io.github.LumiRx/5arz-proof-of-human

by LumiRx · remote · no sign-in to list tools · v1.0.0 · published by GitHub user LumiRx

Prove a real, unique human performed an action; mint a signed, verifiable Proof-of-Human credential.

Deletes · 1Changes · 4

Compare Registry entry

9 tools: 1 can delete or cancel things, 4 change things and 4 only read.

Scanned Oct 21, 2026

Deletes or cancels1Claude Code: deny: see these tools
Can't be undone0Claude Code: ask
Changes things4Claude Code: ask: see these tools
Only reads4Claude Code: allow: see these tools

6 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http 5arz-proof-of-human https://mcp.5arz.com

Findings

Matches of fixed checks, with the text they matched.

6 info

Inforegister_agent
The description mentions "credentials".
Matched text
description: "...o your agent can request proof-of-human credentials. Every new key starts on the Free plan..."
What this check looks for
Infoverify_human
The title mentions "credential".
Matched text
title: "Verify a human (mint a PoHF credential)"
What this check looks for
Infoverify_human
The description mentions "credential".
Matched text
description: "...igned Proof-of-Human-Fulfillment (PoHF) credential attesting a real, ID-verified, live hum..."
What this check looks for
Infocheck_credential
The title mentions "credential".
Matched text
title: "Verify a PoHF credential (no 5arz trust required)"
What this check looks for
Infocheck_credential
The input schema at properties.pohf_jwt.description mentions "credential".
Matched text
inputSchema.properties.pohf_jwt.description: "The credential returned by verify_human — the compact..."
What this check looks for
Infosubscribe
The description mentions "credential".
Matched text
description: "...nlimited seals, $0.50/check). SEALS are credential signatures and are effectively free; DO..."
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

9 tools

Deletes or cancels 1Removes, cancels or revokes something.Claude Code: deny

purchase_verified_human_taskBuy one slot of a verified human task.No findings
Why it is in this group
- The name "purchase_verified_human_task" says "purchase": a word that usually means money moves, which cannot be taken back.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Buy one slot of a verified human task. Called without payment it returns an HTTP 402 / x402 challenge with settlement instructions; settle USDC on the offered chain and call again with x_payment and purchase_id to receive an attestation_id — a verifiable Proof-of-Human-Fulfillment receipt. No API key required; the payment is the authentication.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
- openWorldHint: true

Changes things 4Creates or changes something that can be changed back.Claude Code: ask

check_credentialIndependently verify a 5arz PoHF JWT: checks the ES256 signature against the live public JWKS and validates expiry/not-before, then returns valid/invalid plus the decoded claims.2 findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Info
  The title mentions "credential".
  Matched text
  title: "Verify a PoHF credential (no 5arz trust required)"
  What this check looks for
- Info
  The input schema at properties.pohf_jwt.description mentions "credential".
  Matched text
  inputSchema.properties.pohf_jwt.description: "The credential returned by verify_human — the compact..."
  What this check looks for
Description, as the server wrote it
Independently verify a 5arz PoHF JWT: checks the ES256 signature against the live public JWKS and validates expiry/not-before, then returns valid/invalid plus the decoded claims. No API key needed — this is pure cryptographic verification you could also do with any standard JWT library. Accepts either the legacy pohf_jwt / pop_jwt or the standards-conformant sd_jwt_vc (IETF SD-JWT VC, typ dc+sd-jwt).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
register_agentCreate a 5arz API key so your agent can request proof-of-human credentials.1 finding
Why it is in this group
- The description's first verb is "create": a word for a change.
Findings
- Info
  The description mentions "credentials".
  Matched text
  description: "...o your agent can request proof-of-human credentials. Every new key starts on the Free plan..."
  What this check looks for
Description, as the server wrote it
Create a 5arz API key so your agent can request proof-of-human credentials. Every new key starts on the Free plan — 1,000 credential seals a month and 10 document checks, no card. Pass mode:"test" for an unlimited free sandbox key (arz_test_…) whose credentials are marked test:true — never treat test credentials as production proof. The key is shown once; store it.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
subscribeGet a Stripe checkout link for a 5arz plan.1 finding
Why it is in this group
- The name "subscribe" says "subscribe": a word for a change.
Findings
- Info
  The description mentions "credential".
  Matched text
  description: "...nlimited seals, $0.50/check). SEALS are credential signatures and are effectively free; DO..."
  What this check looks for
Description, as the server wrote it
Get a Stripe checkout link for a 5arz plan. Free (1,000 seals/mo, 10 document checks), Starter ($99/mo, 100k seals, $1.25/document check), Growth ($499/mo, 1M seals, $0.75/check), Scale ($2,499/mo, unlimited seals, $0.50/check). SEALS are credential signatures and are effectively free; DOCUMENT CHECKS are the vendor identity verification and are what you are really paying for. Human verification is always free to the human, at any volume. Requires an API key.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
verify_humanMint a signed Proof-of-Human-Fulfillment (PoHF) credential attesting a real, ID-verified, live human performed an action.2 findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- Info
  The title mentions "credential".
  Matched text
  title: "Verify a human (mint a PoHF credential)"
  What this check looks for
- Info
  The description mentions "credential".
  Matched text
  description: "...igned Proof-of-Human-Fulfillment (PoHF) credential attesting a real, ID-verified, live hum..."
  What this check looks for
Description, as the server wrote it
Mint a signed Proof-of-Human-Fulfillment (PoHF) credential attesting a real, ID-verified, live human performed an action. Provide sessionId to attest work fulfillment, or memberId to attest that an ID-verified human is behind an account (optionally wallet-bound). This does not establish that the person holds only one account — read sybil_checked in the returned claims before gating one-per-person actions. Counts as one seal against your monthly plan allowance (1,000/month on Free; unlimited for test keys). Returns an ES256 JWT that anyone can verify against the public JWKS — pass it to check_credential. Requires an API key (Authorization: Bearer, or the apiKey argument).
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true

Only reads 4Looks things up and changes nothing.Claude Code: allow

get_attestation_receiptFetch a Proof-of-Human-Fulfillment receipt by attestation id.No findings
Why it is in this group
- The name "get_attestation_receipt" says "get": a word for reading.
Description, as the server wrote it
Fetch a Proof-of-Human-Fulfillment receipt by attestation id. Returns the signed packet, verifier identifier, JWKS URL, and a how-to-verify hint. Free, no API key — pair it with check_credential to verify the signature yourself.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_balanceReturn the current plan, seals and document checks used this month, and what remains.No findings
Why it is in this group
- The name "get_balance" says "get": a word for reading.
Description, as the server wrote it
Return the current plan, seals and document checks used this month, and what remains. Requires an API key.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
get_vhh_indexReturn the current Verified-Human-Hour (VHH) index — the benchmark price of one hour of verified human work/attention, in USD.No findings
Why it is in this group
- The name "get_vhh_index" says "get": a word for reading.
Description, as the server wrote it
Return the current Verified-Human-Hour (VHH) index — the benchmark price of one hour of verified human work/attention, in USD. Free, no API key. Useful for pricing verified-human data and as a citable benchmark.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
list_verified_human_tasksList currently-buyable verified human work tasks.No findings
Why it is in this group
- The name "list_verified_human_tasks" says "list": a word for reading.
Description, as the server wrote it
List currently-buyable verified human work tasks. Each task includes its USD price, remaining slots, supported settlement chains, and the kind of Proof-of-Human-Fulfillment receipt issued on completion. Free, no API key.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http 5arz-proof-of-human https://mcp.5arz.com

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__5arz-proof-of-human__get_vhh_index",
      "mcp__5arz-proof-of-human__get_balance",
      "mcp__5arz-proof-of-human__list_verified_human_tasks",
      "mcp__5arz-proof-of-human__get_attestation_receipt"
    ],
    "ask": [
      "mcp__5arz-proof-of-human__register_agent",
      "mcp__5arz-proof-of-human__verify_human",
      "mcp__5arz-proof-of-human__check_credential",
      "mcp__5arz-proof-of-human__subscribe"
    ],
    "deny": [
      "mcp__5arz-proof-of-human__purchase_verified_human_task"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as 5arz-proof-of-human. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.LumiRx/5arz-proof-of-human/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

5 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry. Synced Oct 21, 2026, 18:17 UTC.

For agents: Markdown · JSON · report this listing