the rule.'}}, 'additionalProperties': False}}, 'receipt': {'type': 'object', 'required': ['proof_id', 'receipt_hash', 'payload'], 'properties': {'payload': {'type': 'object', 'required': ['version', 'observation_id', 'normalized_url', 'original_url', 'final_url', 'observed_at', 'method', 'status', 'content_hash', 'content_length', 'etag', 'last_modified', 'fetch_duration_ms'], 'properties': {'etag': {'type': ['string', 'null']}, 'method': {'type': 'string', 'const': 'GET'}, 'status': {'type': 'integer', 'maximum': 599, 'minimum': 100}, 'version': {'type': 'string', 'const': 'freshproof-receipt-v1'}, 'final_url': {'type': 'string', 'format': 'uri'}, 'observed_at': {'type': 'string', 'description': 'ISO-8601 timestamp of the observation.'}, 'content_hash': {'type': 'string', 'pattern': '^sha256:[a-f0-9]{64}$'}, 'original_url': {'type': 'string', 'format': 'uri'}, 'last_modified': {'type': ['string', 'null']}, 'content_length': {'type': 'integer', 'maximum': 9007199254740991, 'minimum': 0}, 'normalized_url': {'type': 'string', 'format': 'uri'}, 'observation_id': {'type': 'string'}, 'fetch_duration_ms': {'type': 'integer', 'maximum': 9007199254740991, 'minimum': 0}}, 'additionalProperties': False}, 'proof_id': {'type': 'string', 'pattern': '^fp1_[a-f0-9]{64}$', 'description': 'FreshProof proof identifier returned by observe_url or verify_url.'}, 'receipt_hash': {'type': 'string', 'pattern': '^sha256:[a-f0-9]{64}$', 'description': 'SHA-256 content address of the canonical Proof Receipt payload.'}}, 'additionalProperties': False}, 'decision': {'enum': ['PASS', 'FAIL', 'UNKNOWN'], 'type': 'string', 'description': 'Overall policy decision. PASS means every supplied rule passed; FAIL means at least one supplied rule failed; UNKNOWN means a reliable decision could not be made.'}, 'proof_id': {'type': 'string', 'pattern': '^fp1_[a-f0-9]{64}$', 'description': 'FreshProof proof identifier returned by observe_url or verify_url.'}}, 'additionalProperties': False}
verify_url
Verify what is observable at a public URL before an agent trusts, pays, or acts. This paid tool combines observe_url and verify_proof in one call: it buys an observation, creates or returns a Proof Receipt, and evaluates the supplied trust policy. Set max_age=0 when current public-network evidence is required. The result contains both observation evidence and verification with decision PASS, FAIL, or UNKNOWN.
Read only
Open world
Input schema
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['url', 'policy'], 'properties': {'url': {'type': 'string', 'format': 'uri', 'description': 'Public HTTP or HTTPS URL to observe and verify.'}, 'policy': {'type': 'object', 'properties': {'status_in': {'type': 'array', 'items': {'type': 'integer', 'maximum': 599, 'minimum': 100}, 'minItems': 1, 'description': 'Allowed HTTP status codes. The rule passes when the observed status is in this list.'}, 'max_age_seconds': {'type': 'integer', 'maximum': 9007199254740991, 'minimum': 0, 'description': 'Maximum allowed age of the stored observation in seconds at verification time.'}, 'final_host_equals': {'type': 'string', 'minLength': 1, 'description': 'Expected lowercase hostname after redirects, for example example.com. Provide a hostname, not a full URL.'}, 'content_hash_equals': {'type': 'string', 'pattern': '^sha256:[a-f0-9]{64}$', 'description': 'Expected SHA-256 response-body fingerprint, including the sha256: prefix. Passes only on exact equality.'}, 'original_host_equals': {'type': 'string', 'minLength': 1, 'description': 'Expected lowercase hostname from the originally requested URL. Provide a hostname, not a full URL.'}, 'changed_since_content_hash': {'type': 'string', 'pattern': '^sha256:[a-f0-9]{64}$', 'description': 'Prior SHA-256 response-body fingerprint. Passes when the current proof has a different content hash.'}, 'require_same_origin_redirect': {'type': 'boolean', 'description': 'When true, fails if the final URL origin differs from the original URL origin after redirects.'}}, 'description': 'Declarative trust policy evaluated against the resulting Proof Receipt.', 'additionalProperties': False}, 'max_age': {'type': 'integer', 'maximum': 9007199254740991, 'minimum': 0, 'description': 'Maximum acceptable observation age in seconds. Defaults to 300. Set to 0 to require a fresh public-network request before policy evaluation.'}}}
Output schema
{'type': 'object', '$schema': 'http://json-schema.org/draft-07/schema#', 'required': ['observation', 'verification'], 'properties': {'observation': {'type': 'object', 'required': ['url', 'final_url', 'observed_at', 'age_seconds', 'status', 'content_hash', 'content_length', 'etag', 'last_modified', 'fetch_duration_ms', 'source', 'proof_id', 'receipt_hash'], 'properties': {'url': {'type': 'string', 'format': 'uri'}, 'etag': {'type': ['string', 'null']}, 'source': {'enum': ['shared_cache', 'fresh_fetch'], 'type': 'string', 'description': 'fresh_fetch means FreshProof made a new public-network request; shared_cache means a stored observation satisfied max_age.'}, 'status': {'type': 'integer', 'maximum': 599, 'minimum': 100}, 'proof_id': {'type': 'string', 'pattern': '^fp1_[a-f0-9]{64}$', 'description': 'FreshProof proof identifier returned by observe_url or verify_url.'}, 'final_url': {'type': 'string', 'format': 'uri'}, 'age_seconds': {'type': 'integer', 'maximum': 9007199254740991, 'minimum': 0}, 'observed_at': {'type': 'string', 'description': 'ISO-8601 timestamp of the observation.'}, 'content_hash': {'type': 'string', 'pattern': '^sha256:[a-f0-9]{64}$'}, 'receipt_hash': {'type': 'string', 'pattern': '^sha256:[a-f0-9]{64}$'}, 'last_modified': {'type': ['string', 'null']}, 'content_length': {'type': 'integer', 'maximum': 9007199254740991, 'minimum': 0}, 'fetch_duration_ms': {'type': 'integer', 'maximum': 9007199254740991, 'minimum': 0}}, 'additionalProperties': False}, 'verification': {'type': 'object', 'required': ['proof_id', 'valid', 'decision', 'checks', 'receipt'], 'properties': {'valid': {'type': 'boolean', 'description': 'True when the stored receipt passes deterministic integrity verification.'}, 'checks': {'type': 'array', 'items': {'type': 'object', 'required': ['rule', 'pass', 'actual', 'expected'], 'properties': {'pass': {'type': 'boolean', 'description': 'Whether this individual rule passed.'}, 'rule': {'type': 'string', 'description': 'Policy rule that was evaluated.'}, 'actual': {'description': 'Observed value used by the rule.'}, 'expected': {'description': 'Expected value or condition used by the rule.'}}, 'additionalProperties': False}}, 'receipt': {'type': 'object', 'required': ['proof_id', 'receipt_hash', 'payload'], 'properties': {'payload': {'type': 'object', 'required': ['version', 'observation_id', 'normalized_url', 'original_url', 'final_url', 'observed_at', 'method', 'status', 'content_hash', 'content_length', 'etag', 'last_modified', 'fetch_duration_ms'], 'properties': {'etag': {'type': ['string', 'null']}, 'method': {'type': 'string', 'const': 'GET'}, 'status': {'type': 'integer', 'maximum': 599, 'minimum': 100}, 'version': {'type': 'string', 'const': 'freshproof-receipt-v1'}, 'final_url': {'type': 'string', 'format': 'uri'}, 'observed_at': {'type': 'string', 'description': 'ISO-8601 timestamp of the observation.'}, 'content_hash': {'type': 'string', 'pattern': '^sha256:[a-f0-9]{64}$'}, 'original_url': {'type': 'string', 'format': 'uri'}, 'last_modified': {'type': ['string', 'null']}, 'content_length': {'type': 'integer', 'maximum': 9007199254740991, 'minimum': 0}, 'normalized_url': {'type': 'string', 'format': 'uri'}, 'observation_id': {'type': 'string'}, 'fetch_duration_ms': {'type': 'integer', 'maximum': 9007199254740991, 'minimum': 0}}, 'additionalProperties': False}, 'proof_id': {'type': 'string', 'pattern': '^fp1_[a-f0-9]{64}$', 'description': 'FreshProof proof identifier returned by observe_url or verify_url.'}, 'receipt_hash': {'type': 'string', 'pattern': '^sha256:[a-f0-9]{64}$', 'description': 'SHA-256 content address of the canonical Proof Receipt payload.'}}, 'additionalProperties': False}, 'decision': {'enum': ['PASS', 'FAIL', 'UNKNOWN'], 'type': 'string', 'description': 'Overall policy decision. PASS means every supplied rule passed; FAIL means at least one supplied rule failed; UNKNOWN means a reliable decision could not be made.'}, 'proof_id': {'type': 'string', 'pattern': '^fp1_[a-f0-9]{64}$', 'description': 'FreshProof proof identifier returned by observe_url or verify_url.'}}, 'additionalProperties': False}}, 'additionalProperties': False}
History
Recent tool changes
Changed
verify_url
Oct. 2, 2026, 2:41 a.m.
Changed
verify_proof
Oct. 2, 2026, 2:41 a.m.
Added
verify_url
Sept. 30, 2026, 2:41 a.m.
Added
verify_proof
Sept. 30, 2026, 2:41 a.m.
Added
observe_url
Sept. 24, 2026, 2:40 a.m.
Added
freshproof_info
Sept. 24, 2026, 2:40 a.m.
Discover
Similar MCP servers
osint-terminal
com.thetempleofdoom.osint-mcp/osint-terminal
Provides keyless OSINT and reconnaissance tools for domains, DNS, IPs, breach exposure, threat intelligence, and related lookups.
AIMEAT
io.aimeat/aimeat
Provides a self-hosted agent operating system with agent work delegation, access controls, federation, hooks, SSO, security admin…
hyperion
com.thetempleofdoom.hyperion/hyperion
Acts as a paid MCP tool marketplace and utility gateway with server discovery, HTTP and JavaScript tools, research, data conversi…
Vee3
io.github.Vee3io/vee3
Manages Clerk authentication infrastructure, including users, organizations, domains, sessions, tokens, OAuth, SSO, machines, per…
BorealHost
ai.borealhost/mcp
Provides web hosting and infrastructure management, including site deployment, DNS, domains, containers, compute, backups, cachin…
Proof Holdings
holdings.proof/mcp-server
Provides domain verification, identity and delegation proofs, human approval workflows, trusted-contact challenges, and controlle…
GoCreative Agent API
io.github.ColinHughes2121/gocreative-agent-api
Offers pay-per-call LLM completions and data services for company intelligence, KYB, sanctions screening, threat intelligence, co…
Japan Public Ledgers MCP
com.mcp-revenue-empire/japan-public-ledgers
Provides agent identity, memory, audit, trust, proxy, temporary email, webhook, CAPTCHA, and alerting capabilities alongside publ…