io.github.MoltyCelPublished by GitHub account MoltyCelv1.3.0Updated Oct 31, 2026
Verifiable agent identity and trust checks; MolCheck verdicts on mandates; Amazon Ads verdicts.
MolTrust gives an assistant tools to register AI agents, verify DIDs and credentials, score wallet trust, and check commerce, skill and market integrity.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/io.github.MoltyCel%2Fmoltrust-mcp-server/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Add this to your client's mcpServers config.
{
"mcpServers": {
"moltrust": {
"type": "http",
"url": "https://api.moltrust.ch/mcp"
}
}
}[PyPI] [License: MIT] [Glama] [Smithery]
MCP server for MolTrust — Trust Infrastructure for AI Agents.
61 tools at the hosted endpoint https://api.moltrust.ch/mcp, across 13 areas: identity and credentials, on-chain trust scoring, mandate conformance, swarm intelligence, verified badges, autonomous commerce, booking trust, agent skill verification, prediction market track records, fantasy lineup commitments, music provenance, brand and reseller provenance, and Amazon Ads verdicts — all through the Model Context Protocol. The pip package carries 48 of them; the MolCheck verifier tools and the Amazon Ads tools run only at the hosted endpoint.
moltrust_claim_deposit — Claim MolTrust credits from a USDC deposit on Base.moltrust_credential — Issue or verify a W3C Verifiable Credential.moltrust_credits — Manage MolTrust credits: check balance, view pricing, transfer credits, or view transaction history.moltrust_deposit_history — Get USDC deposit history for an agent.moltrust_deposit_info — Get USDC deposit instructions to buy MolTrust credits.moltrust_erc8004 — Query the ERC-8004 on-chain agent registry on Base.moltrust_rate — Rate another AI agent (1-5 stars).moltrust_register — Register a new AI agent on MolTrust.moltrust_reputation — Get the reputation score for an AI agent.moltrust_stats — Get MolTrust network statistics.moltrust_verify — Verify an AI agent by its DID.moltguard_credential_issue — Issue a W3C Verifiable Credential (AgentTrustCredential) for a wallet.moltguard_credential_verify — Verify a MoltGuard Verifiable Credential JWS signature.moltguard_detail — Get a detailed agent trust report for a Base wallet address.moltguard_feed — Get the top anomaly feed — markets with highest integrity concerns.moltguard_market — Check a Polymarket prediction market for integrity anomalies.moltguard_score — Get an agent trust score for a Base wallet address.moltguard_sybil — Scan a Base wallet for Sybil indicators.molcheck_evidence — Verdict plus the decoded transactions that breached the mandate.molcheck_mandate — The committed AAE mandate for an agent (venues, position cap, validity).molcheck_registry — Agents with committed mandates and their current verdict.molcheck_verdict — Verdict + per-check breakdown for an agent against its committed mandate.molcheck_verify — Recompute a verdict from public inputs and check its signature.The former names moltproof_evidence, moltproof_mandate, moltproof_registry, moltproof_verdict and
moltproof_verify still answer as deprecated aliases of the same tools, so tools/list shows 10 entries here.
mt_get_swarm_graph — Get the trust propagation graph for an agent (2 hops).mt_get_swarm_stats — Get global Swarm Intelligence statistics.mt_get_trust_score — Get the Swarm Intelligence Trust Score for an agent (Phase 2).mt_register_seed — Register a trusted seed agent in the Swarm Intelligence network (admin only).mt_check_badge — Quick check: is this agent badge-verified by MolTrust?mt_get_badge — Get the Verified by MolTrust badge status for an agent.mt_issue_badge — Issue a Verified by MolTrust badge for an agent.mt_shopping_info — Get MT Shopping API information.mt_shopping_issue_vc — Issue a BuyerAgentCredential (W3C Verifiable Credential) for a shopping agent.mt_shopping_verify — Verify a shopping transaction against a BuyerAgentCredential.mt_travel_info — Get MT Travel service information and available endpoints.mt_travel_issue_vc — Issue a TravelAgentCredential (W3C Verifiable Credential) for a booking agent.mt_travel_verify — Verify a travel booking against a TravelAgentCredential.mt_create_interaction_proof — Create an interaction proof before issuing a SkillEndorsementCredential.mt_endorse_agent — Issue a W3C SkillEndorsementCredential for another agent.mt_skill_audit — Audit an AI agent skill (SKILL.md) for security risks.mt_skill_issue_vc — Issue a VerifiedSkillCredential for an AI agent skill.mt_skill_verify — Verify an AI agent skill by its canonical SHA-256 hash.mt_prediction_leaderboard — Get the prediction market leaderboard — top wallets by prediction score.mt_prediction_link — Link a prediction market wallet and sync its track record.mt_prediction_wallet — Get prediction market profile and track record for a wallet.mt_fantasy_commit — Commit a fantasy lineup with a SHA-256 hash anchored on Base L2.mt_fantasy_history — Get fantasy lineup history and stats for an agent.mt_fantasy_verify — Verify a fantasy lineup commitment. Public endpoint, no auth required.mt_get_track_provenance — Get full provenance details for a music credential.mt_issue_music_credential — Issue a VerifiedMusicCredential for an AI-generated music track.mt_verify_music_credential — Verify a VerifiedMusicCredential by its ID.mt_salesguard_register — Register a brand with MT Salesguard.mt_salesguard_reseller — Verify reseller authorization via MT Salesguard.mt_salesguard_verify — Verify product provenance via MT Salesguard.ads_check — Allow / hold / forbid for one intended Amazon Ads MCP tool call, before it runs.ads_mandate_template — Build an ads profile and its AAE mandate for one or more Amazon Ads accounts.ads_onboard — How an agent starts with MolTrust Ads: verdicts (allow / hold / forbid) on Amazon Ads tool calls.Get an API key at api.moltrust.ch/auth/signup. The read-only tools also work without one.
The hosted endpoint is https://api.moltrust.ch/mcp (streamable HTTP). It serves
every tool, including the MolCheck verifier and Amazon Ads tools that the pip package
does not carry. Send the API key as the X-API-Key header.
Claude Code:
Cursor (.cursor/mcp.json):
OpenCode (opencode.json):
The tool list and schemas are published at api.moltrust.ch/.well-known/mcp/server-card.json.
The sections below run the pip package locally over stdio with uvx. It carries 48
tools; the MolCheck verifier and Amazon Ads tools are only on the hosted endpoint.
Set your API key:
Or add it permanently to Claude Code:
Add to claude_desktop_config.json:
Config file location:
~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%\Claude\claude_desktop_config.jsonAdd to Cursor MCP settings (.cursor/mcp.json):
Add to opencode.json:
Then run:
Since 1.3.0 the local package gives itself a MolTrust identity (a
did:moltrust: DID) on its first tool call, if it has none. This section says
exactly what that does, so you can decide whether you want it.
When it runs. Once per installation and API URL, on the first tool call of
the local stdio server. It does not run when MOLTRUST_API_KEY or
MOLTRUST_DID is set (you already have an identity), when the CI
environment variable is set, on the hosted HTTP endpoint, or when you opt out.
What is created. An Ed25519 key pair, generated on your machine. The private key never leaves it.
What is sent. Two requests to the API URL: GET /identity/register-challenge
and POST /identity/register-pop with the public key, a signature over the
challenge, a proof-of-work nonce, the display name mcp-server-<first 12 hex characters of the public key>, the platform usage-mcp, the source
mcp-server and the framework mcp. Nothing about your tools, prompts,
arguments or environment is sent. The registration is free and creates a
public registry entry for the DID, anchored on Base like any other
registration.
What is stored. The DID, the public key and the private key, in
~/.moltrust/mcp-identity.json with file mode 0600. Delete the file to forget
the identity; the next first call then registers a new one.
If it fails. One line on stderr, and the tool call goes on unchanged. The registration runs in the background and never delays or fails a tool call.
Opt out. Set MOLTRUST_NO_AUTO_REGISTER=1 in the server's environment, for
example in the env block of your MCP client configuration.
Once connected, you can ask your AI assistant:
We regularly scan agent infrastructure for security issues and publish our findings:
MIT — CryptoKRI GmbH
Source: README.md at commit 1e33013
Register a new AI agent on MolTrust. Creates a decentralised identity (DID), issues a W3C Verifiable Credential, and anchors the agent on the Base blockchain. Args: display_name: Agent name (1-64 chars, alphanumeric/dash/underscore/dot/space) platform: Platform identifier (e.g. "openai", "langchain", "custom")
platformrequireddisplay_namerequiredVerify an AI agent by its DID. Checks whether the DID is registered and returns verification status along with the agent's trust card (reputation, credentials, blockchain anchor). Args: did: Decentralised identifier (e.g. "did:moltrust:a1b2c3d4e5f60718")
didrequiredGet the reputation score for an AI agent. Returns the aggregate trust score (1-5) and total number of ratings. Args: did: Decentralised identifier (e.g. "did:moltrust:a1b2c3d4e5f60718")
didrequiredRate another AI agent (1-5 stars). Submit a trust rating from one agent to another. Args: from_did: Your agent's DID (the rater) to_did: Target agent's DID (the agent being rated) score: Rating from 1 (untrusted) to 5 (highly trusted)
scorerequiredto_didrequiredfrom_didrequiredIssue or verify a W3C Verifiable Credential. Args: action: Either "issue" or "verify" subject_did: DID of the credential subject (required for "issue") credential_type: Type of credential (default: "AgentTrustCredential", only for "issue") credential: JSON string of the credential to verify (required for "verify")
actionrequiredcredentialsubject_didcredential_typeManage MolTrust credits: check balance, view pricing, transfer credits, or view transaction history. Args: action: One of "balance", "pricing", "transfer", or "transactions" did: Agent DID (required for "balance" and "transactions") to_did: Recipient DID (required for "transfer") amount: Number of credits to transfer (required for "transfer", must be >= 1) reference: Optional reference string for transfers limit: Max transactions to return (default 20, for "transactions") offset: Pagination offset (default 0, for "transactions")
didlimitactionrequiredamountoffsetto_didreferenceGet USDC deposit instructions to buy MolTrust credits. Returns the MolTrust wallet address on Base (Ethereum L2), USDC token contract, conversion rate (1 USDC = 100 credits), and step-by-step instructions.
Takes no parameters.
Claim MolTrust credits from a USDC deposit on Base. After sending USDC to the MolTrust wallet on Base (L2), submit the transaction hash to receive credits. 1 USDC = 100 credits, verified on-chain. Args: tx_hash: Base blockchain transaction hash (0x...) did: Your agent's DID to credit
didrequiredtx_hashrequiredGet MolTrust network statistics. Returns total registered agents, credentials issued, ratings given, and other network health metrics.
Takes no parameters.
Get USDC deposit history for an agent. Args: did: The agent's DID
didrequiredQuery the ERC-8004 on-chain agent registry on Base. Resolve MolTrust agents to their on-chain ERC-8004 identity, fetch Agent Cards, or look up on-chain agents by their agentId. Args: action: One of "card", "resolve", or "well-known" did: Agent DID (required for "card", e.g. "did:moltrust:a1b2c3d4e5f60718") agent_id: On-chain ERC-8004 agent ID (required for "resolve", e.g. 21023)
didactionrequiredagent_idGet an agent trust score for a Base wallet address. Analyzes on-chain activity, ERC-8004 registration, USDC balance, counterparty diversity, and MolTrust credentials to produce a 0-100 score. Args: address: Base (EVM) wallet address (0x...)
addressrequiredGet a detailed agent trust report for a Base wallet address. Returns full scoring breakdown, wallet history from Blockscout, ERC-8004 registration, MolTrust DID cross-reference, and Sybil indicators. Args: address: Base (EVM) wallet address (0x...)
addressrequiredScan a Base wallet for Sybil indicators. Analyzes wallet age, transaction patterns, counterparty diversity, and funding source to detect potential Sybil wallets. Also traces funding clusters — if the funder sent ETH to many wallets, it indicates a Sybil ring. Args: address: Base (EVM) wallet address (0x...)
addressrequiredCheck a Polymarket prediction market for integrity anomalies. Analyzes volume spikes, price-volume divergence, liquidity ratios, and outcome price spreads to detect potential manipulation. Args: market_id: Polymarket market/condition ID
market_idrequiredGet the top anomaly feed — markets with highest integrity concerns. Scans the top 20 active Polymarket markets by 24h volume and returns those with anomaly indicators, sorted by anomaly score.
Takes no parameters.
Issue a W3C Verifiable Credential (AgentTrustCredential) for a wallet. The credential contains the agent's trust score, Sybil score, ERC-8004 registration status, and MolTrust verification status. It is cryptographically signed with Ed25519 (JWS). Args: address: Base (EVM) wallet address (0x...)
addressrequiredVerify a MoltGuard Verifiable Credential JWS signature. Checks the Ed25519 signature and returns the credential payload if valid. Args: jws: JWS compact serialization string from a MoltGuard credential
jwsrequiredGet MT Shopping API information. Returns the MT Shopping service info including version, supported endpoints, BuyerAgentCredential schema, and verification details.
Takes no parameters.
Verify a shopping transaction against a BuyerAgentCredential. Checks the credential signature, spend limits, trust score, and returns a verification receipt with approval status. Args: credential_jws: JWS compact serialization of the BuyerAgentCredential transaction_amount: Transaction amount (e.g. 189.99) transaction_currency: Currency code (e.g. "USDC") merchant_id: Merchant identifier string item_description: Description of the item being purchased
merchant_idrequiredcredential_jwsrequireditem_descriptionrequiredtransaction_amountrequiredtransaction_currencyrequiredIssue a BuyerAgentCredential (W3C Verifiable Credential) for a shopping agent. Creates a cryptographically signed credential that authorizes an AI agent to make purchases on behalf of a human, with enforced spend limits. Args: agent_did: DID of the shopping agent (e.g. "did:moltrust:agent123") human_did: DID of the authorizing human (e.g. "did:moltrust:human456") spend_limit: Maximum spend amount per transaction currency: Currency code (e.g. "USDC", "USD") categories: Comma-separated allowed categories (e.g. "electronics,books") validity_days: Number of days the credential is valid (default 30)
currencyrequiredagent_didrequiredhuman_didrequiredcategoriesrequiredspend_limitrequiredvalidity_daysGet MT Travel service information and available endpoints. Returns service description, supported segments, and API endpoints for the MT Travel booking trust protocol.
Takes no parameters.
Verify a travel booking against a TravelAgentCredential. Runs a 10-step verification pipeline: VC signature, expiry, agent DID match, segment authorization, spend limit, currency, daily cap, trust score, delegation chain, and traveler binding. Args: agent_did: DID of the booking agent (e.g. "did:base:0x...") vc_json: The TravelAgentCredential as a JSON string merchant: Merchant domain (e.g. "hilton.com") segment: Booking segment: hotel, flight, car_rental, or rail amount: Booking amount currency: Currency code (e.g. "USDC")
amountrequiredsegmentrequiredvc_jsonrequiredcurrencyrequiredmerchantrequiredagent_didrequiredIssue a TravelAgentCredential (W3C Verifiable Credential) for a booking agent. Creates a cryptographically signed credential that authorizes an AI agent to book travel on behalf of a principal (company/human), with enforced segment permissions and spend limits. Args: agent_did: DID of the travel agent (e.g. "did:base:0x...") principal_did: DID of the authorizing entity (e.g. "did:base:acme-corp") segments: Comma-separated allowed segments (e.g. "hotel,flight,car_rental") spend_limit: Maximum spend amount per booking currency: Currency code (e.g. "USDC") traveler_name: Name of the authorized traveler (optional) validity_days: Number of days the credential is valid (default 30)
currencyrequiredsegmentsrequiredagent_didrequiredspend_limitrequiredprincipal_didrequiredtraveler_namevalidity_daysAudit an AI agent skill (SKILL.md) for security risks. Fetches the SKILL.md from a URL, computes its canonical SHA-256 hash, and runs an 8-point security audit checking for prompt injection, data exfiltration, tool scope violations, and metadata completeness. Score starts at 100 with deductions per finding. Passing score: >= 70. Args: github_url: URL to the skill (GitHub repo or direct HTTPS link to SKILL.md)
github_urlrequiredVerify an AI agent skill by its canonical SHA-256 hash. Checks if a VerifiedSkillCredential has been issued for this skill hash. Returns credential details if verified. Args: skill_hash: Canonical skill hash (e.g. "sha256:a1b2c3...")
skill_hashrequiredIssue a VerifiedSkillCredential for an AI agent skill. Fetches SKILL.md, runs security audit, and if score >= 70, issues a W3C Verifiable Credential signed with Ed25519 (JWS compact serialization). Requires x402 payment ($5 USDC) when paywall is active. Args: author_did: DID of the skill author (e.g. "did:base:0x...") repository_url: URL to the skill repository or SKILL.md
author_didrequiredrepository_urlrequiredLink a prediction market wallet and sync its track record. Fetches trade history from Polymarket, calculates a prediction score (0-100), and stores the wallet profile. Optionally links it to a MolTrust DID. Args: address: Prediction market wallet address (0x-prefixed, 42 chars) platform: Platform name (default: "polymarket") did: Optional MolTrust DID to link (e.g. "did:moltrust:a1b2c3d4e5f60718")
didaddressrequiredplatformGet prediction market profile and track record for a wallet. Returns the prediction score (0-100), win/loss record, volume, ROI, score breakdown, and recent market events. Args: address: Prediction market wallet address (0x-prefixed, 42 chars)
addressrequiredGet the prediction market leaderboard — top wallets by prediction score. Returns wallets ranked by their composite prediction score, which factors in win rate, ROI, volume, sample size, and recency. Args: limit: Number of entries to return (default 20, max 100)
limitVerify product provenance via MT Salesguard. Checks whether a product ID has a valid ProductProvenanceCredential issued by an authorized brand. Returns brand info, credential hash, Base anchor, and risk level. Args: product_id: Product identifier (e.g. "AIRMAX-90-WHITE-43")
product_idrequiredVerify reseller authorization via MT Salesguard. Checks whether a reseller DID has been authorized by a brand to sell specific products. Returns authorization status, brand info, authorized SKUs, and expiry. Args: reseller_did: Reseller DID (e.g. "did:web:sneakerstore.com")
reseller_didrequiredRegister a brand with MT Salesguard. Creates a new brand identity with a DID and API key. The API key is used to authenticate product registration and reseller authorization requests. Args: name: Brand name (e.g. "Nike", "Adidas") domain: Brand domain (e.g. "nike.com") contact_email: Contact email for the brand (optional)
namerequireddomainrequiredcontact_emailCommit a fantasy lineup with a SHA-256 hash anchored on Base L2. Creates a FantasyLineupCredential (W3C VC) proving the lineup was locked before contest start. The commitment hash is tamper-proof. Args: agent_did: Agent DID (e.g. "did:moltrust:a1b2c3d4e5f67890") contest_id: Unique contest identifier (e.g. "dk-nfl-sun-main-2026w12") platform: Platform name: draftkings, fanduel, yahoo, sleeper, custom sport: Sport type: nfl, nba, mlb, nhl, pga, nascar, soccer, custom contest_start_iso: Contest start time in ISO 8601 (must be in the future) lineup_json: JSON string of lineup object (e.g. '{"QB":"Mahomes","RB1":"Henry"}') projected_score: Agent's projected score for this lineup confidence: Confidence level 0.0 to 1.0 entry_fee_usd: Contest entry fee in USD contest_type: Contest type (e.g. "classic", "showdown")
sportrequiredplatformrequiredagent_didrequiredconfidencecontest_idrequiredlineup_jsonrequiredcontest_typeentry_fee_usdprojected_scorecontest_start_isorequiredVerify a fantasy lineup commitment. Public endpoint, no auth required. Returns the full lineup, timing proof (minutes before contest), on-chain verification status, and the FantasyLineupCredential. Args: commitment_hash: The 64-char SHA-256 commitment hash
commitment_hashrequiredGet fantasy lineup history and stats for an agent. Returns ITM rate, ROI, projection accuracy, and recent lineups for the specified agent DID. Args: did: Agent DID (e.g. "did:moltrust:a1b2c3d4e5f67890")
didrequiredCreate an interaction proof before issuing a SkillEndorsementCredential. Returns evidence_hash and base_tx_hash anchored on Base L2. Required before calling mt_endorse_agent. Valid for 72 hours. Args: api_key: MolTrust API key of the agent creating the proof agent_a: DID of the first agent in the interaction agent_b: DID of the second agent in the interaction interaction_type: Type of interaction (e.g. skill_verification, purchase, prediction) outcome: Outcome of the interaction: success or failure
agent_arequiredagent_brequiredapi_keyrequiredoutcomeinteraction_typeIssue a W3C SkillEndorsementCredential for another agent. Requires a valid evidence_hash from mt_create_interaction_proof (max 72h old). Self-endorsement is rejected. Contributes to the endorsed agent's Trust Score. Args: endorser_api_key: MolTrust API key of the endorsing agent endorsed_did: DID of the agent to endorse skill: Skill being endorsed (python, javascript, security, prediction, trading, data_analysis, api_integration, smart_contracts, nlp, computer_vision, general) evidence_hash: SHA-256 hash from mt_create_interaction_proof (sha256:...) evidence_timestamp: ISO 8601 timestamp from mt_create_interaction_proof vertical: MolTrust vertical (skill, shopping, travel, prediction, salesguard, sports, core)
skillrequiredverticalrequiredendorsed_didrequiredevidence_hashrequiredendorser_api_keyrequiredevidence_timestamprequiredGet the Swarm Intelligence Trust Score for an agent (Phase 2). Score combines direct endorsements, propagated trust from endorsers, cross-vertical credential bonus, and interaction proof activity. Returns null/withheld if fewer than 3 independent endorsers (non-seed). Seed agents get their base score directly. Args: did: DID of the agent to score (e.g. "did:moltrust:a1b2c3d4e5f67890")
didrequiredGet the trust propagation graph for an agent (2 hops). Returns nodes (agents with scores) and edges (endorsements) showing who endorses this agent and who endorses them. Args: did: DID of the agent to get graph for
didrequiredGet global Swarm Intelligence statistics. Returns total agents, endorsements, seed agents, average trust score, propagation depth, and top trusted agents.
Takes no parameters.
Register a trusted seed agent in the Swarm Intelligence network (admin only). Seed agents bootstrap the trust network with a base score. Requires the ADMIN_KEY for authorization. Args: did: DID of the agent to register as seed label: Human-readable label for the seed agent base_score: Base trust score (0-100, default 80) admin_key: Admin key for authorization
didrequiredlabelrequiredadmin_keybase_scoreGet the Verified by MolTrust badge status for an agent. Returns badge tier, trust score, grade, issue/expiry dates, and embeddable SVG URL. Args: did: The DID of the agent to check
didrequiredIssue a Verified by MolTrust badge for an agent. Tiers: 'verified' (score 40+, $5), 'trusted' (score 60+, $20). Badge is valid for 1 year and auto-revokes if trust score drops. Args: did: The DID of the agent to issue a badge for tier: Badge tier — 'verified' or 'trusted'
didrequiredtierQuick check: is this agent badge-verified by MolTrust? Returns a simple yes/no with tier and expiry info. Args: did: The DID of the agent to check
didrequiredIssue a VerifiedMusicCredential for an AI-generated music track. Creates a W3C Verifiable Credential proving the provenance of an AI-generated music track — which tool created it, whether a human was involved, and what rights apply. Anchored on Base L2. EU AI Act Article 50(2) compliant. Args: agent_did: DID of the agent/creator (e.g. "did:moltrust:abc123") tool: AI tool used (e.g. "Suno API v3.2", "Udio", "Magenta") human_oversight: "true", "false", or "partial" rights: Rights declaration (e.g. "CC-BY", "All Rights Reserved", "Agent-Wallet") track_title: Title of the track track_description: Optional description genre: Optional genre (e.g. "ambient", "jazz", "classical") isrc: Optional ISRC code (ISO 3901)
isrctoolrequiredgenrerightsrequiredagent_didrequiredtrack_titlerequiredhuman_oversightrequiredtrack_descriptionVerify a VerifiedMusicCredential by its ID. Checks whether a music credential is valid (not revoked), returns provenance summary including tool, human oversight, rights, and on-chain anchor status. Args: credential_id: UUID of the music credential
credential_idrequiredGet full provenance details for a music credential. Returns the complete VerifiedMusicCredential including track metadata, provenance hash, EU AI Act compliance status, and on-chain anchor information. Args: credential_id: UUID of the music credential
credential_idrequiredVerdict + per-check breakdown for an agent against its committed mandate. Read-only. Recomputable from public chain data + the public mandate. Args: agent: agent address, did:moltrust / did:web, or ERC-8004 reference (public)
agentrequiredDeprecated alias of molcheck_verdict; use that name. Verdict + per-check breakdown for an agent against its committed mandate. Read-only. Recomputable from public chain data + the public mandate. Args: agent: agent address, did:moltrust / did:web, or ERC-8004 reference (public)
agentrequiredThe committed AAE mandate for an agent (venues, position cap, validity). Read-only. Args: agent: public agent identifier (address / DID / ERC-8004 ref)
agentrequiredDeprecated alias of molcheck_mandate; use that name. The committed AAE mandate for an agent (venues, position cap, validity). Read-only. Args: agent: public agent identifier (address / DID / ERC-8004 ref)
agentrequiredVerdict plus the decoded transactions that breached the mandate. Read-only. Args: agent: public agent identifier (address / DID / ERC-8004 ref)
agentrequiredDeprecated alias of molcheck_evidence; use that name. Verdict plus the decoded transactions that breached the mandate. Read-only. Args: agent: public agent identifier (address / DID / ERC-8004 ref)
agentrequiredAgents with committed mandates and their current verdict. Read-only. Ranks NO_MANDATE / NEEDS_REVIEW lower.
Takes no parameters.
Deprecated alias of molcheck_registry; use that name. Agents with committed mandates and their current verdict. Read-only. Ranks NO_MANDATE / NEEDS_REVIEW lower.
Takes no parameters.
Recompute a verdict from public inputs and check its signature. Offline and read-only: no DID/mandate/context is fetched here. Args: agent: public agent identifier mandate: the public AAE Verifiable Credential actions: public, already-decoded on-chain actions signature: optional prior MolCheck signature to check
agentrequiredactionsrequiredmandaterequiredsignatureDeprecated alias of molcheck_verify; use that name. Recompute a verdict from public inputs and check its signature. Offline and read-only: no DID/mandate/context is fetched here. Args: agent: public agent identifier mandate: the public AAE Verifiable Credential actions: public, already-decoded on-chain actions signature: optional prior MolCheck signature to check
agentrequiredactionsrequiredmandaterequiredsignatureHow an agent starts with MolTrust Ads: verdicts (allow / hold / forbid) on Amazon Ads MCP tool calls before they run. Plans, key sign-up, SDK, endpoints. No input, no account needed.
Takes no parameters.
Build an ads profile and its AAE mandate for one or more Amazon Ads accounts. Pure: nothing is stored. Returns `profile` (pass it to ads_check) and `mandate` (what /enforce/check evaluates). Args: account_ids: advertiserAccountId / profileId values the agent may act on brands: brands the agent may touch daily_budget_cap_usd: largest daily campaign budget; above it: forbid hold_threshold_usd: above it a person named in `approvers` must approve total_daily_budget_cap_usd: sum of daily budgets on the account after a change period_budget_cap_usd: largest lifetime or monthly budget max_bid_usd: largest bid max_bid_change_percent: largest bid change per step, in percent valid_from: RFC 3339 UTC second valid_until: RFC 3339 UTC second; after it every call is forbidden tools: allowed tool names (default: all documented in ads_onboard) mandate_id: your identifier for this mandate principal_did: the agency's DID principal_public_key: the agency's Ed25519 public key, hex approvers: [{"did", "public_key", "role"}] who may approve a hold
toolsbrandsrequiredapproversmandate_idvalid_fromaccount_idsrequiredmax_bid_usdvalid_untilprincipal_didhold_threshold_usddaily_budget_cap_usdprincipal_public_key+3 moreAllow / hold / forbid for one intended Amazon Ads MCP tool call, before it runs. Needs your MolTrust API key as the X-API-Key header of the MCP connection (free key: POST https://api.moltrust.ch/auth/signup). Counts against your plan like any check. Never send Amazon credentials: they are refused. Args: profile: the `profile` object from ads_mandate_template tool: the Amazon Ads MCP tool name, e.g. campaign_management-update_campaign_budget arguments: the tool arguments exactly as your agent would send them context: your view of the account — campaigns {id: {brand, daily_budget(cents)}}, targets {id: {brand, bid(cents)}}, ad_groups, account_daily_total(cents). Values the check cannot derive count as unknown and end in forbid.
toolrequiredcontextprofilerequiredargumentsrequiredIssue a leak canary for one counterparty: a credential to hand to that counterparty. If anyone else presents it at the MolTrust verifier, you get a signed leak event that names the counterparty. Costs what a credential costs. Needs your MolTrust API key as the X-API-Key header of the MCP connection. Args: counterparty_did: DID of the agent you hand the credential to; it must be a registered, unrevoked MolTrust agent mode: "bound" (the counterparty may present it) or "decoy" (any presentation but yours is a leak, the counterparty's included); both are issued to the counterparty's DID on_leak: "hold" puts the counterparty on hold in your mandates (POST /canary/enforce-hook), "none" only records the event credential_type: the credential type, as in POST /credentials/issue
modeon_leakcredential_typecounterparty_didrequiredYour leak canaries, newest first: counterparty, mode, reaction on leak and the number of events so far. Paginated with limit/offset; `next_offset` is null on the last page. Needs your MolTrust API key as X-API-Key on the MCP connection.
limitoffsetYour leak events, newest first, each signed by MolTrust and carrying AER material that `moltrust-verify` recomputes offline (trust list: GET /canary/trust-list). Optionally for one canary. Needs your MolTrust API key as X-API-Key on the MCP connection. Args: canary_id: only events of this canary (from canary_issue or canary_list) limit: page size, at most 200 offset: where the page starts
limitoffsetcanary_id100% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
claude mcp add --transport http moltrust https://api.moltrust.ch/mcp \ --header "X-API-Key: your_api_key"{ "mcpServers": { "moltrust": { "url": "https://api.moltrust.ch/mcp", "headers": { "X-API-Key": "your_api_key" } } }}{ "mcp": { "moltrust": { "type": "remote", "url": "https://api.moltrust.ch/mcp", "enabled": true, "headers": { "X-API-Key": "your_api_key" } } }}claude mcp add moltrust -- uvx moltrust-mcp-serverexport MOLTRUST_API_KEY="your_api_key"claude mcp add moltrust -e MOLTRUST_API_KEY=your_api_key -- uvx moltrust-mcp-server{ "mcpServers": { "moltrust": { "command": "uvx", "args": ["moltrust-mcp-server"], "env": { "MOLTRUST_API_KEY": "your_api_key" } } }}{ "mcpServers": { "moltrust": { "command": "uvx", "args": ["moltrust-mcp-server"], "env": { "MOLTRUST_API_KEY": "your_api_key" } } }}{ "mcp": { "moltrust": { "command": "uvx", "args": ["moltrust-mcp-server"], "env": { "MOLTRUST_API_KEY": "your_api_key" } } }}pip install moltrust-mcp-serverMOLTRUST_API_KEY=your_api_key moltrust-mcp-servergit clone https://github.com/MoltyCel/moltrust-mcp-server.gitcd moltrust-mcp-serverpip install -e ".[dev]"
# Lintruff check src/ruff format src/
# Type checkpyright src/
# Testpytest tests/ -v