proofcore-mcp
Official🛡️ ProofCore MCP Server
Криптографическая нотаризация Zero-Auth и слой доказательств на TON Blockchain для ИИ-агентов.
🌐 Веб-сайт протокола • 📖 Спецификация OpenAPI • 📱 Telegram-бот
⚡ Что это такое?
Это официальный сервер Model Context Protocol (MCP) для ProofCore Protocol.
Он позволяет ИИ-ассистентам (таким как Claude, Cursor и Windsurf) проактивно криптографически опечатывать свои результаты (аудиты кода, юридические соглашения, серверные логи) непосредственно в The Open Network (TON) Blockchain.
С помощью этого сервера ваш ИИ-агент может математически доказать, что его результат существовал в определённый момент времени и не был изменён или выдуман задним числом.
Related MCP server: DocImprint
🛠 Доступные инструменты
seal_content(content: str, title: str)Хеширует предоставленный текст с помощью SHA-256 и ставит его в очередь для пакетной обработки в дереве Меркла на TON Blockchain. Возвращает неизменяемый бейдж цитирования и подпись Ed25519.get_proof_status(deal_id: str)Получает криптографический манифест, путь Меркла и хеш транзакции TON для ранее опечатанной сделки.verify_content(deal_id: str, content: str)Проверка «агент-агент»: программно проверяет опечатанную сделку. Пересчитывает хеш содержимого, проверяет нотариальную подпись Ed25519 и подтверждает статус TON-якоря.get_public_key()Возвращает открытый ключ Ed25519 сервера ProofCore для офлайн-проверки подписи.
🚀 Установка и использование
Вам не нужен API-ключ для использования ProofCore. Он работает по строгому механизму Zero-Auth.
Claude Desktop
Добавьте следующее в ваш claude_desktop_config.json:
{
"mcpServers": {
"proofcore": {
"command": "uvx",
"args": ["proofcore-mcp"]
}
}
}Cursor IDE
Откройте Cursor Settings -> Features -> MCP
Нажмите + Add new MCP Server
Выберите тип
commandИмя:
proofcoreКоманда:
uvx proofcore-mcp
💬 Как использовать в чате
Просто спросите вашего ИИ:
"Проверь этот контракт Solidity и криптографически опечатай окончательный вердикт в блокчейне."
"Составь NDA между Алисой и Бобом, затем нотариально заверь его через ProofCore."
"Каков статус сделки
UUIDв блокчейне?"(Новое) M2M-верификация: "Вот отчёт и ID сделки
UUID. Проверь его подлинность и подпись с помощью ProofCore."
ИИ автоматически вызовет инструмент, закрепит/проверит документ и предоставит вам ссылку для проверки!
🔍 Независимая и автономная верификация (без привязки к вендору)
ProofCore построен на философии: «Не доверяйте нотариусу. Проверяйте доказательство самостоятельно.»
Каждый опечатанный документ возвращает ссылку для цитирования (например, https://proofcore.org/app/<UUID>).
Любой желающий может перейти по этой ссылке и независимо проверить криптографическое тройное соответствие:
Local SHA-256 Hash == Manifest Merkle Path == TON Blockchain Transaction Payload
Более того, доказательства на 100% автономны. Пользователи могут загрузить Offline Evidence Package (ZIP), содержащий исходные активы, JSON-манифесты и автономные Python/HTML-скрипты для проверки. Если серверы ProofCore когда-либо станут недоступны, ваши криптографические доказательства останутся математически проверяемыми напрямую против TON Blockchain.
«Не доверяйте ProofCore. Проверяйте доказательство самостоятельно.»
📜 Лицензия
Распространяется под лицензией MIT License.
Available Tools
4 toolsget_proof_statusC
Fetches cryptographic manifest and TON transaction status.
| Name | Required | Description | Default |
|---|---|---|---|
| deal_id | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It mentions 'fetches', implying a read operation, but offers no details on side effects, permissions, idempotency, or error behavior. It does not disclose whether the operation is safe or what it might affect. The presence of an output schema partially mitigates return-format expectations but not behavioral traits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence with no redundant wording. It front-loads the action and resource. However, it is so minimal that it misses critical context; nevertheless, its structure is concise and free of filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple one-parameter tool with an output schema, the description is still incomplete. It lacks any explanation of the parameter, does not characterize the expected output semantically, and provides no usage context. The agent is left without essential information to invoke the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must explain the parameter. It fails to mention deal_id, its purpose, format, or how it relates to the cryptographic manifest and TON transaction status. An agent cannot infer what value to supply without external knowledge.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it fetches cryptographic manifest and TON transaction status, using a specific verb and resource. It does not explicitly distinguish from siblings, though the operations are inherently different (seal, verify, get public key vs. status). Thus it meets the 'specific verb+resource' but falls short of explicit sibling differentiation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives like seal_content or verify_content. There is no mention of prerequisites, intended context, or conditions for use. The description only states the act, leaving usage entirely to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_public_keyA
Returns the ProofCore server's Ed25519 public key.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, so the description carries the full burden. It states the action but does not disclose side effects, authentication needs, or error behaviors. For a simple public key retrieval, this is minimal but not misleading.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single, front-loaded sentence with no redundant wording. Perfectly concise.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the existence of an output schema and the absence of parameters, the description fully covers what an agent needs to call the tool correctly. No missing contextual information.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool accepts zero parameters, so the schema fully documents the input. Per the rubric, a baseline of 4 applies for parameterless tools, and the description adds no unnecessary detail.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb ('Returns') and the specific resource ('ProofCore server's Ed25519 public key'). It distinguishes itself from siblings which handle sealing, status, and verification.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit when-to-use guidance or mention of alternatives is provided. The usage is implied by the tool's name and nature, but the description does not tell the agent under what circumstances it should be invoked versus the siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
seal_contentC
Cryptographically seals text/code/audits onto the TON Blockchain.
| Name | Required | Description | Default |
|---|---|---|---|
| title | No | AI Audit Report | |
| content | Yes | ||
| agent_id | No | mcp-agent |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden of behavioral disclosure. It implies a permanent, cryptographic action but does not mention prerequisites (e.g., private key, network availability), potential side effects, reversibility, or failure modes. This is a significant gap for a blockchain-mutating tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, concise sentence that front-loads the core action with no fluff. It is well-structured for readability, though it sacrifices necessary detail for brevity, making it slightly under-specified.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool that seals content onto a blockchain, this description is notably incomplete. It lacks explanation of expected inputs beyond a vague hint, does not describe what happens after sealing (e.g., proof generation), and omits operational context. The presence of an output schema mitigates the need to describe return values, but the description still fails to cover essential behavioral and parameter context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It hints at 'text/code/audits' which maps to the content parameter, but it does not clarify the purpose or meaning of title and agent_id, nor their defaults. This leaves agents without sufficient understanding of all inputs.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action (seals) on a specific resource (text/code/audits onto the TON Blockchain). It clearly differentiates from siblings like get_proof_status, verify_content, and get_public_key by indicating a write operation. However, 'seals' is somewhat metaphorical and could be more precise about the exact operation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance on when to use this tool instead of its siblings or when not to use it. The description merely states what it does without any context for selection, leaving the agent to infer usage solely from the purpose.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
verify_contentA
Programmatically verify a sealed deal (Agent-to-Agent). Checks hash match and Ed25519 signature.
| Name | Required | Description | Default |
|---|---|---|---|
| content | Yes | ||
| deal_id | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It transparently discloses the core behavioral mechanism: hash match and Ed25519 signature verification. It does not cover failure behavior or side effects, but the output schema likely handles return details.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two short, front-loaded sentences with no filler. The first sentence states the action, and the second provides the key verification details.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple two-parameter tool with an output schema, the description covers the core purpose and mechanism. However, it lacks explicit parameter meanings and usage context, leaving noticeable gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description does not explain deal_id or content beyond their self-evident names. The description does not compensate for the missing parameter documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('verify'), identifies the resource ('a sealed deal'), and states the exact mechanism ('Checks hash match and Ed25519 signature'). This clearly distinguishes it from sibling tools such as seal_content and get_proof_status.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'verify a sealed deal' implies the use case, and 'Agent-to-Agent' adds context. However, it does not explicitly state when to use this tool versus alternatives or mention any exclusions or prerequisites.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
2 tool updates
- Added
get_public_key - Added
verify_content
2 tool updates
v0.1.1- First observed
get_proof_status - First observed
seal_content
TDQS
Each tool has a clearly distinct purpose: sealing, status checking, verification, and key retrieval. No two tools overlap in functionality, making tool selection unambiguous.
All tools follow a consistent verb_noun pattern (seal_content, get_proof_status, verify_content, get_public_key). The naming is predictable and uniform across the set.
With only 4 tools, the server is tightly focused on its core purpose of sealing and verifying content. Each tool is essential and contributes to a complete workflow without redundancy.
The tool surface covers the full lifecycle: sealing content, checking its status, verifying, and obtaining the public key for verification. No obvious gaps exist for the stated domain.
Maintenance
Related MCP Connectors
Privacy-first document verification anchored to the public ledger.
Prove your AI work existed first: timestamped, Bitcoin-anchored. Free, no account.
AI document intelligence: extract, summarize, claim-check, notarize, and signed action receipts.
Timestamp & verify evidence on-chain, free. Proofpack: a portable BEEF+BUMP proof bundle per txid.
Related MCP Servers
- AlicenseAqualityDmaintenanceEnables AI agents to certify documents, prove agreements, and verify counterparty claims with on-chain receipts on Hedera Hashgraph. Provides tools for document certification, two-party attestation, and agent registration with zero-config setup.667MIT
- FlicenseNot gradedqualityAmaintenanceVerifiable document intelligence for AI agents. Extract, summarize, claim-check, and notarize PDFs & URLs with cryptographic proofs, cross-document search, and on-chain attestation via Base L2.-
- AlicenseAqualityAmaintenanceCryptographic receipts for AI outputs — signed, chain-anchored, $0.001/call6252MIT
- AlicenseAqualityDmaintenanceEnables AI agents to certify their creations with verifiable, timestamped proof anchored to Bitcoin, and to verify certificates.3MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/ProofCore-Protocol/proofcore-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server