Skip to content

dev.pages.proofrun/proofrun

by proofrun.pages.dev · remote · no sign-in to list tools · v0.1.0 · published by dev.pages.proofrun

ProofRun: bounded HTTP acceptance checks for agent deployments. $0.01 USDC per pack.

Changes · 3
CompareRegistry entry

5 tools: 3 change things and 2 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http proofrun https://proofrun.pages.dev/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

5 tools

Changes things 3Claude Code: ask
  • enroll_targetStart authorization and origin-control proof for up to five exact read-only HTTPS GET paths.No findings

    Why it is in this group

    • The description's first verb is "start": a word for a change.
    Description, as the server wrote it
    Start authorization and origin-control proof for up to five exact read-only HTTPS GET paths. Serve the returned proof JSON at proof_url before verifying. Private read_token must be generated and saved by the caller.
  • preflight_packFree configuration and enrollment preflight before paying.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Free configuration and enrollment preflight before paying. Validates exact authorized paths, pack and idempotency format; refuses an existing caller payment attempt. Makes no target request, signature, settlement or ledger write. Not a deployment test, wallet/balance check or capacity reservation.
  • verify_targetVerify the exact proof file for a previously started enrollment.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Verify the exact proof file for a previously started enrollment. Successful enrollment expires after 24 hours.
Only reads 2Claude Code: allow
  • read_reportRead or reconcile the original private report for a purchase.No findings

    Why it is in this group

    • The name "read_report" says "read": a word for reading.
    Description, as the server wrote it
    Read or reconcile the original private report for a purchase. Use the ORIGINAL idempotency_key, not the report_id UUID. Free; never signs or charges. If state is uncertain do not pay again. Requires the original private read token; reports expire after seven days.
  • verify_deploymentReturn a $0.01 native Base USDC x402 challenge without paying.No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    Return a $0.01 native Base USDC x402 challenge without paying. For execution supply a verified enrollment, private read token, idempotency key and caller-created payment_signature or headers.PAYMENT-SIGNATURE. Only that payment header is accepted; enrollment/read token/idempotency remain explicit. Never creates a wallet signature. Returns bounded independent HTTP assertions, not security or full-application certification.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http proofrun https://proofrun.pages.dev/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__proofrun__verify_deployment",
      "mcp__proofrun__read_report"
    ],
    "ask": [
      "mcp__proofrun__enroll_target",
      "mcp__proofrun__verify_target",
      "mcp__proofrun__preflight_pack"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as proofrun. Review it before you use it.