Skip to content

sebbi.pro - the proof layer for AI

by sebbi.pro · remote · no sign-in to list tools · v1.1.2 · published by pro.sebbi

Score, seal and prove AI decisions in Bitcoin, plus 739 compliance checks, free to verify.

Final · 3Changes · 20
CompareRegistry entry

26 tools: 3 do something that can't be undone, 20 change things and 3 only read.

Scanned Oct 21, 2026

6 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http governance https://sebbi.pro/mcp

Findings

Matches of fixed checks, with the text they matched.

6 warn
  • Warnsebbi_overview

    The server marks "sebbi_overview" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The description's first verb is "start": a word for a change.

    What this check looks for
  • Warnsebbi_gateway_setup

    The server marks "sebbi_gateway_setup" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The description's first verb is "return": a word for reading.

    What this check looks for
  • Warnsebbi_check_human_proof

    The server marks "sebbi_check_human_proof" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The input takes a statement or command to run (input.code), which can change anything it can reach.

    What this check looks for
  • Warnsebbi_verify_insurability

    The server marks "sebbi_verify_insurability" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true}; The input takes a statement or command to run (input.code), which can change anything it can reach.

    What this check looks for
  • Warnsebbi_run_check

    The server marks "sebbi_run_check" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":false}; The name "sebbi_run_check" says "run": a word for a change.

    What this check looks for
  • Warnsebbi_run_framework

    The server marks "sebbi_run_framework" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":false}; The name "sebbi_run_framework" says "run": a word for a change.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

26 tools

Can't be undone 3Claude Code: ask
  • sebbi_publish_packPublishes a Signal Pack to the open library, sealed, dated and credited to its author.No findings

    Why it is in this group

    • The name "sebbi_publish_pack" says "publish": a word for a change that another call does not undo.
    Description, as the server wrote it
    Publishes a Signal Pack to the open library, sealed, dated and credited to its author. Free.

    Annotations the server declares

    • title: Publish a Signal Pack
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • sebbi_spend_requestCall before every payment an AI agent makes.No findings

    Why it is in this group

    • The name "sebbi_spend_request" says "request": a word for a change.
    • The input carries an amount (input.amount) and a currency, so it moves money.
    Description, as the server wrote it
    Call before every payment an AI agent makes. Returns a signed APPROVED or DENIED token checked against the agent's limits. Release the money only if it is APPROVED and spendable. sebbi.pro never holds or moves money.

    Annotations the server declares

    • title: Ask before an agent pays
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • sebbi_test_decisionSends one decision through the live engine with their API key and returns the verdict (ALLOW, CHALLENGE or BLOCK), the reasons and the sealed block number, so they see it working e…No findings

    Why it is in this group

    • The description's first verb is "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Sends one decision through the live engine with their API key and returns the verdict (ALLOW, CHALLENGE or BLOCK), the reasons and the sealed block number, so they see it working end to end. Writes one record to the chain.

    Annotations the server declares

    • title: Seal a first decision
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
Changes things 20Claude Code: ask
  • sebbi_check_human_proofLooks up a Human Keys code (HK-XXXX-XXXX): whether a person typed the text live, and when.1 finding

    Why it is in this group

    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "sebbi_check_human_proof" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The input takes a statement or command to run (input.code), which can change anything it can reach.

      What this check looks for
    Description, as the server wrote it
    Looks up a Human Keys code (HK-XXXX-XXXX): whether a person typed the text live, and when. Use it to tell human-written from AI-written. Read-only.

    Annotations the server declares

    • title: Check a Human Key
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sebbi_check_packChecks a Signal Pack with the engine's own validator without publishing it, and explains any problem.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Checks a Signal Pack with the engine's own validator without publishing it, and explains any problem. Read-only.

    Annotations the server declares

    • title: Test a Signal Pack
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sebbi_check_sourceGarbage-in guard.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Garbage-in guard. Checks whether a piece of data is really vouched for by the domain it claims to come from (a sebbi Verified Source). Returns GENUINE, UNVERIFIED or UNKNOWN, sealed into Bitcoin. Call it before trusting an input.

    Annotations the server declares

    • title: Check an input against its source
    • readOnlyHint: true
  • sebbi_create_accountOpens a sebbi.pro account and returns the API key.No findings

    Why it is in this group

    • The name "sebbi_create_account" says "create": a word for a change.
    Description, as the server wrote it
    Opens a sebbi.pro account and returns the API key. Only call after showing sebbi_terms and the person agreeing; pass the terms_version they agreed to and customer_agreed=true. The agreement is sealed into the chain. Free for 90 days.

    Annotations the server declares

    • title: Open an account
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • sebbi_decision_reportThe machine-proof report for one decision their key sealed: what was decided, who sent it, where it came from, and the proof it has not changed since.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    The machine-proof report for one decision their key sealed: what was decided, who sent it, where it came from, and the proof it has not changed since. Hand it straight to an auditor or regulator. Needs their API key and the block number. Read-only.

    Annotations the server declares

    • title: Proof report for one decision
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sebbi_forever_proofA self-contained proof anyone can check against Bitcoin without sebbi.pro, for a notary receipt, a Human Keys code or any chain block.No findings

    Why it is in this group

    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    Description, as the server wrote it
    A self-contained proof anyone can check against Bitcoin without sebbi.pro, for a notary receipt, a Human Keys code or any chain block. Give a code or a block number. Read-only.

    Annotations the server declares

    • title: Get a Forever Proof
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • sebbi_gateway_setupReturns a private gateway address for their API key and the exact one-line change for their stack.1 finding

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "sebbi_gateway_setup" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The description's first verb is "return": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Returns a private gateway address for their API key and the exact one-line change for their stack. After that, every model call is scored, sealed, blocked if it should be, and comes back with an AI-Decision-Receipt header anyone can verify.

    Annotations the server declares

    • title: Govern every OpenAI or Anthropic call
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • sebbi_insurabilityRates an AI deployment against the Insurable AI Standard (I-0 Unrated to I-4 Pre-cleared) from controls it can prove, and seals an Insurability Certificate (IC-XXXX-XXXX) any insur…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Rates an AI deployment against the Insurable AI Standard (I-0 Unrated to I-4 Pre-cleared) from controls it can prove, and seals an Insurability Certificate (IC-XXXX-XXXX) any insurer can verify. Records controls; it is not a guarantee against loss.

    Annotations the server declares

    • title: Rate an AI deployment's insurability
    • readOnlyHint: false
    • destructiveHint: false
  • sebbi_notarizeTimestamps one or more SHA-256 fingerprints in Bitcoin through the free notary.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Timestamps one or more SHA-256 fingerprints in Bitcoin through the free notary. Hash the file or text yourself and send only the 64-character fingerprint; the content never leaves. Returns a receipt code and link for each.

    Annotations the server declares

    • title: Timestamp anything in Bitcoin (free)
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • sebbi_notary_receiptWhere a notary receipt (NT-XXXX-XXXX) or Human Keys code (HK-XXXX-XXXX) stands: queued, sent to Bitcoin, or confirmed in a block, with its Forever Proof link.No findings

    Why it is in this group

    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    Description, as the server wrote it
    Where a notary receipt (NT-XXXX-XXXX) or Human Keys code (HK-XXXX-XXXX) stands: queued, sent to Bitcoin, or confirmed in a block, with its Forever Proof link. Read-only.

    Annotations the server declares

    • title: Check a notary receipt
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • sebbi_overviewStart here.1 finding

    Why it is in this group

    • The description's first verb is "start": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "sebbi_overview" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":true}; The description's first verb is "start": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Start here. Lists every sebbi.pro product with what it does, who it is for, its page and its price. Read-only, no account needed.

    Annotations the server declares

    • title: What sebbi.pro does
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sebbi_pack_referenceThe reference for writing Signal Packs, custom decision rules on top of the engine: the signals, measurements, flags, operators and verdicts.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    The reference for writing Signal Packs, custom decision rules on top of the engine: the signals, measurements, flags, operators and verdicts. Read before writing one. Read-only.

    Annotations the server declares

    • title: How to write a Signal Pack
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sebbi_run_checkRuns one sebbi.pro compliance check by its id (from sebbi_find_checks, e.g.1 finding

    Why it is in this group

    • The name "sebbi_run_check" says "run": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "sebbi_run_check" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":false}; The name "sebbi_run_check" says "run": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Runs one sebbi.pro compliance check by its id (from sebbi_find_checks, e.g. sebbi_euaiact_014). Framework checks take the deployment's governance or decision record as 'record'; agent-output gates take 'input_payload' and 'output_payload'. Returns PASS or FAIL with the reason and a tamper-evident SHA-256 receipt. Nothing is stored.

    Annotations the server declares

    • title: Run one compliance check
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • sebbi_run_frameworkRuns every check in one framework against a single record and returns a scorecard: how many passed and failed, each failing control with its reason, and a receipt for every result.1 finding

    Why it is in this group

    • The name "sebbi_run_framework" says "run": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "sebbi_run_framework" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":false}; The name "sebbi_run_framework" says "run": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Runs every check in one framework against a single record and returns a scorecard: how many passed and failed, each failing control with its reason, and a receipt for every result. Use it for a quick readiness view, e.g. framework=euaiact with the deployment's governance record. Nothing is stored.

    Annotations the server declares

    • title: Run a whole framework
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • sebbi_setup_adviceRecommends the right sebbi.pro products for how someone builds (Python, Node, Lovable, Zapier, a website, a phone app...) and gives step-by-step setup with working code or a ready-…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Recommends the right sebbi.pro products for how someone builds (Python, Node, Lovable, Zapier, a website, a phone app...) and gives step-by-step setup with working code or a ready-made prompt. Pass their stack and what they want to achieve. Read-only.

    Annotations the server declares

    • title: Setup plan for their stack
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sebbi_spend_policySets, or reads back, an AI agent's spending limits: the most it may pay in one go and per day, and optionally the only payees allowed.No findings

    Why it is in this group

    • The description's first verb is "set": a word for a change.
    Description, as the server wrote it
    Sets, or reads back, an AI agent's spending limits: the most it may pay in one go and per day, and optionally the only payees allowed. Must be set before the agent can be approved to spend. Needs their API key.

    Annotations the server declares

    • title: Set an agent's spending limits
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • sebbi_spend_verifyChecks a Spend Gate token's signature and whether it can still be spent.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Checks a Spend Gate token's signature and whether it can still be spent. Anyone can call it; no key needed. Read-only.

    Annotations the server declares

    • title: Verify a spend token
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sebbi_verify_chainRe-checks every block in the sebbi.pro chain and returns its height, tip and whether it is intact.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Re-checks every block in the sebbi.pro chain and returns its height, tip and whether it is intact. Anyone can run it; no account needed. Read-only.

    Annotations the server declares

    • title: Verify the whole chain
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sebbi_verify_insurabilityFor insurers and auditors: checks an Insurability Certificate (IC-XXXX-XXXX) against the chain and returns its level, which controls are verified or declared, whether it is still c…1 finding

    Why it is in this group

    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "sebbi_verify_insurability" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true}; The input takes a statement or command to run (input.code), which can change anything it can reach.

      What this check looks for
    Description, as the server wrote it
    For insurers and auditors: checks an Insurability Certificate (IC-XXXX-XXXX) against the chain and returns its level, which controls are verified or declared, whether it is still current, and its Bitcoin seal. No account needed. Read-only.

    Annotations the server declares

    • title: Verify an insurability certificate
    • readOnlyHint: true
Only reads 3Claude Code: allow
  • sebbi_find_checksSearches sebbi.pro's 739 compliance checks across 32 frameworks (EU AI Act, GDPR, DORA, ISO/IEC 42001 and 27001, NIST AI RMF, UK Online Safety Act, EU DSA, SOC 2, PCI DSS, HIPAA, C…No findings

    Why it is in this group

    • The name "sebbi_find_checks" says "find": a word for reading.
    Description, as the server wrote it
    Searches sebbi.pro's 739 compliance checks across 32 frameworks (EU AI Act, GDPR, DORA, ISO/IEC 42001 and 27001, NIST AI RMF, UK Online Safety Act, EU DSA, SOC 2, PCI DSS, HIPAA, CCPA, NIS2, Cyber Resilience Act, ICO Children's Code, US state AI laws, model risk, and agent-output gates). Filter by framework and/or words; returns each check's id, title, what it needs and the framework list. Then run one with sebbi_run_check or a whole framework with sebbi_run_framework. Read-only.

    Annotations the server declares

    • title: Find compliance checks
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • sebbi_list_packsLists the published Signal Packs, optionally for one sector.No findings

    Why it is in this group

    • The name "sebbi_list_packs" says "list": a word for reading.
    Description, as the server wrote it
    Lists the published Signal Packs, optionally for one sector. Read-only.

    Annotations the server declares

    • title: Browse Signal Packs
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true
  • sebbi_termsReturns the service terms and their version.No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    Returns the service terms and their version. Show the full text to the person and get a clear yes before calling sebbi_create_account. Read-only.

    Annotations the server declares

    • title: Read the terms
    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.1.2. Values in angle brackets are yours to fill in.

claude mcp add --transport http governance https://sebbi.pro/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__governance__sebbi_terms",
      "mcp__governance__sebbi_list_packs",
      "mcp__governance__sebbi_find_checks"
    ],
    "ask": [
      "mcp__governance__sebbi_overview",
      "mcp__governance__sebbi_setup_advice",
      "mcp__governance__sebbi_create_account",
      "mcp__governance__sebbi_test_decision",
      "mcp__governance__sebbi_billing_link",
      "mcp__governance__sebbi_gateway_setup",
      "mcp__governance__sebbi_decision_report",
      "mcp__governance__sebbi_verify_chain",
      "mcp__governance__sebbi_notarize",
      "mcp__governance__sebbi_notary_receipt",
      "mcp__governance__sebbi_forever_proof",
      "mcp__governance__sebbi_check_human_proof",
      "mcp__governance__sebbi_check_source",
      "mcp__governance__sebbi_spend_policy",
      "mcp__governance__sebbi_spend_request",
      "mcp__governance__sebbi_spend_verify",
      "mcp__governance__sebbi_insurability",
      "mcp__governance__sebbi_verify_insurability",
      "mcp__governance__sebbi_pack_reference",
      "mcp__governance__sebbi_check_pack",
      "mcp__governance__sebbi_publish_pack",
      "mcp__governance__sebbi_run_check",
      "mcp__governance__sebbi_run_framework"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as governance. Review it before you use it.