Crovia — verifiable silence (TACET) and Crovia Seal
by croviatrust.com · remote · no sign-in to list tools · v2.0.1 · published by com.croviatrust
Signed, Bitcoin-anchored observations of AI training-data disclosure; verifies silence proofs, seals
8 tools: 3 change things and 5 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things3Claude Code: ask: see these tools
- Only reads5Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http crovia https://croviatrust.com/mcpTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
8 tools
Changes things 3Claude Code: ask
crovia_vs_causariWhich product is which.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Which product is which. Crovia observes training-data disclosure. Causari is the code-provenance tool. No parameters. Use this, not explain and not crovia_status, when the question is the difference between the two. Reads no catalog.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
silence_reportOne published weekly Silence Report, or the latest report index.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it One published weekly Silence Report, or the latest report index. week is an ISO week YYYY-Www, for example 2026-W38. Omit week, or pass an empty string, to receive the latest index rather than one week's facts. A week that is not YYYY-Www is an error. A week with no published file is an error and names the index. This is not the live status and not one model's proof. Reads published files only.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
verify_sealCheck a crovia.seal.v1 object or a wrapped TACET silence proof: signature, canonical bytes, bindings, and per-epoch non-inclusion paths.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Check a crovia.seal.v1 object or a wrapped TACET silence proof: signature, canonical bytes, bindings, and per-epoch non-inclusion paths. Pass seal as a JSON object or a JSON string, or url as an https://croviatrust.com/ address. With neither, the call is an error. Supplying url fetches that URL over the network. check_anchors defaults to false; true also checks the drand round bytes and the Bitcoin anchors over the network. A seal object with check_anchors false or omitted is checked from that object alone. This tool can reach the network, so it is not a closed-world call.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
Only reads 5Claude Code: allow
crovia_statusLive totals at this moment: epochs closed, epochs anchored in Bitcoin, models on the map, snapshot counts, signed silence proofs, and a pointer to the longest verifiable silence.No findings
Why it is in this group
- The name "crovia_status" says "status": a word for reading.
Description, as the server wrote it Live totals at this moment: epochs closed, epochs anchored in Bitcoin, models on the map, snapshot counts, signed silence proofs, and a pointer to the longest verifiable silence. No parameters. This is not a weekly Silence Report, not one model's record, and not a proof bundle. Reads published files only.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
explainThe definition of one Crovia term.No findings
Why it is in this group
- The name "explain" says "explain": a word for reading.
Description, as the server wrote it The definition of one Crovia term. Allowed terms: tacet, silence, lacuna, seal, epoch, pnx, predicate, canon. Omit term, or pass an empty or blank string, to receive every definition. Any other value is an error listing those allowed terms, and it does not return the definitions. Use crovia_vs_causari, not explain, to tell the two products apart.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
get_silence_proofThe published silence proof for one model: silence_days, observed window, epochs, seal id, URL, and how to verify it.No findings
Why it is in this group
- The name "get_silence_proof" says "get": a word for reading.
Description, as the server wrote it The published silence proof for one model: silence_days, observed window, epochs, seal id, URL, and how to verify it. model omitted or empty returns the proof index, not a bundle. include_bundle defaults to false; true attaches the crovia.seal.v1 bundle for that one model and does nothing on the index. This is not the live totals and not the weekly report. Reads published files only.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
lookup_modelOne model's observation: latest verdict, negative snapshots, anchored epochs, silence proof pointer, archive silence, badge and record URL.No findings
Why it is in this group
- The name "lookup_model" says "lookup": a word for reading.
Description, as the server wrote it One model's observation: latest verdict, negative snapshots, anchored epochs, silence proof pointer, archive silence, badge and record URL. Required model is a Hugging Face id, org/name, for example Qwen/Qwen3-32B. An empty model is an error. An exact id is used; otherwise one case-insensitive substring match is accepted, and several matches return candidates instead of a verdict. This is not a catalog page, not the weekly report, and not the seal bytes. Reads published files only.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
search_modelsA page of observed model ids whose id contains query, compared case-insensitively, in catalog order, not a ranking.No findings
Why it is in this group
- The name "search_models" says "search": a word for reading.
Description, as the server wrote it A page of observed model ids whose id contains query, compared case-insensitively, in catalog order, not a ranking. query omitted or empty matches the whole catalog and still returns at most limit rows. limit follows the historical rule: a missing, empty, zero or other falsy value is 25; any value int() accepts is then clamped into 1..100 (500 becomes 100, a negative becomes 1); a value int() cannot parse is an error and nothing is searched. returned and its compatibility alias count are the rows in this page. matched is how many ids match before the limit. catalog_total and its compatibility alias total_records are every record in the catalog, matching or not. limit is the limit actually applied. count is not the match count, and total_records is not the match count. This is not a verdict and not a proof. Reads published files only.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 2.0.1. Values in angle brackets are yours to fill in.
claude mcp add --transport http crovia https://croviatrust.com/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__crovia__crovia_status",
"mcp__crovia__lookup_model",
"mcp__crovia__search_models",
"mcp__crovia__get_silence_proof",
"mcp__crovia__explain"
],
"ask": [
"mcp__crovia__verify_seal",
"mcp__crovia__silence_report",
"mcp__crovia__crovia_vs_causari"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as crovia. Review it before you use it.