AIエージェントのための、TONブロックチェーン上のゼロ認証暗号公証・エビデンスレイヤー。
🌐 プロトコルウェブサイト • 📖 OpenAPI仕様 • 📱 Telegram Bot
これは、ProofCore Protocol 向けの公式 Model Context Protocol (MCP) サーバーです。
AIアシスタント（Claude、Cursor、Windsurfなど）が、自身の出力（コード監査、法的契約書、サーバーログ）を能動的に暗号学的にシールし、The Open Network (TON)ブロックチェーンに直接記録できるようにします。
このサーバーを使用することで、AIエージェントは、自身の出力が特定のタイムスタンプに存在しており、事後に改ざんされたり捏造されたりしていないことを数学的に証明できます。
Related MCP server: DocImprint
seal_content(content: str, title: str)
指定されたテキストをSHA-256でハッシュ化し、TONブロックチェーン上のMerkleツリーバッチ処理にキューイングします。不変の引用バッジとEd25519署名を返します。
get_proof_status(deal_id: str)
以前にシールされた取引の暗号マニフェスト、Merkleパス、TONトランザクションハッシュを取得します。
verify_content(deal_id: str, content: str)
エージェント間検証： シールされた取引をプログラムで検証します。コンテンツハッシュを再計算し、Ed25519公証人の署名を確認し、TONアンカーの状態を確認します。
get_public_key()
オフライン署名検証用に、ProofCoreサーバーのEd25519公開鍵を返します。
ProofCoreの使用にAPIキーは必要ありません。厳格なゼロ認証（Zero-Auth）メカニズムで動作します。
以下を claude_desktop_config.json に追加してください：
{
"mcpServers": {
"proofcore": {
"command": "uvx",
"args": ["proofcore-mcp"]
}
}
}Cursor Settings -> Features -> MCP を開く
+ Add new MCP Server をクリック
タイプ command を選択
名前：proofcore
コマンド：uvx proofcore-mcp
AIに次のように頼むだけです：
「このSolidityコントラクトを監査し、最終判定をオンチェーンで暗号学的にシールしてください。」
「AliceとBobの間のNDA（秘密保持契約）を作成し、ProofCoreで公証してください。」
「取引 UUID のブロックチェーン上のステータスは？」
(新機能) M2M検証： 「ここにレポートと取引ID UUID があります。ProofCoreを使用して、その真正性と署名を検証してください。」
AIが自動的にツールを呼び出し、ドキュメントをアンカー/検証し、検証リンクを提供します！
ProofCoreは次の哲学に基づいて構築されています：「公証人を信頼するな。証明は自分で検証せよ。」
シールされたすべてのドキュメントは、引用リンク（例：https://proofcore.org/app/<UUID>）を返します。
誰でもこのリンクにアクセスして、暗号学的な3者一致を独立して検証できます：
Local SHA-256 Hash == Manifest Merkle Path == TON Blockchain Transaction Payload
さらに、証明は100%自律的です。 ユーザーは、元のアセット、JSONマニフェスト、およびスタンドアロンのPython/HTML検証スクリプトを含む**オフライン証拠パッケージ（ZIP）**をダウンロードできます。万一ProofCoreサーバーがオフラインになっても、暗号証明はTONブロックチェーンに対して直接、数学的に検証可能なままです。
「ProofCoreを信頼するな。証明は自分で検証せよ。」
MITライセンスの下で配布されています。
Fetches cryptographic manifest and TON transaction status.
| Name | Required | Description | Default |
|---|---|---|---|
| deal_id | Yes |
| Name | Required | Description |
|---|---|---|
| result | Yes |
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It mentions 'fetches', implying a read operation, but offers no details on side effects, permissions, idempotency, or error behavior. It does not disclose whether the operation is safe or what it might affect. The presence of an output schema partially mitigates return-format expectations but not behavioral traits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence with no redundant wording. It front-loads the action and resource. However, it is so minimal that it misses critical context; nevertheless, its structure is concise and free of filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple one-parameter tool with an output schema, the description is still incomplete. It lacks any explanation of the parameter, does not characterize the expected output semantically, and provides no usage context. The agent is left without essential information to invoke the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must explain the parameter. It fails to mention deal_id, its purpose, format, or how it relates to the cryptographic manifest and TON transaction status. An agent cannot infer what value to supply without external knowledge.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it fetches cryptographic manifest and TON transaction status, using a specific verb and resource. It does not explicitly distinguish from siblings, though the operations are inherently different (seal, verify, get public key vs. status). Thus it meets the 'specific verb+resource' but falls short of explicit sibling differentiation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives like seal_content or verify_content. There is no mention of prerequisites, intended context, or conditions for use. The description only states the act, leaving usage entirely to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Returns the ProofCore server's Ed25519 public key.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
| Name | Required | Description |
|---|---|---|
| result | Yes |
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, so the description carries the full burden. It states the action but does not disclose side effects, authentication needs, or error behaviors. For a simple public key retrieval, this is minimal but not misleading.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single, front-loaded sentence with no redundant wording. Perfectly concise.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the existence of an output schema and the absence of parameters, the description fully covers what an agent needs to call the tool correctly. No missing contextual information.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool accepts zero parameters, so the schema fully documents the input. Per the rubric, a baseline of 4 applies for parameterless tools, and the description adds no unnecessary detail.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb ('Returns') and the specific resource ('ProofCore server's Ed25519 public key'). It distinguishes itself from siblings which handle sealing, status, and verification.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit when-to-use guidance or mention of alternatives is provided. The usage is implied by the tool's name and nature, but the description does not tell the agent under what circumstances it should be invoked versus the siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Cryptographically seals text/code/audits onto the TON Blockchain.
| Name | Required | Description | Default |
|---|---|---|---|
| title | No | AI Audit Report | |
| content | Yes | ||
| agent_id | No | mcp-agent |
| Name | Required | Description |
|---|---|---|
| result | Yes |
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden of behavioral disclosure. It implies a permanent, cryptographic action but does not mention prerequisites (e.g., private key, network availability), potential side effects, reversibility, or failure modes. This is a significant gap for a blockchain-mutating tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, concise sentence that front-loads the core action with no fluff. It is well-structured for readability, though it sacrifices necessary detail for brevity, making it slightly under-specified.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool that seals content onto a blockchain, this description is notably incomplete. It lacks explanation of expected inputs beyond a vague hint, does not describe what happens after sealing (e.g., proof generation), and omits operational context. The presence of an output schema mitigates the need to describe return values, but the description still fails to cover essential behavioral and parameter context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It hints at 'text/code/audits' which maps to the content parameter, but it does not clarify the purpose or meaning of title and agent_id, nor their defaults. This leaves agents without sufficient understanding of all inputs.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action (seals) on a specific resource (text/code/audits onto the TON Blockchain). It clearly differentiates from siblings like get_proof_status, verify_content, and get_public_key by indicating a write operation. However, 'seals' is somewhat metaphorical and could be more precise about the exact operation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance on when to use this tool instead of its siblings or when not to use it. The description merely states what it does without any context for selection, leaving the agent to infer usage solely from the purpose.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Programmatically verify a sealed deal (Agent-to-Agent). Checks hash match and Ed25519 signature.
| Name | Required | Description | Default |
|---|---|---|---|
| content | Yes | ||
| deal_id | Yes |
| Name | Required | Description |
|---|---|---|
| result | Yes |
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It transparently discloses the core behavioral mechanism: hash match and Ed25519 signature verification. It does not cover failure behavior or side effects, but the output schema likely handles return details.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two short, front-loaded sentences with no filler. The first sentence states the action, and the second provides the key verification details.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple two-parameter tool with an output schema, the description covers the core purpose and mechanism. However, it lacks explicit parameter meanings and usage context, leaving noticeable gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description does not explain deal_id or content beyond their self-evident names. The description does not compensate for the missing parameter documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('verify'), identifies the resource ('a sealed deal'), and states the exact mechanism ('Checks hash match and Ed25519 signature'). This clearly distinguishes it from sibling tools such as seal_content and get_proof_status.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'verify a sealed deal' implies the use case, and 'Agent-to-Agent' adds context. However, it does not explicitly state when to use this tool versus alternatives or mention any exclusions or prerequisites.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
get_public_keyverify_contentv0.1.1get_proof_statusseal_contentEach tool has a clearly distinct purpose: sealing, status checking, verification, and key retrieval. No two tools overlap in functionality, making tool selection unambiguous.
All tools follow a consistent verb_noun pattern (seal_content, get_proof_status, verify_content, get_public_key). The naming is predictable and uniform across the set.
With only 4 tools, the server is tightly focused on its core purpose of sealing and verifying content. Each tool is essential and contributes to a complete workflow without redundancy.
The tool surface covers the full lifecycle: sealing content, checking its status, verifying, and obtaining the public key for verification. No obvious gaps exist for the stated domain.
Privacy-first document verification anchored to the public ledger.
Prove your AI work existed first: timestamped, Bitcoin-anchored. Free, no account.
AI document intelligence: extract, summarize, claim-check, notarize, and signed action receipts.
Timestamp & verify evidence on-chain, free. Proofpack: a portable BEEF+BUMP proof bundle per txid.
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/ProofCore-Protocol/proofcore-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server
