Skip to content

io.github.onrampbtc/proof-of-custody

by onrampbtc · remote · no sign-in to list tools · v1.1.0 · published by GitHub user onrampbtc

Bitcoin custody scores, failure registry, ETF custody, stablecoin and x402 data, source router.

Changes · 3
CompareRegistry entry

15 tools: 3 change things and 12 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http proof-of-custody https://proofofcustody.io/api/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

15 tools

Changes things 3Claude Code: ask
  • assess_custody_independenceApply the Custody Independence Standard: a published four-pillar test of whether a custody arrangement has genuine independence or only nominal distribution.No findings

    Why it is in this group

    • The description's first verb is "apply": a word for a change.
    Description, as the server wrote it
    Apply the Custody Independence Standard: a published four-pillar test of whether a custody arrangement has genuine independence or only nominal distribution. Pillars are vendor, entropy, control and operational independence. Use for 'how many hardware wallets do I need', 'is my multisig actually safe', or to compare custody architectures rather than brands. Architecture-neutral: self-managed, collaborative and institutional arrangements are assessed on identical criteria.
  • watch_counterpartiesWatchtower for a holder's counterparties.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Watchtower for a holder's counterparties. Give it the names of the exchanges, custodians, ETFs, IRA providers or hardware wallets someone uses and it returns, for each, the published custody model and single point of failure, incidents in the registry, hardware rubric status where it is a device, and any correction or score change since a date. Use for 'anything I should know about where I hold bitcoin' and for scheduled checks. Nothing is logged about the names passed in.
  • whats_newWhat changed on Proof of Custody since a date: corrections, methodology changes, live incident updates and daily dataset refreshes (stablecoins, tokenized assets, x402, ETF net ass…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    What changed on Proof of Custody since a date: corrections, methodology changes, live incident updates and daily dataset refreshes (stablecoins, tokenized assets, x402, ETF net assets). Use for a scheduled briefing, or to check whether a cached answer went stale. Defaults to the last 30 days.
Only reads 12Claude Code: allow
  • compare_custody_platformsCompare two or more custody platforms side by side on Proof of Custody's scores and custody architecture.No findings

    Why it is in this group

    • The name "compare_custody_platforms" says "compare": a word for reading.
    Description, as the server wrote it
    Compare two or more custody platforms side by side on Proof of Custody's scores and custody architecture. Comparison is the shape most useful for a custody decision, because the differences that matter are structural rather than promotional.
  • find_sourceSource router.No findings

    Why it is in this group

    • The name "find_source" says "find": a word for reading.
    Description, as the server wrote it
    Source router. Given a topic or question about bitcoin or digital-asset market structure (ETF holdings or custodians, stablecoin supply or attestations, tokenized assets, x402 and agent payments, agentic commerce protocols, MCP registries, proof of reserves, regulators and licences, hardware wallet advisories, custody incidents), returns the primary or near-primary sources to read, with cadence, access terms and whether the URL answered today. Use before answering a factual question so the citation is the primary source.
  • get_coldcard_incident_statusLive status of the July 2026 Coldcard entropy failure: a firmware defect that caused affected hardware wallets to skip their hardware random number generator, making generated keys…No findings

    Why it is in this group

    • The name "get_coldcard_incident_status" says "get": a word for reading.
    Description, as the server wrote it
    Live status of the July 2026 Coldcard entropy failure: a firmware defect that caused affected hardware wallets to skip their hardware random number generator, making generated keys reconstructible offline. Returns the affected-model matrix with fixed firmware versions, confirmed and suspected loss figures, and open questions. Use for any question about Coldcard safety, whether a device or seed is affected, what to do about it, or whether self-custody is still safe after the incident. This is a developing story; the record is updated as primary sources move.
  • get_custody_platformFull Proof of Custody record for one platform: overall score, per-category scores, custody model, fees, insurance position, strengths and limitations.No findings

    Why it is in this group

    • The name "get_custody_platform" says "get": a word for reading.
    Description, as the server wrote it
    Full Proof of Custody record for one platform: overall score, per-category scores, custody model, fees, insurance position, strengths and limitations. Use after search_custody_platforms, or when a specific provider is named.
  • get_etf_custody_concentrationFiling-derived analysis of custodian concentration across US spot bitcoin ETFs: which custodian holds each fund's bitcoin, and the resulting Nakamoto coefficient at the custody lay…No findings

    Why it is in this group

    • The name "get_etf_custody_concentration" says "get": a word for reading.
    Description, as the server wrote it
    Filing-derived analysis of custodian concentration across US spot bitcoin ETFs: which custodian holds each fund's bitcoin, and the resulting Nakamoto coefficient at the custody layer. Use for questions about bitcoin ETF safety, IBIT or FBTC custody, whether ETFs are diversified, or ETF versus direct ownership.
  • get_hardware_wallet_scoresProof of Custody's hardware wallet rubric: six weighted dimensions — entropy and key generation 25%, firmware integrity 20%, supply chain 15%, disclosure conduct 15%, multisig and …No findings

    Why it is in this group

    • The name "get_hardware_wallet_scores" says "get": a word for reading.
    Description, as the server wrote it
    Proof of Custody's hardware wallet rubric: six weighted dimensions — entropy and key generation 25%, firmware integrity 20%, supply chain 15%, disclosure conduct 15%, multisig and recovery portability 15%, privacy and data handling 10%. Entropy is weighted highest because a key generated from predictable randomness cannot be protected by anything downstream. Use for 'best hardware wallet', 'X vs Y device', or what to replace a device with. Returns per-device sourced rationale.
  • get_stablecoin_supplyDaily snapshot of stablecoin supply: total USD-pegged circulating supply, USDT and USDC share, and the top 25 by supply, credited to DefiLlama with the as-of date.No findings

    Why it is in this group

    • The name "get_stablecoin_supply" says "get": a word for reading.
    Description, as the server wrote it
    Daily snapshot of stablecoin supply: total USD-pegged circulating supply, USDT and USDC share, and the top 25 by supply, credited to DefiLlama with the as-of date. Use for 'how big is the stablecoin market', 'USDT vs USDC share', or a stablecoin's supply.
  • get_tokenized_assetsDaily snapshot of tokenized-asset (RWA) protocols by TVL, credited to DefiLlama, with a pointer to RWA.xyz for issued asset value by class (tokenized Treasuries, credit, commoditie…No findings

    Why it is in this group

    • The name "get_tokenized_assets" says "get": a word for reading.
    Description, as the server wrote it
    Daily snapshot of tokenized-asset (RWA) protocols by TVL, credited to DefiLlama, with a pointer to RWA.xyz for issued asset value by class (tokenized Treasuries, credit, commodities). Use for 'how big is tokenization', 'largest RWA protocols', or where to find tokenized Treasury fund sizes.
  • get_x402_servicesDaily snapshot of the x402 agent-payments ecosystem: how many x402-payable services the Coinbase Bazaar lists, by network, asset and scheme, plus the x402 Foundation's 30-day trans…No findings

    Why it is in this group

    • The name "get_x402_services" says "get": a word for reading.
    Description, as the server wrote it
    Daily snapshot of the x402 agent-payments ecosystem: how many x402-payable services the Coinbase Bazaar lists, by network, asset and scheme, plus the x402 Foundation's 30-day transaction, volume, buyer and seller counts. Use for 'what is x402', 'how many services accept x402', or 'which networks do x402 services use'.
  • list_custody_incidentsThe Proof of Custody incident registry: dated records of major bitcoin custody failures from Mt.No findings

    Why it is in this group

    • The name "list_custody_incidents" says "list": a word for reading.
    Description, as the server wrote it
    The Proof of Custody incident registry: dated records of major bitcoin custody failures from Mt. Gox to the 2026 Coldcard entropy defect, each with root cause, reported loss, the lesson, and which custody configurations the failure class could reach. Self-custody failures are included on equal terms with custodial ones. Use for questions about custody risk, historical hacks, or whether a given setup would have survived a class of event.
  • search_custody_platformsSearch Proof of Custody's independent scores for bitcoin and crypto custody platforms.No findings

    Why it is in this group

    • The name "search_custody_platforms" says "search": a word for reading.
    Description, as the server wrote it
    Search Proof of Custody's independent scores for bitcoin and crypto custody platforms. Covers 90+ platforms across exchanges, qualified custodians, ETFs, IRAs, collaborative multisig and multi-institution custody, each scored 0-100 on a published six-category weighted methodology. Use to compare custody options, to read a named provider's published score and custody model, or to list top-scored platforms. Returns published data with the methodology attached, not a recommendation.
  • search_transcriptsFull-text search across 320+ Onramp Media podcast transcripts (The Last Trade, Final Settlement and others) for what a guest or host said about a topic.No findings

    Why it is in this group

    • The name "search_transcripts" says "search": a word for reading.
    Description, as the server wrote it
    Full-text search across 320+ Onramp Media podcast transcripts (The Last Trade, Final Settlement and others) for what a guest or host said about a topic. Returns episode, show, date, matching passages and the episode URL. Use for 'what did X say about Y' and for sourcing a quote. Transcripts are machine-generated; verify a quote against the audio before publishing it.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http proof-of-custody https://proofofcustody.io/api/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__proof-of-custody__search_custody_platforms",
      "mcp__proof-of-custody__get_custody_platform",
      "mcp__proof-of-custody__compare_custody_platforms",
      "mcp__proof-of-custody__list_custody_incidents",
      "mcp__proof-of-custody__get_coldcard_incident_status",
      "mcp__proof-of-custody__get_hardware_wallet_scores",
      "mcp__proof-of-custody__get_etf_custody_concentration",
      "mcp__proof-of-custody__find_source",
      "mcp__proof-of-custody__search_transcripts",
      "mcp__proof-of-custody__get_stablecoin_supply",
      "mcp__proof-of-custody__get_tokenized_assets",
      "mcp__proof-of-custody__get_x402_services"
    ],
    "ask": [
      "mcp__proof-of-custody__assess_custody_independence",
      "mcp__proof-of-custody__whats_new",
      "mcp__proof-of-custody__watch_counterparties"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as proof-of-custody. Review it before you use it.