Skip to content

PriorSeal

by imokokok · remote · no sign-in to list tools · v0.1.1 · published by GitHub user imokokok

Bounded authorization and independently verifiable execution evidence for agents.

Changes · 5
CompareRegistry entry

10 tools: 5 change things and 5 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http priorseal https://priorseal.xyz/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

10 tools

Changes things 5Claude Code: ask
  • priorseal_accept_authorizationVerify and persist a principal-signed authorization.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Verify and persist a principal-signed authorization. This can consume configured Agent credits and changes service state; send an idempotency key. It never signs, submits, or executes a transaction.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • priorseal_observe_executionPersist an observation request for an already-submitted EVM or Solana transaction, then issue evidence when configured observation completes.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Persist an observation request for an already-submitted EVM or Solana transaction, then issue evidence when configured observation completes. This can consume configured Agent credits; send an idempotency key. It never broadcasts a transaction.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • priorseal_prepare_authorizationCanonicalize a bounded authorization and return the exact EIP-712 typed data or Solana message for a human-controlled principal to sign.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Canonicalize a bounded authorization and return the exact EIP-712 typed data or Solana message for a human-controlled principal to sign. This is read-only and never signs, submits, or executes a transaction.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • priorseal_prepare_controlled_executionPrepare a bounded authorization together with the deployment capabilities and a safe, explicit handoff plan.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Prepare a bounded authorization together with the deployment capabilities and a safe, explicit handoff plan. A human-controlled principal must still sign; this never accepts an authorization, signs, submits, or executes a transaction.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • priorseal_verify_receiptConvenience-verify a PriorSeal receipt with the deployment key registry.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Convenience-verify a PriorSeal receipt with the deployment key registry. Independent local verification remains required for trust decisions.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 5Claude Code: allow
  • priorseal_get_authorizationRead an accepted authorization by its identifier.No findings

    Why it is in this group

    • The name "priorseal_get_authorization" says "get": a word for reading.
    Description, as the server wrote it
    Read an accepted authorization by its identifier.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • priorseal_get_capabilitiesRead the live PriorSeal deployment capabilities before constructing a workflow.No findings

    Why it is in this group

    • The name "priorseal_get_capabilities" says "get": a word for reading.
    Description, as the server wrote it
    Read the live PriorSeal deployment capabilities before constructing a workflow.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • priorseal_get_evidence_bundleExport the portable receipt evidence bundle and issuer key-discovery metadata.No findings

    Why it is in this group

    • The name "priorseal_get_evidence_bundle" says "get": a word for reading.
    Description, as the server wrote it
    Export the portable receipt evidence bundle and issuer key-discovery metadata.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • priorseal_get_observation_jobRead the durable status of an automatic finality-observation job.No findings

    Why it is in this group

    • The name "priorseal_get_observation_job" says "get": a word for reading.
    Description, as the server wrote it
    Read the durable status of an automatic finality-observation job.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • priorseal_get_receiptRead a signed execution receipt by its identifier.No findings

    Why it is in this group

    • The name "priorseal_get_receipt" says "get": a word for reading.
    Description, as the server wrote it
    Read a signed execution receipt by its identifier.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http priorseal https://priorseal.xyz/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__priorseal__priorseal_get_capabilities",
      "mcp__priorseal__priorseal_get_authorization",
      "mcp__priorseal__priorseal_get_observation_job",
      "mcp__priorseal__priorseal_get_receipt",
      "mcp__priorseal__priorseal_get_evidence_bundle"
    ],
    "ask": [
      "mcp__priorseal__priorseal_prepare_authorization",
      "mcp__priorseal__priorseal_prepare_controlled_execution",
      "mcp__priorseal__priorseal_accept_authorization",
      "mcp__priorseal__priorseal_observe_execution",
      "mcp__priorseal__priorseal_verify_receipt"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as priorseal. Review it before you use it.