Skip to content

ai.aqta/seal

by aqta.ai · remote · no sign-in to list tools · v1.0.0 · published by ai.aqta

Verify Seal AI decision receipts: signed evidence anyone can check, no account needed.

Changes · 3
CompareRegistry entry

10 tools: 3 change things and 7 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http seal https://app.aqta.ai/api/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

10 tools

Changes things 3Claude Code: ask
  • verify_evidence_packVerify a review pack receipt by receipt.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Verify a review pack receipt by receipt. Each verdict comes from the signed envelope itself, never from stored state, and results are per-receipt, never an average.

    Annotations the server declares

    • title: Verify a whole evidence pack
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • verify_receiptCheck that a record still says what was signed: the permitted or refused decision, unchanged, under Seal's published issuer keys or a key you supply.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Check that a record still says what was signed: the permitted or refused decision, unchanged, under Seal's published issuer keys or a key you supply. Handles both formats: ATTESTATION-v1 (a model-call decision) and ACTION-v1 (an agent tool action). No Aqta service in the check.

    Annotations the server declares

    • title: Verify a receipt
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • workspace_summaryOutcome, model and policy counts across your recent receipts.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Outcome, model and policy counts across your recent receipts. Requires your aqta_ key.

    Annotations the server declares

    • title: Summarise your workspace decisions
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
Only reads 7Claude Code: allow
  • decode_receiptRead a receipt field by field, with stated limits.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read a receipt field by field, with stated limits. Does not check the signature.

    Annotations the server declares

    • title: Read a receipt
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • explain_attestation_formatThe receipt format: fields, outcomes, verification commands, and what a signature does not establish.No findings

    Why it is in this group

    • The name "explain_attestation_format" says "explain": a word for reading.
    Description, as the server wrote it
    The receipt format: fields, outcomes, verification commands, and what a signature does not establish. Use before describing the format.

    Annotations the server declares

    • title: Explain the receipt format
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_public_keyFetch the published Seal signing key.No findings

    Why it is in this group

    • The name "get_public_key" says "get": a word for reading.
    Description, as the server wrote it
    Fetch the published Seal signing key.

    Annotations the server declares

    • title: Get the published signing key
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • get_review_packThe published sample evidence pack: fixed review question, bound receipts, disclosure.No findings

    Why it is in this group

    • The name "get_review_pack" says "get": a word for reading.
    Description, as the server wrote it
    The published sample evidence pack: fixed review question, bound receipts, disclosure.

    Annotations the server declares

    • title: Get an evidence pack
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_sample_receiptA genuine signed receipt from the sample workspace (demo key), for trying verification.No findings

    Why it is in this group

    • The name "get_sample_receipt" says "get": a word for reading.
    Description, as the server wrote it
    A genuine signed receipt from the sample workspace (demo key), for trying verification.

    Annotations the server declares

    • title: Get a sample receipt
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_transparency_proofInclusion proof plus signed tree head for one of your receipts.No findings

    Why it is in this group

    • The name "get_transparency_proof" says "get": a word for reading.
    Description, as the server wrote it
    Inclusion proof plus signed tree head for one of your receipts. Requires your aqta_ key.

    Annotations the server declares

    • title: Prove a receipt is in the log
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • list_my_receiptsList your workspace receipts filtered by outcome, policy, model, or date range.No findings

    Why it is in this group

    • The name "list_my_receipts" says "list": a word for reading.
    Description, as the server wrote it
    List your workspace receipts filtered by outcome, policy, model, or date range. Requires your aqta_ key as Bearer.

    Annotations the server declares

    • title: List your signed receipts
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http seal https://app.aqta.ai/api/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__seal__decode_receipt",
      "mcp__seal__get_public_key",
      "mcp__seal__get_sample_receipt",
      "mcp__seal__get_review_pack",
      "mcp__seal__explain_attestation_format",
      "mcp__seal__list_my_receipts",
      "mcp__seal__get_transparency_proof"
    ],
    "ask": [
      "mcp__seal__verify_receipt",
      "mcp__seal__verify_evidence_pack",
      "mcp__seal__workspace_summary"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as seal. Review it before you use it.