Skip to content

io.tooloracle/trustlayer

by tooloracle.io · remote · no sign-in to list tools · v1.0.0 · published by io.tooloracle

FeedOracle Trust Layer - 10-tool cross-server trust: signing, anchoring, verification.

Changes · 7

10 tools: 7 change things and 3 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http trustlayer https://tooloracle.io/trust/mcp/

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

10 tools

Changes things 7Claude Code: ask
  • confidence_gateDecision gate for agents: should I proceed, exercise caution, abstain, or escalate?No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Decision gate for agents: should I proceed, exercise caution, abstain, or escalate? Evaluates multi-factor confidence for a specific action type (cite, trade, report, recommend) against a threshold.
  • evidence_anchorWITHDRAWN (2026-08-09).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    WITHDRAWN (2026-08-09). This tool does not submit any blockchain transaction and creates no on-chain anchor or proof; it returns a non-success withdrawal notice.
  • freshness_guardCheck if data is current, stale, or expired.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Check if data is current, stale, or expired. Prevents agent decisions based on outdated information. Configurable max age threshold.
  • hallucination_checkCompare an agent's statement against ground truth evidence.No findings

    Why it is in this group

    • The description's first verb is "compare": a word for reading.
    • The input takes a statement or command to run (input.statement), which can change anything it can reach.
    Description, as the server wrote it
    Compare an agent's statement against ground truth evidence. Detects factual mismatches and dangerous hallucination patterns (absolute language, suspect claims). Returns evidence checks and red flags.
  • provenance_traceFull data provenance chain — traces every data point from external source (CoinGecko, ESMA, on-chain) through FeedOracle processing to final delivery.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Full data provenance chain — traces every data point from external source (CoinGecko, ESMA, on-chain) through FeedOracle processing to final delivery. Each step individually hashed. Supports EU AI Act Art. 13 transparency requirements.
  • verify_claimVerify an agent's claim against FeedOracle signed evidence.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Verify an agent's claim against FeedOracle signed evidence. Checks if a statement (e.g. 'USDC market cap is $32B') matches live, cryptographically signed data. Returns verified/partially_verified/unverified with confidence score and recommended action.
  • verify_signatureWITHDRAWN (2026-08-09).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    WITHDRAWN (2026-08-09). This tool performs no cryptographic signature verification and returns a non-success withdrawal notice. A hash comparison is not signature verification.
Only reads 3Claude Code: allow
  • agent_reputationGet trust score and reputation for an AI agent from FeedOracle KYA (Know Your Agent) system.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get trust score and reputation for an AI agent from FeedOracle KYA (Know Your Agent) system. Returns trust level (UNVERIFIED → CERTIFIED), score (0-100), and registration details.
  • get_signed_factWITHDRAWN (2026-08-09).No findings

    Why it is in this group

    • The name "get_signed_fact" says "get": a word for reading.
    Description, as the server wrote it
    WITHDRAWN (2026-08-09). This tool does not produce or verify a cryptographic signature and returns a non-success withdrawal notice. Do not rely on it for signed evidence.
  • trust_statusTrust Layer infrastructure health, capabilities, and component status.No findings

    Why it is in this group

    • The name "trust_status" says "status": a word for reading.
    Description, as the server wrote it
    Trust Layer infrastructure health, capabilities, and component status. Shows which verification services are online and what the Trust Layer can do.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http trustlayer https://tooloracle.io/trust/mcp/

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__trustlayer__get_signed_fact",
      "mcp__trustlayer__agent_reputation",
      "mcp__trustlayer__trust_status"
    ],
    "ask": [
      "mcp__trustlayer__verify_claim",
      "mcp__trustlayer__provenance_trace",
      "mcp__trustlayer__freshness_guard",
      "mcp__trustlayer__hallucination_check",
      "mcp__trustlayer__verify_signature",
      "mcp__trustlayer__confidence_gate",
      "mcp__trustlayer__evidence_anchor"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as trustlayer. Review it before you use it.