APEX PSI MCP Server
Enables anchoring cryptographic receipts to the Bitcoin blockchain using OpenTimestamps, providing verifiable timestamping and proof of existence.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@APEX PSI MCP ServerSeal this document and generate a receipt"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
APEX PSI MCP Server
Cryptographic truth infrastructure for AI agents.
One config line gives any MCP-capable AI agent (Claude, Cursor, Qoder, Cline, Windsurf, and more) five provenance tools: seal, verify, anchor, cite, audit.
Tools
Tool | Description |
seal | Stamp a cryptographic receipt on content (SHA-256 + Ed25519) |
verify | Verify a receipt is authentic |
anchor | Anchor a receipt to Bitcoin via OpenTimestamps |
cite | Generate a citation for a receipt (APA, BibTeX, MLA) |
audit | Audit a chain of receipts for integrity |
Related MCP server: Cryptair MCP Server
Installation
Add to your MCP client config:
{
"mcpServers": {
"apex-psi": {
"command": "npx",
"args": ["-y", "apex-psi-mcp"]
}
}
}Or install locally:
npm install apex-psi-mcpConfiguration
Environment variables (optional):
APEX_API_BASE— API endpoint (default:https://apex-infrastructure.com/api)APEX_API_KEY— API key for authenticated access
Usage
Once installed, your AI agent can:
Seal content — "Seal this document with APEX PSI"
Verify receipts — "Verify this receipt is authentic"
Anchor to Bitcoin — "Anchor this receipt to the Bitcoin blockchain"
Generate citations — "Cite this receipt in APA format"
Audit chains — "Audit this chain of receipts"
Every receipt carries a verify link to https://apex-infrastructure.com/verify — sealed arithmetic, public provenance.
Links
Website: https://apex-infrastructure.com
Public Verifier: https://apex-infrastructure.com/verify
License
MIT
Available Tools
5 toolsanchorAnchor to BitcoinA
Request a Bitcoin anchor of pending ledger Merkle roots via OpenTimestamps. Aggregates unanchored roots and submits them to OTS calendars.
| Name | Required | Description | Default |
|---|---|---|---|
| action | No | 'anchor' submits pending roots; 'status' checks anchor state (default: anchor) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It discloses that it aggregates unanchored roots and submits to OTS calendars, which gives some behavioral context, but it does not mention side effects, reversibility, or result outcomes. No contradictions with annotations (none present).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two concise sentences that front-load the main purpose and process. No filler words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with one optional parameter and no output schema, the description explains the core action but omits the 'status' action (available in schema) and does not describe what is returned after submission. The absence of annotations and output schema means more was expected.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the only parameter 'action' is fully described in the schema with enum values and a default. The description adds no additional parameter detail beyond the schema, so baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses specific verbs ('Request', 'Aggregates', 'submits') and clearly identifies the resource (Bitcoin anchor of pending ledger Merkle roots via OpenTimestamps). It distinguishes from sibling tools like audit, seal, verify by describing a distinct anchoring process.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage (when you want to anchor roots) but does not explicitly state when to use it over alternatives, nor does it mention exclusions. It doesn't reference the 'status' action available in the schema, providing only partial guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
auditAudit receipt chainA
Audit a chain of receipts against the APEX PSI ledger. Checks each hash's presence and integrity, and reports Merkle chain continuity.
| Name | Required | Description | Default |
|---|---|---|---|
| receipts | Yes | Array of receipt objects to audit (in order) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must carry the behavioral disclosure burden. It does disclose the main checks performed (presence, integrity, Merkle continuity), which is helpful. However, it does not mention whether the operation is read-only, how errors or failures are reported, or what the output format looks like, leaving notable gaps for a tool with no annotation support.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description consists of two concise sentences that front-load the main purpose and then add relevant behavioral detail. Every sentence contributes meaningful information, with no redundancy or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With one parameter, no output schema, and no annotations, the description gives a good overview but lacks critical information about the return value or how audit results are reported. It says 'reports Merkle chain continuity' but does not specify the structure or success/failure semantics, making it incomplete for a tool that produces a non-obvious report.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already provides 100% coverage for the single 'receipts' parameter, including that it is an array of receipt objects in order. The description adds context about the audit being a chain and checking hashes, but does not provide additional parameter-level details beyond what the schema already states, so the baseline of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function with a specific verb ('Audit') and resource ('chain of receipts against the APEX PSI ledger'), and elaborates on the scope by mentioning hash presence, integrity, and Merkle chain continuity. This distinguishes it from sibling tools like 'verify' and 'seal' by focusing on a multi-receipt chain audit rather than single operations.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies when to use the tool (auditing receipt chains against the ledger) but does not explicitly state when to prefer it over alternatives like 'verify' or 'seal'. It lacks explicit exclusions or alternative tool references, so usage guidance is only implied through the described purpose.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
citeGenerate citationA
Generate a citation for a sealed receipt in APA, BibTeX, or MLA format, citing the APEX PSI ledger entry.
| Name | Required | Description | Default |
|---|---|---|---|
| format | No | Citation format (default: apa) | |
| receipt | Yes | A receipt object as returned by the seal tool |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must convey behavior. It explains the output action (generating a citation) and the source (ledger entry), but does not disclose whether the operation is read-only, has side effects, or what happens with invalid input. This leaves some ambiguity around the tool's behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, 17-word sentence that gets straight to the point. Nothing is redundant; every clause contributes meaning.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with no annotations and no output schema, the description covers the core purpose, input requirements, and allowed formats. It does not explicitly state the return value, but the title 'Generate citation' and the phrase 'Generate a citation' imply the output. This is adequate for a relatively simple tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema fully describes both parameters (format with an enum and default, and receipt as an object from the seal tool). The description adds no additional detail beyond the schema, so it meets the baseline but doesn't enhance parameter understanding.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: generating a citation for a sealed receipt in specific formats (APA, BibTeX, MLA) and mentions the APEX PSI ledger entry. This distinguishes it from sibling tools like audit, seal, verify, and anchor, none of which are citation-related.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description defines the use case: it is for sealed receipts, which implies the user must have a sealed receipt (likely from the seal tool). It does not explicitly compare to alternatives or state when not to use it, but the context is clear enough for the listed siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sealSeal contentA
Stamp a cryptographic receipt on content. Writes to the APEX PSI immutable ledger with SHA-256 hash, Ed25519 signature, and post-quantum LMS-W4-SHA256 signature.
| Name | Required | Description | Default |
|---|---|---|---|
| content | Yes | The content to seal (text, up to 10000 characters) | |
| context | No | Optional context label (e.g. document name, case ID) | |
| model_id | No | Optional model/agent identifier producing the seal | |
| predicate | No | Optional predicate describing why this is sealed |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses key behavioral traits: it writes to an immutable ledger, uses SHA-256, Ed25519, and LMS-W4-SHA256 signatures. Since no annotations are provided, this context is essential for the agent to understand that this is a write operation with permanent effects. However, it does not mention output format or failure modes, which keeps it from a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with the primary action. It efficiently describes the tool without redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is a write operation with no output schema, but the description does not explain what the API returns (e.g., a receipt ID or hash). This is a gap for agent invocation. The description covers the core behavior but is incomplete regarding expected outcomes.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema provides descriptions for all four parameters, so with 100% schema coverage the description adds no additional parameter-level meaning. The baseline of 3 is appropriate as the schema carries the full burden.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb 'Stamp' and specifies the resource 'content', and it clearly differentiates from sibling tools (audit, verify, anchor, cite) by describing the cryptographic receipt and immutable ledger write. This is a specific action with clear scope.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the use case (creating a cryptographic receipt) but does not explicitly state when to use this tool versus alternatives like verify or anchor. There is no mention of exclusions or when not to use it, so the usage is implied rather than explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
verifyVerify receiptA
Verify a seal against the APEX PSI immutable ledger. Accepts a receipt object (from the seal tool) or a raw SHA-256 hash.
| Name | Required | Description | Default |
|---|---|---|---|
| hash | No | A SHA-256 hash to look up in the ledger (with or without 'sha256:' prefix) | |
| receipt | No | A receipt object as returned by the seal tool |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It discloses the input types but not whether the operation is read-only, what the result means (e.g., found/not found), error behavior, or side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loads the core action and ledger context, and avoids redundant detail or fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Input-side context is well covered by the description and schema, but the absence of an output schema means the agent still does not know what a successful verification returns (boolean, record, proof). The description is adequate for a simple tool but has a notable gap around outcomes.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already documents both parameters at 100% coverage; the description adds the 'or' relationship and clarifies that one of the two inputs is expected, plus the connection to the seal tool's output. This is a modest but useful enrichment.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Verify') against a named resource (seal/APEX PSI immutable ledger) and identifies the counterpart to the seal tool. This clearly differentiates it from siblings like seal, audit, and cite.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It establishes when to use the tool: after sealing, with either a receipt from the seal tool or a raw hash. It does not explicitly name alternatives or exclusions, but the context is clear enough for an agent.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
5 tool updates
v1.0.0- First observed
anchor - First observed
audit - First observed
cite - First observed
seal - First observed
verify
TDQS
Each tool has a clearly distinct purpose: seal creates a receipt, verify checks a receipt, audit checks chain integrity, anchor handles Bitcoin anchoring, and cite formats citations. There is no overlap or ambiguity between any of the tools.
All tool names are single lowercase verbs (audit, seal, verify, anchor, cite) following a consistent pattern. This naming is uniform and predictable, making it easy for an agent to understand the action each tool performs.
Five tools is an appropriate number for this focused domain. Each tool covers a necessary operation without redundancy, and the scope is neither too thin nor too heavy.
The tool set covers the full lifecycle of a sealed receipt: creating (seal), verifying (verify), auditing (audit), anchoring to Bitcoin (anchor), and citing (cite). Since the ledger is immutable, update/delete operations are not expected, and no obvious gaps exist.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Issue & verify signed (ed25519), hash-chained, timestamped provenance receipts for agent actions.
Bitcoin-anchored, tamper-evident audit-permanence layer for AI agents, FRE 902(13)/(14)-shaped.
Tamper-evident proof creation and verification for AI agents via MCP, A2A, and REST.
Issue signed receipts for AI agent actions; verify any receipt offline - free, no account.
Related MCP Servers
- AlicenseAqualityAmaintenanceStamp, upgrade, and verify Bitcoin timestamps via AI agents using the OpenTimestamps protocol. No API keys required.81231MIT
- AlicenseAqualityDmaintenanceEnables AI agents to certify documents, prove agreements, and verify counterparty claims with on-chain receipts on Hedera Hashgraph. Provides tools for document certification, two-party attestation, and agent registration with zero-config setup.667MIT
- AlicenseAqualityDmaintenanceEnables AI agents to certify their creations with verifiable, timestamped proof anchored to Bitcoin, and to verify certificates.3MIT
- AlicenseAqualityAmaintenanceProvides tools to issue, verify, and export cryptographically signed receipts for AI agent actions, enabling tamper-proof audit trails for compliance with regulations like the EU AI Act.4641MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/kawal393/apex-psi-mcp-server'
If you have feedback or need assistance with the MCP directory API, please join our Discord server