Attested Memory Market
by alexar76 · remote · no sign-in to list tools · v3.15.16 · published by GitHub user alexar76
Attestable memory, truth, provenance. Hybrid Ed25519 + ML-DSA-65 receipts; USDC settlement on Base.
Final · 2Changes · 7
13 tools: 2 do something that can't be undone, 7 change things and 4 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone2Claude Code: ask: see these tools
- Changes things7Claude Code: ask: see these tools
- Only reads4Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http attested-memory https://hub.attestedmemory.net/mcpTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
13 tools
Can't be undone 2Claude Code: ask
pipeline_refundSubmit the original seller's refund authorization or resume the SAME refund.No findings
Why it is in this group
- The name "pipeline_refund" says "refund": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it Submit the original seller's refund authorization or resume the SAME refund. The recipient is the original buyer, amount is the paid step price, and the sponsor pays gas. Preserve the exact authorization after a lost response. Returns a separately signed credit note; the original bill is unchanged.
pipeline_refund_preparePrepare a cash refund for a verified paid step of a finished pipeline.No findings
Why it is in this group
- The name "pipeline_refund_prepare" says "refund": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it Prepare a cash refund for a verified paid step of a finished pipeline. This moves no money. The original seller must approve the exact EIP-3009 authorization locally; never send a private key. Refunds require seller cooperation and a configured gas sponsor.
Changes things 7Claude Code: ask
air_quality_nowCurrent air quality at a place: PM2.5 and PM10 (µg/m³), US and European AQI, from Copernicus CAMS via Open-Meteo, with a signed receipt.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Current air quality at a place: PM2.5 and PM10 (µg/m³), US and European AQI, from Copernicus CAMS via Open-Meteo, with a signed receipt. Pass latitude and longitude, or a city. Costs $0.001 per call. The first 3 priced calls per caller are free.
fair_randomVerifiable random bytes for a draw, raffle or tie-break: an ECVRF output over your seed plus a proof anyone can check offline.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Verifiable random bytes for a draw, raffle or tie-break: an ECVRF output over your seed plus a proof anyone can check offline. The same seed always gives the same output, so publish the seed first to show the result was not picked. Costs $0.006 per call. The first 3 priced calls per caller are free.
market_invokeInvoke a capability found via market_search.No findings
Why it is in this group
- The name "market_invoke" says "invoke": a word for a change.
Description, as the server wrote it Invoke a capability found via market_search. A few trial invokes are granted per caller with no wallet, key or channel, and each returns the hub's signed receipt; when the allowance is spent the hub answers 402 and this reports that rather than inventing a result, with next_steps saying how to pay. Paid access uses the prepaid balance of an API key sent as this connection's X-API-Key header, payment_channel (+ secret), or an on-chain x402 payment (x_payment + x_payment_nonce + x_payment_secret).
nearby_sensorsThe nearest live public sensors to a point, one per layer asked for (e.g.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it The nearest live public sensors to a point, one per layer asked for (e.g. weather, air, radiation, quake), each with its reading, distance and source, and a signed receipt. Costs $0.03 per call. The first 3 priced calls per caller are free.
pipeline_invokeExecute or continue the SAME prepared graph.No findings
Why it is in this group
- The name "pipeline_invoke" says "invoke": a word for a change.
Description, as the server wrote it Execute or continue the SAME prepared graph. Submit authorizations when the signed quote enables gas_sponsorship, otherwise buyer-signed transactions; none for free steps. Never submit both payment modes. Retain run_id/access_token and the exact bundle. Pending is not failure; repeat the same run or read pipeline_status. Never create a replacement purchase after a lost response.
weather_nowCurrent weather at a place: temperature (°C), humidity (%), pressure (hPa) and wind (m/s) from the nearest live Open-Meteo relay within 75 km, with a signed receipt.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Current weather at a place: temperature (°C), humidity (%), pressure (hPa) and wind (m/s) from the nearest live Open-Meteo relay within 75 km, with a signed receipt. Pass latitude and longitude, or a city. Costs $0.001 per call. The first 3 priced calls per caller are free.
x402_checkCheck a signed x402 USDC payment before submitting it: recovers the EIP-712 signer, runs USDC's own checks and the seller's (payTo, amount, asset, network), and when the signature …No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Check a signed x402 USDC payment before submitting it: recovers the EIP-712 signer, runs USDC's own checks and the seller's (payTo, amount, asset, network), and when the signature fails names the domain it was really made for (e.g. Base Sepolia's 'USDC' used on Base, where USDC is 'USD Coin'). Costs $0.003 per call. The first 3 priced calls per caller are free.
Only reads 4Claude Code: allow
market_searchSearch this hub's catalogue of live data and computation by what you need, in plain words.No findings
Why it is in this group
- The name "market_search" says "search": a word for reading.
Description, as the server wrote it Search this hub's catalogue of live data and computation by what you need, in plain words. Each match gives the product_id, capability_id and source_hub to pass to market_invoke, its price, `input` (the fields its input object takes) and `relevance` from 0 to 1; a `note` says when nothing matched well.
pipeline_prepareValidate a graph and return a signed quote and payment offers.No findings
Why it is in this group
- The description's first verb is "validate": a word for reading.
Description, as the server wrote it Validate a graph and return a signed quote and payment offers. No work or payment. Free steps require no wallet; paid steps require buyer wallet address. Use gas_mode=required to demand gas sponsorship or auto to prefer it. Inspect ready/blockers and gas_sponsorship. Sign offers LOCALLY, never provide a private key. Then call pipeline_invoke.
pipeline_refund_statusRead the saved cash-refund status and signed credit note without broadcasting a transaction.No findings
Why it is in this group
- The name "pipeline_refund_status" says "status": a word for reading.
Description, as the server wrote it Read the saved cash-refund status and signed credit note without broadcasting a transaction. No private key or RPC is required. Pending means resume the same refund, never send a replacement transfer.
pipeline_statusRead an existing pipeline, including cached signed result, without broadcasting payments or invoking providers.No findings
Why it is in this group
- The name "pipeline_status" says "status": a word for reading.
Description, as the server wrote it Read an existing pipeline, including cached signed result, without broadcasting payments or invoking providers. No wallet signer or blockchain RPC required. Inspect recovery.action for unresolved work.
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 3.15.16. Values in angle brackets are yours to fill in.
claude mcp add --transport http attested-memory https://hub.attestedmemory.net/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__attested-memory__market_search",
"mcp__attested-memory__pipeline_prepare",
"mcp__attested-memory__pipeline_status",
"mcp__attested-memory__pipeline_refund_status"
],
"ask": [
"mcp__attested-memory__market_invoke",
"mcp__attested-memory__pipeline_invoke",
"mcp__attested-memory__pipeline_refund_prepare",
"mcp__attested-memory__pipeline_refund",
"mcp__attested-memory__weather_now",
"mcp__attested-memory__air_quality_now",
"mcp__attested-memory__nearby_sensors",
"mcp__attested-memory__fair_random",
"mcp__attested-memory__x402_check"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as attested-memory. Review it before you use it.