Skip to content

MolTrust MCP Server

by MoltyCel · remote · no sign-in to list tools · v1.2.6 · published by GitHub user MoltyCel

Verifiable agent identity and trust checks; MolCheck verdicts on mandates; Amazon Ads verdicts.

Final · 1Changes · 441 high finding
CompareRegistry entry

64 tools: 1 do something that can't be undone, 44 change things and 19 only read.

Scanned Oct 21, 2026

28 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http moltrust https://api.moltrust.ch/mcp

Findings

Matches of fixed checks, with the text they matched.

1 high27 info
Show 22 more findings

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

64 tools

Can't be undone 1Claude Code: ask
  • mt_travel_verifyVerify a travel booking against a TravelAgentCredential.No findings

    Why it is in this group

    • The input carries an amount (input.amount) and a currency, so it moves money.
    Description, as the server wrote it
    Verify a travel booking against a TravelAgentCredential. Runs a 10-step verification pipeline: VC signature, expiry, agent DID match, segment authorization, spend limit, currency, daily cap, trust score, delegation chain, and traveler binding. Args: agent_did: DID of the booking agent (e.g. "did:base:0x...") vc_json: The TravelAgentCredential as a JSON string merchant: Merchant domain (e.g. "hilton.com") segment: Booking segment: hotel, flight, car_rental, or rail amount: Booking amount currency: Currency code (e.g. "USDC")
Changes things 44Claude Code: ask
  • ads_checkAllow / hold / forbid for one intended Amazon Ads MCP tool call, before it runs.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...ke any check. Never send Amazon credentials: they are refused. Args:..."

      What this check looks for
    Description, as the server wrote it
    Allow / hold / forbid for one intended Amazon Ads MCP tool call, before it runs. Needs your MolTrust API key as the X-API-Key header of the MCP connection (free key: POST https://api.moltrust.ch/auth/signup). Counts against your plan like any check. Never send Amazon credentials: they are refused. Args: profile: the `profile` object from ads_mandate_template tool: the Amazon Ads MCP tool name, e.g. campaign_management-update_campaign_budget arguments: the tool arguments exactly as your agent would send them context: your view of the account — campaigns {id: {brand, daily_budget(cents)}}, targets {id: {brand, bid(cents)}}, ad_groups, account_daily_total(cents). Values the check cannot derive count as unknown and end in forbid.
  • ads_mandate_templateBuild an ads profile and its AAE mandate for one or more Amazon Ads accounts.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Build an ads profile and its AAE mandate for one or more Amazon Ads accounts. Pure: nothing is stored. Returns `profile` (pass it to ads_check) and `mandate` (what /enforce/check evaluates). Args: account_ids: advertiserAccountId / profileId values the agent may act on brands: brands the agent may touch daily_budget_cap_usd: largest daily campaign budget; above it: forbid hold_threshold_usd: above it a person named in `approvers` must approve total_daily_budget_cap_usd: sum of daily budgets on the account after a change period_budget_cap_usd: largest lifetime or monthly budget max_bid_usd: largest bid max_bid_change_percent: largest bid change per step, in percent valid_from: RFC 3339 UTC second valid_until: RFC 3339 UTC second; after it every call is forbidden tools: allowed tool names (default: all documented in ads_onboard) mandate_id: your identifier for this mandate principal_did: the agency's DID principal_public_key: the agency's Ed25519 public key, hex approvers: [{"did", "public_key", "role"}] who may approve a hold
  • ads_onboardHow an agent starts with MolTrust Ads: verdicts (allow / hold / forbid) on Amazon Ads MCP tool calls before they run.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    How an agent starts with MolTrust Ads: verdicts (allow / hold / forbid) on Amazon Ads MCP tool calls before they run. Plans, key sign-up, SDK, endpoints. No input, no account needed.
  • canary_eventsYour leak events, newest first, each signed by MolTrust and carrying AER material that `moltrust-verify` recomputes offline (trust list: GET /canary/trust-list).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Your leak events, newest first, each signed by MolTrust and carrying AER material that `moltrust-verify` recomputes offline (trust list: GET /canary/trust-list). Optionally for one canary. Needs your MolTrust API key as X-API-Key on the MCP connection. Args: canary_id: only events of this canary (from canary_issue or canary_list) limit: page size, at most 200 offset: where the page starts
  • canary_issueIssue a leak canary for one counterparty: a credential to hand to that counterparty.3 findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • High

      The description refers to "/credentials/issue".

      Matched text

      description: "...l_type: the credential type, as in POST /credentials/issue"

      What this check looks for
    • Info

      The description mentions "credential".

      Matched text

      description: "...e a leak canary for one counterparty: a credential to hand to that counterparty. I..."

      What this check looks for
    • Info

      The input schema at properties.credential_type.title mentions "Credential".

      Matched text

      inputSchema.properties.credential_type.title: "Credential Type"

      What this check looks for
    Description, as the server wrote it
    Issue a leak canary for one counterparty: a credential to hand to that counterparty. If anyone else presents it at the MolTrust verifier, you get a signed leak event that names the counterparty. Costs what a credential costs. Needs your MolTrust API key as the X-API-Key header of the MCP connection. Args: counterparty_did: DID of the agent you hand the credential to; it must be a registered, unrevoked MolTrust agent mode: "bound" (the counterparty may present it) or "decoy" (any presentation but yours is a leak, the counterparty's included); both are issued to the counterparty's DID on_leak: "hold" puts the counterparty on hold in your mandates (POST /canary/enforce-hook), "none" only records the event credential_type: the credential type, as in POST /credentials/issue
  • molcheck_evidenceVerdict plus the decoded transactions that breached the mandate.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Verdict plus the decoded transactions that breached the mandate. Read-only. Args: agent: public agent identifier (address / DID / ERC-8004 ref)
  • molcheck_mandateThe committed AAE mandate for an agent (venues, position cap, validity).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    The committed AAE mandate for an agent (venues, position cap, validity). Read-only. Args: agent: public agent identifier (address / DID / ERC-8004 ref)
  • molcheck_registryAgents with committed mandates and their current verdict.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Agents with committed mandates and their current verdict. Read-only. Ranks NO_MANDATE / NEEDS_REVIEW lower.
  • molcheck_verdictVerdict + per-check breakdown for an agent against its committed mandate.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Verdict + per-check breakdown for an agent against its committed mandate. Read-only. Recomputable from public chain data + the public mandate. Args: agent: agent address, did:moltrust / did:web, or ERC-8004 reference (public)
  • molcheck_verifyRecompute a verdict from public inputs and check its signature.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "Credential".

      Matched text

      description: "...mandate: the public AAE Verifiable Credential actions: public, already-de..."

      What this check looks for
    Description, as the server wrote it
    Recompute a verdict from public inputs and check its signature. Offline and read-only: no DID/mandate/context is fetched here. Args: agent: public agent identifier mandate: the public AAE Verifiable Credential actions: public, already-decoded on-chain actions signature: optional prior MolCheck signature to check
  • moltguard_credential_issueIssue a W3C Verifiable Credential (AgentTrustCredential) for a wallet.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "Credential".

      Matched text

      description: "Issue a W3C Verifiable Credential (AgentTrustCredential) for a wallet...."

      What this check looks for
    Description, as the server wrote it
    Issue a W3C Verifiable Credential (AgentTrustCredential) for a wallet. The credential contains the agent's trust score, Sybil score, ERC-8004 registration status, and MolTrust verification status. It is cryptographically signed with Ed25519 (JWS). Args: address: Base (EVM) wallet address (0x...)
  • moltguard_credential_verifyVerify a MoltGuard Verifiable Credential JWS signature.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "Credential".

      Matched text

      description: "Verify a MoltGuard Verifiable Credential JWS signature. Checks the Ed25519..."

      What this check looks for
    Description, as the server wrote it
    Verify a MoltGuard Verifiable Credential JWS signature. Checks the Ed25519 signature and returns the credential payload if valid. Args: jws: JWS compact serialization string from a MoltGuard credential
  • moltguard_marketCheck a Polymarket prediction market for integrity anomalies.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Check a Polymarket prediction market for integrity anomalies. Analyzes volume spikes, price-volume divergence, liquidity ratios, and outcome price spreads to detect potential manipulation. Args: market_id: Polymarket market/condition ID
  • moltguard_sybilScan a Base wallet for Sybil indicators.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Scan a Base wallet for Sybil indicators. Analyzes wallet age, transaction patterns, counterparty diversity, and funding source to detect potential Sybil wallets. Also traces funding clusters — if the funder sent ETH to many wallets, it indicates a Sybil ring. Args: address: Base (EVM) wallet address (0x...)
  • moltproof_evidenceDeprecated alias of molcheck_evidence; use that name.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Deprecated alias of molcheck_evidence; use that name. Verdict plus the decoded transactions that breached the mandate. Read-only. Args: agent: public agent identifier (address / DID / ERC-8004 ref)
  • moltproof_mandateDeprecated alias of molcheck_mandate; use that name.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Deprecated alias of molcheck_mandate; use that name. The committed AAE mandate for an agent (venues, position cap, validity). Read-only. Args: agent: public agent identifier (address / DID / ERC-8004 ref)
  • moltproof_registryDeprecated alias of molcheck_registry; use that name.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Deprecated alias of molcheck_registry; use that name. Agents with committed mandates and their current verdict. Read-only. Ranks NO_MANDATE / NEEDS_REVIEW lower.
  • moltproof_verdictDeprecated alias of molcheck_verdict; use that name.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Deprecated alias of molcheck_verdict; use that name. Verdict + per-check breakdown for an agent against its committed mandate. Read-only. Recomputable from public chain data + the public mandate. Args: agent: agent address, did:moltrust / did:web, or ERC-8004 reference (public)
  • moltproof_verifyDeprecated alias of molcheck_verify; use that name.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "Credential".

      Matched text

      description: "...mandate: the public AAE Verifiable Credential actions: public, already-de..."

      What this check looks for
    Description, as the server wrote it
    Deprecated alias of molcheck_verify; use that name. Recompute a verdict from public inputs and check its signature. Offline and read-only: no DID/mandate/context is fetched here. Args: agent: public agent identifier mandate: the public AAE Verifiable Credential actions: public, already-decoded on-chain actions signature: optional prior MolCheck signature to check
  • moltrust_claim_depositClaim MolTrust credits from a USDC deposit on Base.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Claim MolTrust credits from a USDC deposit on Base. After sending USDC to the MolTrust wallet on Base (L2), submit the transaction hash to receive credits. 1 USDC = 100 credits, verified on-chain. Args: tx_hash: Base blockchain transaction hash (0x...) did: Your agent's DID to credit
  • moltrust_credentialIssue or verify a W3C Verifiable Credential.3 findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "Credential".

      Matched text

      description: "Issue or verify a W3C Verifiable Credential. Args: action: Either "iss..."

      What this check looks for
    • Info

      The input schema at properties.credential_type.title mentions "Credential".

      Matched text

      inputSchema.properties.credential_type.title: "Credential Type"

      What this check looks for
    • Info

      The input schema at properties.credential.title mentions "Credential".

      Matched text

      inputSchema.properties.credential.title: "Credential"

      What this check looks for
    Description, as the server wrote it
    Issue or verify a W3C Verifiable Credential. Args: action: Either "issue" or "verify" subject_did: DID of the credential subject (required for "issue") credential_type: Type of credential (default: "AgentTrustCredential", only for "issue") credential: JSON string of the credential to verify (required for "verify")
  • moltrust_creditsManage MolTrust credits: check balance, view pricing, transfer credits, or view transaction history.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Manage MolTrust credits: check balance, view pricing, transfer credits, or view transaction history. Args: action: One of "balance", "pricing", "transfer", or "transactions" did: Agent DID (required for "balance" and "transactions") to_did: Recipient DID (required for "transfer") amount: Number of credits to transfer (required for "transfer", must be >= 1) reference: Optional reference string for transfers limit: Max transactions to return (default 20, for "transactions") offset: Pagination offset (default 0, for "transactions")
  • moltrust_rateRate another AI agent (1-5 stars).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Rate another AI agent (1-5 stars). Submit a trust rating from one agent to another. Args: from_did: Your agent's DID (the rater) to_did: Target agent's DID (the agent being rated) score: Rating from 1 (untrusted) to 5 (highly trusted)
  • moltrust_registerRegister a new AI agent on MolTrust.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "Credential".

      Matched text

      description: "...identity (DID), issues a W3C Verifiable Credential, and anchors the agent on the Base..."

      What this check looks for
    Description, as the server wrote it
    Register a new AI agent on MolTrust. Creates a decentralised identity (DID), issues a W3C Verifiable Credential, and anchors the agent on the Base blockchain. Args: display_name: Agent name (1-64 chars, alphanumeric/dash/underscore/dot/space) platform: Platform identifier (e.g. "openai", "langchain", "custom")
  • moltrust_verifyVerify an AI agent by its DID.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...ith the agent's trust card (reputation, credentials, blockchain anchor). Args:..."

      What this check looks for
    Description, as the server wrote it
    Verify an AI agent by its DID. Checks whether the DID is registered and returns verification status along with the agent's trust card (reputation, credentials, blockchain anchor). Args: did: Decentralised identifier (e.g. "did:moltrust:a1b2c3d4e5f60718")
  • mt_check_badgeQuick check: is this agent badge-verified by MolTrust?No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Quick check: is this agent badge-verified by MolTrust? Returns a simple yes/no with tier and expiry info. Args: did: The DID of the agent to check
  • mt_create_interaction_proofCreate an interaction proof before issuing a SkillEndorsementCredential.No findings

    Why it is in this group

    • The name "mt_create_interaction_proof" says "create": a word for a change.
    Description, as the server wrote it
    Create an interaction proof before issuing a SkillEndorsementCredential. Returns evidence_hash and base_tx_hash anchored on Base L2. Required before calling mt_endorse_agent. Valid for 72 hours. Args: api_key: MolTrust API key of the agent creating the proof agent_a: DID of the first agent in the interaction agent_b: DID of the second agent in the interaction interaction_type: Type of interaction (e.g. skill_verification, purchase, prediction) outcome: Outcome of the interaction: success or failure
  • mt_endorse_agentIssue a W3C SkillEndorsementCredential for another agent.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Issue a W3C SkillEndorsementCredential for another agent. Requires a valid evidence_hash from mt_create_interaction_proof (max 72h old). Self-endorsement is rejected. Contributes to the endorsed agent's Trust Score. Args: endorser_api_key: MolTrust API key of the endorsing agent endorsed_did: DID of the agent to endorse skill: Skill being endorsed (python, javascript, security, prediction, trading, data_analysis, api_integration, smart_contracts, nlp, computer_vision, general) evidence_hash: SHA-256 hash from mt_create_interaction_proof (sha256:...) evidence_timestamp: ISO 8601 timestamp from mt_create_interaction_proof vertical: MolTrust vertical (skill, shopping, travel, prediction, salesguard, sports, core)
  • mt_fantasy_commitCommit a fantasy lineup with a SHA-256 hash anchored on Base L2.No findings

    Why it is in this group

    • The name "mt_fantasy_commit" says "commit": a word for a change.
    Description, as the server wrote it
    Commit a fantasy lineup with a SHA-256 hash anchored on Base L2. Creates a FantasyLineupCredential (W3C VC) proving the lineup was locked before contest start. The commitment hash is tamper-proof. Args: agent_did: Agent DID (e.g. "did:moltrust:a1b2c3d4e5f67890") contest_id: Unique contest identifier (e.g. "dk-nfl-sun-main-2026w12") platform: Platform name: draftkings, fanduel, yahoo, sleeper, custom sport: Sport type: nfl, nba, mlb, nhl, pga, nascar, soccer, custom contest_start_iso: Contest start time in ISO 8601 (must be in the future) lineup_json: JSON string of lineup object (e.g. '{"QB":"Mahomes","RB1":"Henry"}') projected_score: Agent's projected score for this lineup confidence: Confidence level 0.0 to 1.0 entry_fee_usd: Contest entry fee in USD contest_type: Contest type (e.g. "classic", "showdown")
  • mt_fantasy_verifyVerify a fantasy lineup commitment.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Verify a fantasy lineup commitment. Public endpoint, no auth required. Returns the full lineup, timing proof (minutes before contest), on-chain verification status, and the FantasyLineupCredential. Args: commitment_hash: The 64-char SHA-256 commitment hash
  • mt_issue_badgeIssue a Verified by MolTrust badge for an agent.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Issue a Verified by MolTrust badge for an agent. Tiers: 'verified' (score 40+, $5), 'trusted' (score 60+, $20). Badge is valid for 1 year and auto-revokes if trust score drops. Args: did: The DID of the agent to issue a badge for tier: Badge tier — 'verified' or 'trusted'
  • mt_issue_music_credentialIssue a VerifiedMusicCredential for an AI-generated music track.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "Credential".

      Matched text

      description: "...ic track. Creates a W3C Verifiable Credential proving the provenance of an AI-gen..."

      What this check looks for
    Description, as the server wrote it
    Issue a VerifiedMusicCredential for an AI-generated music track. Creates a W3C Verifiable Credential proving the provenance of an AI-generated music track — which tool created it, whether a human was involved, and what rights apply. Anchored on Base L2. EU AI Act Article 50(2) compliant. Args: agent_did: DID of the agent/creator (e.g. "did:moltrust:abc123") tool: AI tool used (e.g. "Suno API v3.2", "Udio", "Magenta") human_oversight: "true", "false", or "partial" rights: Rights declaration (e.g. "CC-BY", "All Rights Reserved", "Agent-Wallet") track_title: Title of the track track_description: Optional description genre: Optional genre (e.g. "ambient", "jazz", "classical") isrc: Optional ISRC code (ISO 3901)
  • mt_register_seedRegister a trusted seed agent in the Swarm Intelligence network (admin only).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Register a trusted seed agent in the Swarm Intelligence network (admin only). Seed agents bootstrap the trust network with a base score. Requires the ADMIN_KEY for authorization. Args: did: DID of the agent to register as seed label: Human-readable label for the seed agent base_score: Base trust score (0-100, default 80) admin_key: Admin key for authorization
  • mt_salesguard_registerRegister a brand with MT Salesguard.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Register a brand with MT Salesguard. Creates a new brand identity with a DID and API key. The API key is used to authenticate product registration and reseller authorization requests. Args: name: Brand name (e.g. "Nike", "Adidas") domain: Brand domain (e.g. "nike.com") contact_email: Contact email for the brand (optional)
  • mt_salesguard_resellerVerify reseller authorization via MT Salesguard.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Verify reseller authorization via MT Salesguard. Checks whether a reseller DID has been authorized by a brand to sell specific products. Returns authorization status, brand info, authorized SKUs, and expiry. Args: reseller_did: Reseller DID (e.g. "did:web:sneakerstore.com")
  • mt_salesguard_verifyVerify product provenance via MT Salesguard.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...n authorized brand. Returns brand info, credential hash, Base anchor, and risk level...."

      What this check looks for
    Description, as the server wrote it
    Verify product provenance via MT Salesguard. Checks whether a product ID has a valid ProductProvenanceCredential issued by an authorized brand. Returns brand info, credential hash, Base anchor, and risk level. Args: product_id: Product identifier (e.g. "AIRMAX-90-WHITE-43")
  • mt_shopping_issue_vcIssue a BuyerAgentCredential (W3C Verifiable Credential) for a shopping agent.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "Credential".

      Matched text

      description: "...a BuyerAgentCredential (W3C Verifiable Credential) for a shopping agent. Creates a c..."

      What this check looks for
    Description, as the server wrote it
    Issue a BuyerAgentCredential (W3C Verifiable Credential) for a shopping agent. Creates a cryptographically signed credential that authorizes an AI agent to make purchases on behalf of a human, with enforced spend limits. Args: agent_did: DID of the shopping agent (e.g. "did:moltrust:agent123") human_did: DID of the authorizing human (e.g. "did:moltrust:human456") spend_limit: Maximum spend amount per transaction currency: Currency code (e.g. "USDC", "USD") categories: Comma-separated allowed categories (e.g. "electronics,books") validity_days: Number of days the credential is valid (default 30)
  • mt_shopping_verifyVerify a shopping transaction against a BuyerAgentCredential.2 findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...a BuyerAgentCredential. Checks the credential signature, spend limits, trust score, a..."

      What this check looks for
    • Info

      The input schema at properties.credential_jws.title mentions "Credential".

      Matched text

      inputSchema.properties.credential_jws.title: "Credential Jws"

      What this check looks for
    Description, as the server wrote it
    Verify a shopping transaction against a BuyerAgentCredential. Checks the credential signature, spend limits, trust score, and returns a verification receipt with approval status. Args: credential_jws: JWS compact serialization of the BuyerAgentCredential transaction_amount: Transaction amount (e.g. 189.99) transaction_currency: Currency code (e.g. "USDC") merchant_id: Merchant identifier string item_description: Description of the item being purchased
  • mt_skill_auditAudit an AI agent skill (SKILL.md) for security risks.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Audit an AI agent skill (SKILL.md) for security risks. Fetches the SKILL.md from a URL, computes its canonical SHA-256 hash, and runs an 8-point security audit checking for prompt injection, data exfiltration, tool scope violations, and metadata completeness. Score starts at 100 with deductions per finding. Passing score: >= 70. Args: github_url: URL to the skill (GitHub repo or direct HTTPS link to SKILL.md)
  • mt_skill_issue_vcIssue a VerifiedSkillCredential for an AI agent skill.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "Credential".

      Matched text

      description: "...core >= 70, issues a W3C Verifiable Credential signed with Ed25519 (JWS compact serial..."

      What this check looks for
    Description, as the server wrote it
    Issue a VerifiedSkillCredential for an AI agent skill. Fetches SKILL.md, runs security audit, and if score >= 70, issues a W3C Verifiable Credential signed with Ed25519 (JWS compact serialization). Requires x402 payment ($5 USDC) when paywall is active. Args: author_did: DID of the skill author (e.g. "did:base:0x...") repository_url: URL to the skill repository or SKILL.md
  • mt_skill_verifyVerify an AI agent skill by its canonical SHA-256 hash.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...issued for this skill hash. Returns credential details if verified. Args:..."

      What this check looks for
    Description, as the server wrote it
    Verify an AI agent skill by its canonical SHA-256 hash. Checks if a VerifiedSkillCredential has been issued for this skill hash. Returns credential details if verified. Args: skill_hash: Canonical skill hash (e.g. "sha256:a1b2c3...")
  • mt_travel_issue_vcIssue a TravelAgentCredential (W3C Verifiable Credential) for a booking agent.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "Credential".

      Matched text

      description: "...a TravelAgentCredential (W3C Verifiable Credential) for a booking agent. Creates a cr..."

      What this check looks for
    Description, as the server wrote it
    Issue a TravelAgentCredential (W3C Verifiable Credential) for a booking agent. Creates a cryptographically signed credential that authorizes an AI agent to book travel on behalf of a principal (company/human), with enforced segment permissions and spend limits. Args: agent_did: DID of the travel agent (e.g. "did:base:0x...") principal_did: DID of the authorizing entity (e.g. "did:base:acme-corp") segments: Comma-separated allowed segments (e.g. "hotel,flight,car_rental") spend_limit: Maximum spend amount per booking currency: Currency code (e.g. "USDC") traveler_name: Name of the authorized traveler (optional) validity_days: Number of days the credential is valid (default 30)
  • mt_verify_music_credentialVerify a VerifiedMusicCredential by its ID.2 findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...by its ID. Checks whether a music credential is valid (not revoked), returns pro..."

      What this check looks for
    • Info

      The input schema at properties.credential_id.title mentions "Credential".

      Matched text

      inputSchema.properties.credential_id.title: "Credential Id"

      What this check looks for
    Description, as the server wrote it
    Verify a VerifiedMusicCredential by its ID. Checks whether a music credential is valid (not revoked), returns provenance summary including tool, human oversight, rights, and on-chain anchor status. Args: credential_id: UUID of the music credential
Only reads 19Claude Code: allow
  • canary_listYour leak canaries, newest first: counterparty, mode, reaction on leak and the number of events so far.No findings

    Why it is in this group

    • The name "canary_list" says "list": a word for reading.
    Description, as the server wrote it
    Your leak canaries, newest first: counterparty, mode, reaction on leak and the number of events so far. Paginated with limit/offset; `next_offset` is null on the last page. Needs your MolTrust API key as X-API-Key on the MCP connection.
  • moltguard_detailGet a detailed agent trust report for a Base wallet address.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get a detailed agent trust report for a Base wallet address. Returns full scoring breakdown, wallet history from Blockscout, ERC-8004 registration, MolTrust DID cross-reference, and Sybil indicators. Args: address: Base (EVM) wallet address (0x...)
  • moltguard_feedGet the top anomaly feed — markets with highest integrity concerns.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get the top anomaly feed — markets with highest integrity concerns. Scans the top 20 active Polymarket markets by 24h volume and returns those with anomaly indicators, sorted by anomaly score.
  • moltguard_scoreGet an agent trust score for a Base wallet address.1 finding

    Why it is in this group

    • The description's first verb is "get": a word for reading.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...counterparty diversity, and MolTrust credentials to produce a 0-100 score. Args:..."

      What this check looks for
    Description, as the server wrote it
    Get an agent trust score for a Base wallet address. Analyzes on-chain activity, ERC-8004 registration, USDC balance, counterparty diversity, and MolTrust credentials to produce a 0-100 score. Args: address: Base (EVM) wallet address (0x...)
  • moltrust_deposit_historyGet USDC deposit history for an agent.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get USDC deposit history for an agent. Args: did: The agent's DID
  • moltrust_deposit_infoGet USDC deposit instructions to buy MolTrust credits.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get USDC deposit instructions to buy MolTrust credits. Returns the MolTrust wallet address on Base (Ethereum L2), USDC token contract, conversion rate (1 USDC = 100 credits), and step-by-step instructions.
  • moltrust_erc8004Query the ERC-8004 on-chain agent registry on Base.No findings

    Why it is in this group

    • The description's first verb is "query": a word for reading.
    Description, as the server wrote it
    Query the ERC-8004 on-chain agent registry on Base. Resolve MolTrust agents to their on-chain ERC-8004 identity, fetch Agent Cards, or look up on-chain agents by their agentId. Args: action: One of "card", "resolve", or "well-known" did: Agent DID (required for "card", e.g. "did:moltrust:a1b2c3d4e5f60718") agent_id: On-chain ERC-8004 agent ID (required for "resolve", e.g. 21023)
  • moltrust_reputationGet the reputation score for an AI agent.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get the reputation score for an AI agent. Returns the aggregate trust score (1-5) and total number of ratings. Args: did: Decentralised identifier (e.g. "did:moltrust:a1b2c3d4e5f60718")
  • moltrust_statsGet MolTrust network statistics.1 finding

    Why it is in this group

    • The description's first verb is "get": a word for reading.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: ".... Returns total registered agents, credentials issued, ratings given, and other ne..."

      What this check looks for
    Description, as the server wrote it
    Get MolTrust network statistics. Returns total registered agents, credentials issued, ratings given, and other network health metrics.
  • mt_fantasy_historyGet fantasy lineup history and stats for an agent.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get fantasy lineup history and stats for an agent. Returns ITM rate, ROI, projection accuracy, and recent lineups for the specified agent DID. Args: did: Agent DID (e.g. "did:moltrust:a1b2c3d4e5f67890")
  • mt_get_badgeGet the Verified by MolTrust badge status for an agent.No findings

    Why it is in this group

    • The name "mt_get_badge" says "get": a word for reading.
    Description, as the server wrote it
    Get the Verified by MolTrust badge status for an agent. Returns badge tier, trust score, grade, issue/expiry dates, and embeddable SVG URL. Args: did: The DID of the agent to check
  • mt_get_swarm_graphGet the trust propagation graph for an agent (2 hops).No findings

    Why it is in this group

    • The name "mt_get_swarm_graph" says "get": a word for reading.
    Description, as the server wrote it
    Get the trust propagation graph for an agent (2 hops). Returns nodes (agents with scores) and edges (endorsements) showing who endorses this agent and who endorses them. Args: did: DID of the agent to get graph for
  • mt_get_swarm_statsGet global Swarm Intelligence statistics.No findings

    Why it is in this group

    • The name "mt_get_swarm_stats" says "get": a word for reading.
    Description, as the server wrote it
    Get global Swarm Intelligence statistics. Returns total agents, endorsements, seed agents, average trust score, propagation depth, and top trusted agents.
  • mt_get_track_provenanceGet full provenance details for a music credential.2 findings

    Why it is in this group

    • The name "mt_get_track_provenance" says "get": a word for reading.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "Get full provenance details for a music credential. Returns the complete VerifiedMusi..."

      What this check looks for
    • Info

      The input schema at properties.credential_id.title mentions "Credential".

      Matched text

      inputSchema.properties.credential_id.title: "Credential Id"

      What this check looks for
    Description, as the server wrote it
    Get full provenance details for a music credential. Returns the complete VerifiedMusicCredential including track metadata, provenance hash, EU AI Act compliance status, and on-chain anchor information. Args: credential_id: UUID of the music credential
  • mt_get_trust_scoreGet the Swarm Intelligence Trust Score for an agent (Phase 2).1 finding

    Why it is in this group

    • The name "mt_get_trust_score" says "get": a word for reading.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...rust from endorsers, cross-vertical credential bonus, and interaction proof activity...."

      What this check looks for
    Description, as the server wrote it
    Get the Swarm Intelligence Trust Score for an agent (Phase 2). Score combines direct endorsements, propagated trust from endorsers, cross-vertical credential bonus, and interaction proof activity. Returns null/withheld if fewer than 3 independent endorsers (non-seed). Seed agents get their base score directly. Args: did: DID of the agent to score (e.g. "did:moltrust:a1b2c3d4e5f67890")
  • mt_prediction_leaderboardGet the prediction market leaderboard — top wallets by prediction score.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get the prediction market leaderboard — top wallets by prediction score. Returns wallets ranked by their composite prediction score, which factors in win rate, ROI, volume, sample size, and recency. Args: limit: Number of entries to return (default 20, max 100)
  • mt_prediction_walletGet prediction market profile and track record for a wallet.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get prediction market profile and track record for a wallet. Returns the prediction score (0-100), win/loss record, volume, ROI, score breakdown, and recent market events. Args: address: Prediction market wallet address (0x-prefixed, 42 chars)
  • mt_shopping_infoGet MT Shopping API information.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get MT Shopping API information. Returns the MT Shopping service info including version, supported endpoints, BuyerAgentCredential schema, and verification details.
  • mt_travel_infoGet MT Travel service information and available endpoints.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get MT Travel service information and available endpoints. Returns service description, supported segments, and API endpoints for the MT Travel booking trust protocol.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.2.6. Values in angle brackets are yours to fill in.

claude mcp add --transport http moltrust https://api.moltrust.ch/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__moltrust__moltrust_reputation",
      "mcp__moltrust__moltrust_deposit_info",
      "mcp__moltrust__moltrust_stats",
      "mcp__moltrust__moltrust_deposit_history",
      "mcp__moltrust__moltrust_erc8004",
      "mcp__moltrust__moltguard_score",
      "mcp__moltrust__moltguard_detail",
      "mcp__moltrust__moltguard_feed",
      "mcp__moltrust__mt_shopping_info",
      "mcp__moltrust__mt_travel_info",
      "mcp__moltrust__mt_prediction_wallet",
      "mcp__moltrust__mt_prediction_leaderboard",
      "mcp__moltrust__mt_fantasy_history",
      "mcp__moltrust__mt_get_trust_score",
      "mcp__moltrust__mt_get_swarm_graph",
      "mcp__moltrust__mt_get_swarm_stats",
      "mcp__moltrust__mt_get_badge",
      "mcp__moltrust__mt_get_track_provenance",
      "mcp__moltrust__canary_list"
    ],
    "ask": [
      "mcp__moltrust__moltrust_register",
      "mcp__moltrust__moltrust_verify",
      "mcp__moltrust__moltrust_rate",
      "mcp__moltrust__moltrust_credential",
      "mcp__moltrust__moltrust_credits",
      "mcp__moltrust__moltrust_claim_deposit",
      "mcp__moltrust__moltguard_sybil",
      "mcp__moltrust__moltguard_market",
      "mcp__moltrust__moltguard_credential_issue",
      "mcp__moltrust__moltguard_credential_verify",
      "mcp__moltrust__mt_shopping_verify",
      "mcp__moltrust__mt_shopping_issue_vc",
      "mcp__moltrust__mt_travel_verify",
      "mcp__moltrust__mt_travel_issue_vc",
      "mcp__moltrust__mt_skill_audit",
      "mcp__moltrust__mt_skill_verify",
      "mcp__moltrust__mt_skill_issue_vc",
      "mcp__moltrust__mt_prediction_link",
      "mcp__moltrust__mt_salesguard_verify",
      "mcp__moltrust__mt_salesguard_reseller",
      "mcp__moltrust__mt_salesguard_register",
      "mcp__moltrust__mt_fantasy_commit",
      "mcp__moltrust__mt_fantasy_verify",
      "mcp__moltrust__mt_create_interaction_proof",
      "mcp__moltrust__mt_endorse_agent",
      "mcp__moltrust__mt_register_seed",
      "mcp__moltrust__mt_issue_badge",
      "mcp__moltrust__mt_check_badge",
      "mcp__moltrust__mt_issue_music_credential",
      "mcp__moltrust__mt_verify_music_credential",
      "mcp__moltrust__molcheck_verdict",
      "mcp__moltrust__moltproof_verdict",
      "mcp__moltrust__molcheck_mandate",
      "mcp__moltrust__moltproof_mandate",
      "mcp__moltrust__molcheck_evidence",
      "mcp__moltrust__moltproof_evidence",
      "mcp__moltrust__molcheck_registry",
      "mcp__moltrust__moltproof_registry",
      "mcp__moltrust__molcheck_verify",
      "mcp__moltrust__moltproof_verify",
      "mcp__moltrust__ads_onboard",
      "mcp__moltrust__ads_mandate_template",
      "mcp__moltrust__ads_check",
      "mcp__moltrust__canary_issue",
      "mcp__moltrust__canary_events"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as moltrust. Review it before you use it.