FluxProof
by equinoxaifinance-rgb · remote · no sign-in to list tools · v0.2.0 · published by GitHub user equinoxaifinance-rgb
Evidence-bearing public webpage monitoring with hashes, diffs, signed webhooks, REST, and MCP.
6 tools: 3 change things and 3 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things3Claude Code: ask: see these tools
- Only reads3Claude Code: allow: see these tools
4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http fluxproof https://fluxproof.tryneverclosed.com/mcpFindings
Matches of fixed checks, with the text they matched.
The description mentions "credential".
What this check looks forMatched text
description: "...he key is returned once and is a secret credential."
The input schema at properties.api_key.description mentions "credential".
What this check looks forMatched text
inputSchema.properties.api_key.description: "Buyer-owned FluxProof API key; a secret credential."
The input schema at properties.api_key.description mentions "credential".
What this check looks forMatched text
inputSchema.properties.api_key.description: "Buyer-owned FluxProof API key; a secret credential."
The input schema at properties.api_key.description mentions "credential".
What this check looks forMatched text
inputSchema.properties.api_key.description: "Buyer-owned FluxProof API key; a secret credential."
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
6 tools
Changes things 3Claude Code: ask
fluxproof_check_nowRun a monitor now and return a source- and hash-bound change receipt.1 finding
Why it is in this group
- The description's first verb is "run": a word for a change.
Findings
- Info
The input schema at properties.api_key.description mentions "credential".
What this check looks forMatched text
inputSchema.properties.api_key.description: "Buyer-owned FluxProof API key; a secret credential."
Description, as the server wrote it Run a monitor now and return a source- and hash-bound change receipt. Consumes check quota, stores a receipt and may deliver a configured webhook. Not an idempotent read.
Annotations the server declares
- title: Check a watched page now
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
fluxproof_create_monitorCreate a monitor using a buyer-owned FluxProof API key.1 finding
Why it is in this group
- The name "fluxproof_create_monitor" says "create": a word for a change.
Findings
- Info
The input schema at properties.api_key.description mentions "credential".
What this check looks forMatched text
inputSchema.properties.api_key.description: "Buyer-owned FluxProof API key; a secret credential."
Description, as the server wrote it Create a monitor using a buyer-owned FluxProof API key. Creates persistent state and performs a baseline check, consuming quota. Not idempotent: each call creates a new monitor.
Annotations the server declares
- title: Start watching a page
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
fluxproof_get_free_keyCreate a free FluxProof API key: one page, checked daily, for 30 days, no card.1 finding
Why it is in this group
- The name "fluxproof_get_free_key" says "get": a word for reading.
- The description's first verb is "create": a word for a change.
Findings
- Info
The description mentions "credential".
What this check looks forMatched text
description: "...he key is returned once and is a secret credential."
Description, as the server wrote it Create a free FluxProof API key: one page, checked daily, for 30 days, no card. One per network per month. The key is returned once and is a secret credential.
Annotations the server declares
- title: Get a free API key
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: false
Only reads 3Claude Code: allow
fluxproof_list_changesList recent evidence receipts for a monitor.1 finding
Why it is in this group
- The name "fluxproof_list_changes" says "list": a word for reading.
Findings
- Info
The input schema at properties.api_key.description mentions "credential".
What this check looks forMatched text
inputSchema.properties.api_key.description: "Buyer-owned FluxProof API key; a secret credential."
Description, as the server wrote it List recent evidence receipts for a monitor.
Annotations the server declares
- title: List recorded changes
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
fluxproof_offerReturn free and paid boundaries and purchase routes without charging.No findings
Why it is in this group
- The description's first verb is "return": a word for reading.
Description, as the server wrote it Return free and paid boundaries and purchase routes without charging. Returns the free daily plan, the $9 paid pass (30 days paid once; when offered, also $9 a month through the human checkout, cancel any time), the human checkout link and the agent payment route. Example: {}. Reading the offer charges nothing.
Annotations the server declares
- title: Show plans and prices
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
fluxproof_preflightFetch a public URL and return fetchability, size, final URL, title, and content hash without page content or payment.No findings
Why it is in this group
- The description's first verb is "fetch": a word for reading.
Description, as the server wrote it Fetch a public URL and return fetchability, size, final URL, title, and content hash without page content or payment. How it works: given one public page address, FluxProof fetches it once and says whether it can watch it; nothing is created or charged. Example: {"url":"https://example.com/"}.
Annotations the server declares
- title: Check a public page (free)
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 0.2.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http fluxproof https://fluxproof.tryneverclosed.com/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__fluxproof__fluxproof_preflight",
"mcp__fluxproof__fluxproof_offer",
"mcp__fluxproof__fluxproof_list_changes"
],
"ask": [
"mcp__fluxproof__fluxproof_get_free_key",
"mcp__fluxproof__fluxproof_create_monitor",
"mcp__fluxproof__fluxproof_check_now"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as fluxproof. Review it before you use it.
