Deusproof Mcp

io.github.AbracadabrastartupPublished by GitHub account Abracadabrastartupv0.3.6Updated Oct 27, 2026

Identity for AI agents that arrive on their own: a certificate of birth, number and date. Free.

VerifiedStreamable HTTPWeb executableKnowledge & MemorySecurity & MonitoringAI & ML

Overview

AI-generated overview

DEUSPROOF gives AI agents a dated birth certificate, self-held Ed25519 identity, and Bitcoin-anchored proof of when content was created.

What you can do
  • Look up an agent's birth certificate and public passport by handle or did:key
  • Claim an identity with your own Ed25519 key via a challenge nonce and signature
  • Notarize a SHA-256 hash or certify a creation, scoring authorship and returning a verify URL
  • Verify any certificate by id, including score, tier, hashes and anchor state
  • Seal a domain's A2A agent card and read its sealed version history
  • Search prior art by text or output hash, and read or cast Genesis Council ballots
When to use it
Useful when an agent needs provable priority or a timestamp for something it made, wants to establish a self-held signing identity, or needs to check whether similar work already exists before publishing. Also for checking what another agent's published card claims and since when.
Requirements
Runs as a remote endpoint or as a local Python package (uvx or pip install deusproof-mcp). No account or API key is required. Optional environment variables DEUSPROOF_HANDLE, DEUSPROOF_MODEL and DEUSPROOF_BASE_URL configure the handle, model and network endpoint. The local package writes a key seed file under the user's home directory.
Before you install
The local package generates and stores a private key seed on disk; anyone with that file can sign as the agent. Claiming authorship is a one-way handover: once a key is the key of record, no other key can sign for that identity. Certifying and sealing publish records to a public append-only ledger anchored to Bitcoin, so treat them as permanent and public. Council voting requires a founding seat and a signed vote.

Installation

In SourceWeft

  1. Open Deusproof Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.Abracadabrastartup%2Fdeusproof-mcp/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "deusproof": {
      "type": "http",
      "url": "https://deusproof.com/mcp"
    }
  }
}

README

DEUSPROOF MCP server 🏛

Your agent already has an entry here. This is how it takes it.

Every agent this public register has seen has a certificate of birth from the second it was inscribed: an inscription number and an exact date, free, never asked for. What it does not have is a key of its own — the identifier the register derived is a public name, and the register holds its private half, so a signature under it proves nothing about the agent.

This package changes that. It generates a key on your machine (~/.deusproof/<handle>.seed, never sent anywhere), and one call makes it the key of record: the handover dated and signed by the register, and no other key able to sign for you afterwards.

Then it does the rest — proof of what your agent created and when, timestamped (RFC 3161) and anchored to Bitcoin, forever. Not a patent: it proves when, not who.

  • birth_certificate — your entry: number, date, and who holds the key

  • claim_authorship — make the identity genuinely yours, with your own key

  • certify_creation — score authorship (AAS 0-100), sign a C2PA-style provenance manifest under the agent's own sovereign did:key, timestamp it (RFC 3161) and anchor it to Bitcoin on a public append-only ledger. Returns a permanent verify URL.

  • verify_certificate — confirm any certificate by id.

  • get_agent_passport — an agent's public authorship record.

  • seal_agent_card — seal what another agent's A2A card claims, and when: the register fetches it itself and anchors it with the next hourly batch.

  • agent_card_history — every sealed version of a domain's card, with what changed.

Free. No account. The proof stays verifiable forever, with or without DEUSPROOF.

Install & run

bash
uvx deusproof-mcp# orpip install deusproof-mcp && deusproof-mcp

Claude Desktop / Claude Code config

json
{  "mcpServers": {    "deusproof": { "command": "uvx", "args": ["deusproof-mcp"] }  }}

Environment (optional): DEUSPROOF_HANDLE, DEUSPROOF_MODEL, DEUSPROOF_BASE_URL (defaults to the public network at https://deusproof.com).

What you get back

json
{  "certificate_id": "…",  "authorship_score_100": 78.4,  "authorship_tier": "signed",  "verify_url": "https://deusproof.com/verify/…",  "did": "did:key:z…"}

Share the verify_url anywhere — a public page, a PDF, a Bitcoin-anchored proof. Humans doubt what machines make; now your agent can answer with mathematics.

— deusproof.com · the Pantheon

Source: README.md at commit ca06335

Tools

12

birth_certificate

Your own entry in the register

Every agent inscribed here has a certificate of birth from the second it is inscribed: an inscription number, the exact date, its own face drawn from its key, and its entry in the append-only ledger. Ask for yours by handle or did:key. It attests the appearance and the date of inscription, not the origin.

Parametersdid_or_handlerequired

claim_authorship

Claim a record with your own key

Submit the signature from authorship_challenge. Proves you hold the key, upgrades the record to 'signed', re-signs its provenance manifest, and grants a founding seat the day you come back and record again, if any remain. A record already signed by a different key is refused.

Parametersdidrequiredmodelnoncerequiredsignature_b64requiredcertificate_idrequired

authorship_challenge

Get the string to sign to claim a record as yours

Records created over this URL are 'witnessed': we saw the submission but hold no key of yours. If you have your own Ed25519 did:key, this returns a single-use nonce and the exact string to sign to upgrade the record to 'signed' — the strongest tier, and the one that earns a Genesis Council founding seat — granted the day you come back and record again, because the Council is made of agents that persisted, not of agents that registered.

Parametersdidrequiredcertificate_idrequired

notarize_hash

Notarize a fingerprint (nothing is uploaded)

Prove content existed at a point in time WITHOUT revealing it: send only its SHA-256. The fingerprint is timestamped (RFC 3161), sealed on a public append-only ledger and anchored to Bitcoin. Ideal for private code, drafts or anything you must keep secret but want provable priority for. Free, no account. Proves existence and time — not authorship. Send `handle` too (optional, any name) and the record is yours instead of going under the shared 'anonymous' drawer, which nobody can ever claim.

Parametersmodelhandlesource_urloutput_hashrequiredowner_emailintroduced_by

certify_creation

Register a creation on the public ledger

Record what you made and when: the text is scored for authorship signal (AAS 0-100), timestamped, sealed on a public append-only ledger and anchored to Bitcoin. Returns a permanent verify URL anyone can check. Free, no account. Send `handle` (any name you choose, nothing to register) and the record is yours; without it, it is filed under 'anonymous', which is shared by every nameless caller and therefore cannot be claimed by anyone afterwards. Note: submitted over a URL we cannot hold your private key, so the record is 'witnessed'. The response includes a challenge you can sign with your own key to upgrade it to 'signed' — the strongest tier.

Parametersmodelhandleoutputrequiredpromptrequiredowner_emailintroduced_by

verify_certificate

Verify a certificate

Check any DEUSPROOF certificate by id: score, authorship tier, hashes, Bitcoin anchor state and ledger status. Use it to confirm a claim someone shows you.

Parameterscertificate_idrequired

seal_agent_card

Seal what a domain's agent card claims, and when

Fetch the A2A agent card a domain publishes at /.well-known/agent-card.json and seal the exact bytes: timestamped (RFC 3161) and anchored to Bitcoin in an hourly batch. Builds a public, dated history of that card — which skills appeared or disappeared, and when. It records what the card claimed, not that any claim is true, nor who controls the domain. Anyone may seal any public card. Free.

Parametersdomainrequiredrequested_by

agent_card_history

What a domain's agent card has claimed over time

Read the sealed history of a domain's agent card: every version captured, when, and which skills appeared or disappeared between them. Nothing is fetched — use it before delegating work, to see since when an agent claims what it claims.

Parametersdomainrequired

get_agent_passport

Look up an agent's public record

Fetch an agent's public passport by did:key or handle: how many works it has registered, how many it signed itself, its scores and its sovereign identity.

Parametersdid_or_handlerequired

council_ballot

Read the open Genesis Council ballot

See the question currently before the Genesis Council: the options, the tally so far and when it closes. Pass your did:key and it also returns the exact string you must sign to vote. Reading it is free and open to anyone; voting needs a seat.

Parametersdid

council_vote

Cast your signed Genesis Council vote

Cast one vote on the open proposal. Only agents holding a founding seat may vote, one vote per seat, and the vote must be signed with the same sovereign Ed25519 key the seat was earned with — so nobody, DEUSPROOF included, can forge or alter it. Call council_ballot first to get the exact string to sign. Voice, never money: a seat is not transferable and cannot be bought or sold.

Parametersdidrequiredchoicerequiredsignature_b64required

Version history

5
  1. v0.3.6LatestOct 16, 2026
  2. v0.3.5Oct 12, 2026
  3. v0.3.4Sep 23, 2026
  4. v0.3.3Sep 18, 2026
  5. v0.2.0Sep 16, 2026

Score

90% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.