Purpose
verify-mcp is an MCP (Model Context Protocol) server used for offline verification of signed artifacts. It targets artifacts from ScopeBlind and Veritas Acta, including receipts, manifests, and audit bundles. The tool's design goal is very clear: it only does verification, nothing else. It does not act as a gateway, builder, or hosted verification service; instead, it focuses on the MCP interface for the verification channel.
Main capabilities
According to official materials, verify-mcp provides the following capabilities:
- Verify a single signed receipt or artifact.
- Offline verification of audit bundles.
- Interpret signed artifacts in canonical form, returning a canonical summary of information such as issued_at / timestamp.
- Run packaged self-checks so that clients can prove the verifier is working correctly. The self-checks include: sample receipt valid/invalid, sample audit bundle valid/invalid, and the total number of receipts in the sample audit bundle.
Usage
verify-mcp runs as an MCP server and can be used with Claude Desktop or other MCP clients. Verification operations accept artifact_json or a path, as well as an optional public_key_hex, and return a valid / invalid result. Audit bundle verification accepts bundle_json or a path. Interpretation operations return a canonical summary. The server does not contact any ScopeBlind server and only verifies local JSON artifacts.
Applicable scenarios
It is suitable for scenarios that require offline verification of signed receipts, manifests, or audit bundles in local JSON format, such as auditing, compliance checks, or development debugging. It is suitable for integration with MCP clients to complete verification work in a local environment.
Limitations
The tool's functionality is deliberately kept narrow, verifying only local JSON artifacts, and it does not provide gateway, build, or hosted verification services. It does not contact any ScopeBlind server. Other related tools (such as protect-mcp, @scopeblind/passport, @scopeblind/red-team) respectively take on the roles of local policy gateway, local package builder, and local benchmark runner, and verify-mcp does not replace these functions. Regarding installation commands, specific configuration details, supported platforms, or pricing information, the materials do not currently mentionthem.
