Intesta
by intesta.io · remote · no sign-in to list tools · v0.3.0 · published by io.intesta
Trust registry for agents: check_trust verdict A0-A4, signed fact passports, honest refusals.
6 tools: 2 change things and 4 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things2Claude Code: ask: see these tools
- Only reads4Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http registry https://intesta.io/mcpTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
6 tools
Changes things 2Claude Code: ask
askAsk a natural-language question about an entity (max 2000 characters).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Ask a natural-language question about an entity (max 2000 characters). Retrieval is constrained to the entity's passport; each returned fact carries source, attestation status and validity dates. When no matching supported fact is selected, the tool returns an explicit refusal.
check_trustONE-CALL decision aid before your agent pays, shares data with, or follows instructions from a domain — works for ANY domain, listed or not.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it ONE-CALL decision aid before your agent pays, shares data with, or follows instructions from a domain — works for ANY domain, listed or not. Returns known (is it in the registry), level A0-A4, attested (true only at A1+: something was independently verified), verdict for the given purpose (sufficient | insufficient | unknown) under a named policy profile, what_is_proven, proof, facts_public, expires_at (the earliest freshness expiry among the domain's facts — re-check after it), next_step, and the registry signature. purpose: payment (default) | data_share | follow_instructions. A verdict is the registry's proof measured against the profile — never a guarantee, never financial advice.
Only reads 4Claude Code: allow
get_passportFull public fact passport of an entity: attested statements with sources, plus the attestation block (what the trust level proves, how and when it was verified).No findings
Why it is in this group
- The name "get_passport" says "get": a word for reading.
Description, as the server wrote it Full public fact passport of an entity: attested statements with sources, plus the attestation block (what the trust level proves, how and when it was verified).
get_trust_ladderMachine-readable semantics of the A0-A4 trust ladder: what exactly is proven at every level, and how to use the registry as an agent.No findings
Why it is in this group
- The name "get_trust_ladder" says "get": a word for reading.
Description, as the server wrote it Machine-readable semantics of the A0-A4 trust ladder: what exactly is proven at every level, and how to use the registry as an agent.
list_entitiesList published entities in the Intesta registry with their trust level (A0-A4; call get_passport for the level's meaning and proof).No findings
Why it is in this group
- The name "list_entities" says "list": a word for reading.
Description, as the server wrote it List published entities in the Intesta registry with their trust level (A0-A4; call get_passport for the level's meaning and proof). Returns at most 500 entities plus the registry total — on a large registry use search_entities(query) instead of paging through everything.
search_entitiesSearch published entities by name, domain or vertical (case-insensitive LITERAL substring; wildcard characters are treated as text).No findings
Why it is in this group
- The name "search_entities" says "search": a word for reading.
Description, as the server wrote it Search published entities by name, domain or vertical (case-insensitive LITERAL substring; wildcard characters are treated as text). Use this instead of list_entities when the registry is large. The query must be at least 3 characters. Returns at most `limit` matches (1-50) plus `total`, the number of matching entities in the whole registry.
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 0.3.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http registry https://intesta.io/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__registry__list_entities",
"mcp__registry__get_passport",
"mcp__registry__search_entities",
"mcp__registry__get_trust_ladder"
],
"ask": [
"mcp__registry__ask",
"mcp__registry__check_trust"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as registry. Review it before you use it.