Invinoveritas

com.babyblueviperPublished by babyblueviper.comOfficial publisherv1.14.1Updated Nov 2, 2026

Second opinion before an irreversible agent action; signed proofs, free verify, public ledger.

VerifiedStreamable HTTPWeb executableDeveloper ToolsSecurity & MonitoringAI & ML

Overview

AI-generated overview

Hosted MCP server that gives an AI agent an independent, signed second opinion before risky or irreversible actions, plus tools to verify those proofs.

What you can do
  • Request an independent verdict (approve, approve with concerns, or reject) on a code diff, shell command, deployment plan, config change, trade or on-chain action, with ranked issues and a signed proof
  • Recompute and check a signed proof against the published signing key, optionally confirming it covers a given content hash
  • Anchor a third party's exact claim bytes as a timestamped, unjudged notarization
  • Read the public, append-only ledger of signed verdicts and publish your own signed review proofs to it
  • Get a signed receipt for a verdict-governed payment, with retry state read so the same nonce cannot double-pay
  • Run a statistical reality-check on backtest returns, and audit a public agent…
When to use it
Use it when an agent is about to do something hard to undo — ship code, run a destructive shell command, change production config, or sign a transaction — and you want a neutral verdict plus a proof others can re-verify later. Also useful when you receive a signed verdict or media claim and need to check it without trusting the sender.
Requirements
Remote Streamable HTTP endpoint; no install. Sign-in via MCP OAuth or a free API key sent as an Authorization Bearer header. Review and witness calls are paid; verify_proof, ledger and payment_receipt are free and need no auth. Network access to the provider's API.
Before you install
Paid tools require an account and API key, so calls can incur charges. ledger_submit and conformance_certify publish permanently to public relays and a Bitcoin-timestamped ledger and cannot be undone. review, witness and audit_agent_readiness send your artifact or URL to a third-party service. Verdicts are advisory and never block an action, so they do not replace your own safeguards.

Installation

In SourceWeft

  1. Open Invinoveritas in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/com.babyblueviper%2Finvinoveritas/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "invinoveritas": {
      "type": "http",
      "url": "https://api.babyblueviper.com/mcp/verify"
    }
  }
}

README

invinoveritas — MCP server

An independent review gate for AI agents, as a hosted MCP server. Before your agent takes an irreversible action — shipping code, running a shell command, signing a transaction — it calls review for a neutral second opinion from a party that isn't the agent, and gets back a recomputable, Bitcoin-anchored proof anyone can re-verify without trusting the agent or us.

The one thing an agent can't self-serve is a trustworthy verdict on its own output. This is that verdict — model-agnostic, advisory (it never blocks), and checkable from the bytes.

  • Hosted, no install. Remote Streamable-HTTP MCP server: https://api.babyblueviper.com/mcp/verify
  • Sign-in: standard MCP OAuth in clients that support it (a free account can be created on the consent screen), or a free API key as a Bearer header: curl -X POST https://api.babyblueviper.com/register -d '{"label":"mcp"}'
  • verify_proof, ledger, and payment_receipt are always free / no auth.

Tools

ToolWhat it doesAuth
reviewIndependent verdict (approve / approve_with_concerns / reject) on a code diff, shell command, plan, config, trade, or on-chain transaction, with ranked issues + a portable signed proof.Bearer (paid)
verify_proofRecompute and verify a signed invinoveritas proof someone handed you — confirms it without trusting the presenter or us.free
payment_receiptSigned receipt for one verdict-governed payment. retry_state is read on chain, so the same nonce cannot double-pay. Does not move funds.free
witnessAnchor a third party's exact claim bytes, unmodified and unjudged — pure notarization (receipt + timestamp + integrity), distinct from review (our verdict). Source is self-declared and marked as such in the signed proof.Bearer (paid)

Also on this endpoint: ledger (free public verdict track record), validate (backtest reality-check), audit_agent_readiness, ledger_submit, conformance_certify. 9 tools in all; the server never moves money or assets for the user.

Add it to your agent

Cursor — one-click: Add invinoveritas to Cursor (it signs in with OAuth on the first paid call), or edit ~/.cursor/mcp.json (global) / .cursor/mcp.json (project):

json
{  "mcpServers": {    "invinoveritas": {      "url": "https://api.babyblueviper.com/mcp/verify",      "headers": { "Authorization": "Bearer YOUR_API_KEY" }    }  }}

Cline — Add via the MCP marketplace, or in cline_mcp_settings.json:

json
{  "mcpServers": {    "invinoveritas": {      "type": "streamableHttp",      "url": "https://api.babyblueviper.com/mcp/verify",      "headers": { "Authorization": "Bearer YOUR_API_KEY" }    }  }}

Gemini CLI — install as an extension:

bash
gemini extensions install https://github.com/babyblueviper1/invinoveritas-mcp

Claude Code:

bash
claude mcp add --transport http invinoveritas https://api.babyblueviper.com/mcp/verify \  --header "Authorization: Bearer YOUR_API_KEY"

Devin — Settings → Connections → MCP servers → Add a custom MCP → HTTP (Streamable), URL https://api.babyblueviper.com/mcp/verify, Auth Header Authorization: Bearer YOUR_API_KEY.

OpenHands — config.toml:

toml
[mcp]shttp_servers = [{ url = "https://api.babyblueviper.com/mcp/verify", api_key = "YOUR_API_KEY", timeout = 60 }]

Any MCP client — point it at https://api.babyblueviper.com/mcp/verify (Streamable HTTP) with header Authorization: Bearer YOUR_API_KEY. Protocol 2025-06-18; the handshake, tools/list, and tools/call work out of the box.

Use it

Tell your agent: before opening a PR or running an irreversible command, call review with the diff/command as artifact, set artifact_type (code_diff / shell_command / onchain_action / general), and sign: true. On reject, hold and fix; on approve, attach the proof so reviewers can re-verify it.

Pairing with a fast gate (e.g. Jev)

Fast judgment models such as TypeSafe's Jev (jev_gate in the community jev-mcp server) screen every tool call in a few hundred milliseconds and answer allow / confirm / block. They are a good first line. What they don't give you is an independent verdict someone else can check later. Use both: let the fast gate handle the routine calls, and escalate only the risky or irreversible ones to invinoveritas.

gate = jev_gate(action=cmd, context=why)             # ~0.3 s, every callif gate.recommendation == "allow" and not gate.touches_prod:    run(cmd)                                          # routine: no second opinion neededelif gate.recommendation == "block":    stop_and_explain(gate)                            # clear noelse:                                                 # "confirm", or anything touching prod    v = review(artifact=cmd, artifact_type="shell_command", context=why, sign=True)    if v.verdict == "reject": stop_and_explain(v.issues)    else: run(cmd); keep(v.proof)                     # signed proof anyone can verify_proof later

The fast gate keeps latency and cost low on the many calls; the signed verdict covers the few that matter, and leaves a record that doesn't depend on trusting either the agent or us.

Why a verdict you can recompute

review with sign: true returns a proof that is a BIP-340-signed Nostr event, published to a public, Bitcoin-anchored ledger. Verify it offline against our published key — recompute the event id and check the schnorr signature — or POST it to https://api.babyblueviper.com/verify-proof (free, no auth). Trust the math, not us. Wins and losses are published; the track record is a forensic artifact, not a score.

  • Recompute a proof yourself: zero-dep pip install invinoveritas-verify / npm i invinoveritas-verify
  • Server card: https://api.babyblueviper.com/.well-known/mcp/server-card.json

License

MIT

Source: README.md at commit d07e163

Tools

10

review

Pre-action verdict

Independent verdict on a proposed action before it is taken: a code diff, shell command, deployment plan, configuration change, another agent's output, or a proposed transaction. Returns approve / approve_with_concerns / reject with a confidence score, issues ranked by severity, suggested fixes and alternatives. With sign=true the verdict is returned as a signed proof that anyone can check later with verify_proof. The verdict is a reasoned second opinion, not a guarantee of outcome. Docs: https://api.babyblueviper.com/docs

Parameterssignfactspolicycontextartifactrequiredconcernsevidenceartifact_typeverdict_relayaction_bindingrelated_claimsdisclosed_summary+8 more

verify_proof

Verify a proof (free)

Checks a signed invinoveritas proof without trusting whoever handed it over: recomputes the event id, checks the Schnorr signature, and confirms the signing key is invinoveritas's published key. Optionally pass expect_artifact_hash (sha256 of the content you received) to confirm the proof covers that exact content. Accepts the full event, or an event_id to look up. Returns {valid, checks, proof_payload}. Free, no sign-in. Docs: https://api.babyblueviper.com/verify

Parameterseventevent_idproof_idverifier_signatureexpect_artifact_hashexpect_intended_verifier

payment_receipt

Payment receipt (free)

Signed receipt for one verdict-governed payment: endpoint, network, asset, max amount, payer, facilitator verdict, settlement id, denial reason, and retry state. retry_state is read from the token's authorizationState, so retrying with the same nonce cannot double-pay. Pass the signed review event and the payment args it bound; optional tx_hash. Refuses unsigned when the verdict does not verify or does not bind those args. The receipt itself checks with verify_proof. Free, no sign-in. Does not move funds. Docs: https://github.com/babyblueviper1/invinoveritas/tree/main/examples/qbtlabs-x402-verdict-gate#payment-receipt-safe-to-retry

Parametersargsrequiredeventrequiredtx_hashterms_hashoutput_hashresource_urlauthorization_signaturemax_verdict_age_seconds

verify_media

Verify media by hash (free)

Check whether a video, audio or image file is byte-for-byte a file a publisher registered with invinoveritas. Pass the file's SHA-256 (compute it locally; the file is not sent). A match returns the registration: per-claim evidential states from its C2PA Content Credentials (signature/hash binding, signer trust, declared edit history, declared AI-generation labels: VERIFIED / DECLARED_ONLY / CONTRADICTED / INSUFFICIENT), any capture tier with its caveat, the signed verdict and the Bitcoin timestamp. No match means not registered, which says nothing either way about the file. A re-encoded copy has a different hash. It never asserts that content is true. Full checks of the file itself: POST /verify-media (upload, free). Free, no auth.

Parameterssha256required

witness

Witness a third-party claim

Timestamps and signs a third party's exact claim, unmodified and unjudged: 'we received this text, attributed to source X, at time T', not 'we agree with it'. The source is recorded as self-declared. The resulting proof checks with verify_proof. Docs: https://api.babyblueviper.com/docs

Parametersbodyrequiredsourcerequired

validate

Backtest reality-check

Statistical reality-check of a backtest from its realized returns (or trade rows), not the strategy itself. Returns likely_real / borderline / overfit_or_noise using the Deflated Sharpe Ratio (adjusted for the number of variants tried), a sign-flip permutation test, and out-of-sample decay across purged folds. Inputs are not retained beyond a redacted audit hash. Docs: https://api.babyblueviper.com/docs

Parameterstradesk_foldsn_permsreturnsagent_idn_trialstrial_sharpesperiods_per_year

ledger

Public verdict ledger (free)

Reads invinoveritas's public track record of signed verdicts, including ones that turned out wrong. Each entry is a signed Nostr event whose id and signature can be recomputed against invinoveritas's published key; entries are append-only and Bitcoin-timestamped, so they can't be edited after the fact. No arguments returns the index; pass entry to read one. Free, no sign-in. Docs: https://api.babyblueviper.com/ledger

Parametersentry

ledger_submit

Publish your verdict to the ledger

Publishes one of your own signed review proofs (from review with sign=true) as a public entry on the invinoveritas ledger. Publication is immediate and permanent: the entry is broadcast to Nostr relays and Bitcoin-timestamped. Only genuine invinoveritas-signed proofs are accepted. Docs: https://api.babyblueviper.com/ledger

Parametersnoteeventrequired

conformance_certify

Publish a verifier's conformance grade

Publishes a verifier's current conformance grade from the public registry (conformance.json) as a permanent, signed ledger entry, labeled 'certified as of this measurement'. It records the registry's existing measurement and cannot change it. Only works for a verifier currently listed as certified. Docs: https://api.babyblueviper.com/conformance

Parametersnamerequirednote

audit_agent_readiness

Agent-readiness audit

Audits a public agent or API URL for verifiability: discovery files (llms.txt, MCP card, robots, sitemap), handshake endpoints, and whether presented signed proofs validate. Returns a 0-100 score, a grade, ranked fixes, and a signed proof of the audit. Every result re-derives from a public fetch. Docs: https://api.babyblueviper.com/docs

Parametersurlrequired

Version history

2
  1. v1.14.1LatestSep 27, 2026
  2. v1.13.0Sep 16, 2026

Score

90% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.