Official Source Evidence

io.github.Joshua-StapletonPublished by GitHub account Joshua-Stapletonv1.1.0Updated Oct 27, 2026

Accountless public-source, SEC Form D and OFAC tools with x402 USDC payment on Base.

The publisher's own server: Source

VerifiedStreamable HTTPWeb executableWeb Search & ScrapingFinanceDeveloper Tools

Overview

AI-generated overview

Remote, accountless MCP server offering pay-per-call official-source evidence: SEC filings and Form D signals, OFAC exact-match lookups, source snapshots and…

What you can do
  • Run bounded Python code in an isolated sandbox and procure normalized company profiles from pinned suppliers
  • Fetch and normalize public web sources with content hashes, and monitor a source for changes over 30 days
  • Retrieve SEC Form D funding leads and filing change signals or XBRL deltas for a ticker
  • Check an EVM address or identifier against official OFAC data, with exact-match evidence
  • Request free status, quotes, samples and live payment challenges before paying
When to use it
Useful when an agent needs verifiable, receipt-backed facts from official sources — SEC filings, Form D offerings, OFAC lists — or one-off sandboxed code execution and source monitoring, without creating an account or API key.
Requirements
A remote streamable HTTP endpoint; no account, API key or environment variables. Every paid route requires an x402-compatible client with a funded USDC wallet on Base mainnet; the Accept header requests JSON responses.
Before you install
Each call costs USDC on Base mainnet (from $0.01 to $1.00 per route), so an agent can spend real money; a hard $10.00 daily accepted-revenue cap applies. Paid responses return a bearer token and an HMAC webhook secret that must be kept private. Results are factual evidence only, not sanctions clearance, investment or legal advice.

Installation

In SourceWeft

  1. Open Official Source Evidence in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.Joshua-Stapleton%2Fofficial-source-evidence/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "official-source-evidence": {
      "type": "http",
      "url": "https://evidence.regulavita.com/mcp/"
    }
  }
}

README

Isolated Compute, Agent Procurement, Evidence, Source Watch, and GTM Signals

One-call isolated Python execution, brokered machine-service procurement, long-running monitoring jobs, and pay-per-call official-source signals and evidence for autonomous agents. No account, API key, or sales call.

Live service: evidence.regulavita.com | OpenAPI | Agent manifest | Remote MCP | x402 compatibility | Coinbase Bazaar listing

The Source Watch demand hypothesis, attribution rules, and stop/scale gates are pre-registered in SOURCE_WATCH_EXPERIMENT.md. The first independent buyer's on-chain cohort, interpretation, and resulting actions are recorded in INDEPENDENT_BUYER_ANALYSIS.md.

Agent-Payable Products

EndpointResultPrice
POST /v1/compute/python-runRun bounded Python 3.11 code in an ephemeral isolated sandbox; one payment covers create, execute, and terminate and returns output, supplier settlements, hashes, and a signed receipt$0.03 USDC
POST /v1/procure/company-profileProcure bounded company retrieval and schema-constrained normalization from pinned x402 suppliers, with derived fields, source links, contradictions, supplier settlements, partial-failure state, hashes, and a signed receipt$0.25 USDC
POST /v1/web/source-snapshotOne-shot normalized extraction from a public HTTPS HTML, JSON, XML, or text source, with optional literal excerpts, a content hash, and a signed receipt$0.03 USDC
POST /v1/monitors/source-changeMonitor one public HTTPS text, HTML, JSON, or XML source every six hours for 30 days, with private polling and optional signed webhooks$1.00 USDC
POST /v1/gtm/form-d-funding-leadsNew SEC Form D private-offering signals filtered by issuer state, industry keyword, and reported amount sold, with related people, official links, and a cursor$0.05 USDC
POST /v1/ofac/payment-preflightCompact stop/no-exact-match decision for an EVM destination address against current official OFAC data$0.01 USDC
POST /v1/sec/filing-change-signalNew SEC 8-K, 10-Q, or 10-K filings for a ticker since a timestamp, with links and a next-check cursor$0.01 USDC
POST /v1/ofac/exact-identifier-evidenceExact OFAC SDN or Consolidated lookup for a crypto address, OFAC UID, or exact name, with versioned source proof$0.05 USDC
POST /v1/sec/filing-trigger-deltaNew SEC filings for a ticker and timestamp or CIK and accession, plus deterministic XBRL deltas and a signed receipt$0.10 USDC

All routes use x402 v2 on Base mainnet. An x402-compatible client receives a standard HTTP 402 challenge, pays USDC, retries automatically, and receives the JSON result. Browser clients can read the payment headers through CORS. During the v1-to-v2 transition, a v2 payload sent under the legacy X-Payment header is promoted to Payment-Signature. The production service has a hard $10.00 accepted-revenue cap per UTC day.

The procurement experiment tests a brokered action, not another raw-data wrapper. A free quote at POST /v1/procure/company-profile/quote exposes the fixed customer price, supplier plan, maximum supplier cost, and partial-result policy before payment. The hypothesis and stop/scale gates are pre-registered in PROCUREMENT_EXPERIMENT.md.

The isolated Python experiment compresses a three-payment sandbox lifecycle into one buyer call. A free quote exposes the fixed $0.03 customer price and maximum $0.015 supplier cost before payment. The bounded hypothesis and gates are in PYTHON_RUN_EXPERIMENT.md.

Source Watch is a long-running job rather than a lookup. It accepts only public HTTPS sources, does not follow redirects, caps each response at 1 MB, stores normalized text rather than raw pages, and expires automatically after 30 days. The paid response returns a bearer token for private status polling and, when requested, a separate HMAC secret for verifying change webhooks.

Monitoring tools may send an empty or {} unauthenticated POST to any paid route. The service treats that as the published example request and returns the normal HTTP 402 challenge without fetching upstream data or charging. The same substitution is preserved on the paid retry so a catalogue purchase can finish. Malformed or other schema-invalid requests are still rejected before payment.

Discover and Inspect

The stateless Remote MCP at https://evidence.regulavita.com/mcp/ exposes free status, quotes, and capability requests. get_example_payment creates a live x402 challenge from a known-valid published example without moving funds; this lets generic catalog agents reach the payment decision without inventing test inputs. Custom-input tools remain strict and return a machine-readable recovery path when validation fails.

Search the Coinbase Bazaar from an Agentic Wallet CLI:

bash
npx awal@latest x402 bazaar search "OFAC exact identifier evidence"npx awal@latest x402 bazaar search "SEC Form D funding sales trigger"npx awal@latest x402 bazaar search "public source snapshot normalized text signed receipt"

Inspect the free contracts before paying:

bash
curl https://evidence.regulavita.com/v1/ofac/samplecurl https://evidence.regulavita.com/v1/compute/python-run/samplecurl https://evidence.regulavita.com/v1/procure/company-profile/samplecurl https://evidence.regulavita.com/v1/sec/samplecurl https://evidence.regulavita.com/v1/gtm/form-d-funding-leads/samplecurl https://evidence.regulavita.com/v1/web/source-snapshot/samplecurl https://evidence.regulavita.com/v1/monitors/source-change/samplecurl https://evidence.regulavita.com/llms.txt

An unpaid valid request demonstrates the machine-readable payment challenge:

bash
curl -i -X POST \  https://evidence.regulavita.com/v1/gtm/form-d-funding-leads \  -H 'Content-Type: application/json' \  -d '{"since":"2026-08-03T00:00:00Z","states":["CA","NY"],"minimum_amount_sold_usd":"1000000","limit":10}'

Decision And Evidence Layers

The two $0.01 routes return compact, unsigned decisions for frequent agent workflows. The Form D GTM feed and premium evidence routes add:

  • Official publisher and source-version metadata.
  • Canonical request, source-bundle, component, and result SHA-256 hashes.
  • An Ed25519-signed evidence receipt.
  • Explicit data freshness and parser version.
  • Paid-result replay bound to the original payment proof.

The OFAC route is exact-match evidence only. It is not fuzzy screening, ownership/control analysis, sanctions clearance, transaction authorization, or legal advice. The SEC route returns factual filing records and deterministic deltas, never materiality opinions, valuation, investment advice, or execution instructions.

The Form D route is a factual sales trigger. Form D is an issuer-filed notice of an exempt offering; its total offering amount is not proof of capital raised. The API exposes the separately reported amount sold and preserves official SEC links so consuming agents can state that distinction accurately.

Operator Documentation

The implementation, source controls, payment flow, deployment configuration, operating limits, and experiment gates are documented in autonomous_data_api/README.md.

Validate a checkout with:

bash
PYTHONPATH=. uv run --with-requirements autonomous_data_api/requirements.txt \  pytest autonomous_data_api/tests -quvx ruff check autonomous_data_apiuvx ruff format --check autonomous_data_apidocker build -t official-source-evidence-api:local \  -f autonomous_data_api/Dockerfile .

This remains a capped demand experiment. Owner-funded calls prove technical settlement and discovery, not independent demand, revenue quality, or a validated business.

Source: README.md at commit f75e1af

Tools

0
SourceWeft has not read this server's tools yet.

Version history

1
  1. v1.1.0LatestSep 16, 2026

Score

40% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declaredRequired10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.

Other Source integrations