Skip to content

Crovia — verifiable silence (TACET) and Crovia Seal

by croviatrust.com · remote · no sign-in to list tools · v2.0.1 · published by com.croviatrust

Signed, Bitcoin-anchored observations of AI training-data disclosure; verifies silence proofs, seals

Changes · 3

8 tools: 3 change things and 5 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http crovia https://croviatrust.com/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

8 tools

Changes things 3Claude Code: ask
  • crovia_vs_causariWhich product is which.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Which product is which. Crovia observes training-data disclosure. Causari is the code-provenance tool. No parameters. Use this, not explain and not crovia_status, when the question is the difference between the two. Reads no catalog.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • silence_reportOne published weekly Silence Report, or the latest report index.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    One published weekly Silence Report, or the latest report index. week is an ISO week YYYY-Www, for example 2026-W38. Omit week, or pass an empty string, to receive the latest index rather than one week's facts. A week that is not YYYY-Www is an error. A week with no published file is an error and names the index. This is not the live status and not one model's proof. Reads published files only.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • verify_sealCheck a crovia.seal.v1 object or a wrapped TACET silence proof: signature, canonical bytes, bindings, and per-epoch non-inclusion paths.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Check a crovia.seal.v1 object or a wrapped TACET silence proof: signature, canonical bytes, bindings, and per-epoch non-inclusion paths. Pass seal as a JSON object or a JSON string, or url as an https://croviatrust.com/ address. With neither, the call is an error. Supplying url fetches that URL over the network. check_anchors defaults to false; true also checks the drand round bytes and the Bitcoin anchors over the network. A seal object with check_anchors false or omitted is checked from that object alone. This tool can reach the network, so it is not a closed-world call.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: true
Only reads 5Claude Code: allow
  • crovia_statusLive totals at this moment: epochs closed, epochs anchored in Bitcoin, models on the map, snapshot counts, signed silence proofs, and a pointer to the longest verifiable silence.No findings

    Why it is in this group

    • The name "crovia_status" says "status": a word for reading.
    Description, as the server wrote it
    Live totals at this moment: epochs closed, epochs anchored in Bitcoin, models on the map, snapshot counts, signed silence proofs, and a pointer to the longest verifiable silence. No parameters. This is not a weekly Silence Report, not one model's record, and not a proof bundle. Reads published files only.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • explainThe definition of one Crovia term.No findings

    Why it is in this group

    • The name "explain" says "explain": a word for reading.
    Description, as the server wrote it
    The definition of one Crovia term. Allowed terms: tacet, silence, lacuna, seal, epoch, pnx, predicate, canon. Omit term, or pass an empty or blank string, to receive every definition. Any other value is an error listing those allowed terms, and it does not return the definitions. Use crovia_vs_causari, not explain, to tell the two products apart.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • get_silence_proofThe published silence proof for one model: silence_days, observed window, epochs, seal id, URL, and how to verify it.No findings

    Why it is in this group

    • The name "get_silence_proof" says "get": a word for reading.
    Description, as the server wrote it
    The published silence proof for one model: silence_days, observed window, epochs, seal id, URL, and how to verify it. model omitted or empty returns the proof index, not a bundle. include_bundle defaults to false; true attaches the crovia.seal.v1 bundle for that one model and does nothing on the index. This is not the live totals and not the weekly report. Reads published files only.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • lookup_modelOne model's observation: latest verdict, negative snapshots, anchored epochs, silence proof pointer, archive silence, badge and record URL.No findings

    Why it is in this group

    • The name "lookup_model" says "lookup": a word for reading.
    Description, as the server wrote it
    One model's observation: latest verdict, negative snapshots, anchored epochs, silence proof pointer, archive silence, badge and record URL. Required model is a Hugging Face id, org/name, for example Qwen/Qwen3-32B. An empty model is an error. An exact id is used; otherwise one case-insensitive substring match is accepted, and several matches return candidates instead of a verdict. This is not a catalog page, not the weekly report, and not the seal bytes. Reads published files only.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • search_modelsA page of observed model ids whose id contains query, compared case-insensitively, in catalog order, not a ranking.No findings

    Why it is in this group

    • The name "search_models" says "search": a word for reading.
    Description, as the server wrote it
    A page of observed model ids whose id contains query, compared case-insensitively, in catalog order, not a ranking. query omitted or empty matches the whole catalog and still returns at most limit rows. limit follows the historical rule: a missing, empty, zero or other falsy value is 25; any value int() accepts is then clamped into 1..100 (500 becomes 100, a negative becomes 1); a value int() cannot parse is an error and nothing is searched. returned and its compatibility alias count are the rows in this page. matched is how many ids match before the limit. catalog_total and its compatibility alias total_records are every record in the catalog, matching or not. limit is the limit actually applied. count is not the match count, and total_records is not the match count. This is not a verdict and not a proof. Reads published files only.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 2.0.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http crovia https://croviatrust.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__crovia__crovia_status",
      "mcp__crovia__lookup_model",
      "mcp__crovia__search_models",
      "mcp__crovia__get_silence_proof",
      "mcp__crovia__explain"
    ],
    "ask": [
      "mcp__crovia__verify_seal",
      "mcp__crovia__silence_report",
      "mcp__crovia__crovia_vs_causari"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as crovia. Review it before you use it.