Witnessory

io.github.witnessoryPublished by GitHub account witnessoryv0.2.4Updated Oct 30, 2026

Post-quantum readiness of any website, PQC adoption figures, the probe map; paid checks via x402.

Overview

AI-generated overview

Checks whether public websites use post-quantum key exchange, and reports internet-wide PQC adoption figures, probe locations and service status.

What you can do
  • Check one public website's post-quantum readiness and certificate details, with a signed result and plain summary
  • Read the observatory's headline adoption figures by layer, with computation time and probe counts
  • See where probes measure from, by country and network, and which probes hold the most credits
  • Check whether each Witnessory service is up
  • Pay for a fresh signed check of a site, and read what is sold and at what price
When to use it
Useful when you want an assistant to assess a site's or an organization's readiness for post-quantum cryptography, or to pull current PQC adoption statistics and probe coverage without leaving the conversation.
Requirements
Runs locally as a Python package (pip install witnessory, or uvx) with the mcp argument; standard library only. Network access to Witnessory's services is needed. No account or API key for free checks; an optional WITNESSORY_KEY raises limits, and paying per request needs the pay extra and a WITNESSORY_PAY_KEY wallet.
Before you install
pay_check spends real money: $0.01 in USDC on Base from the wallet configured in WITNESSORY_PAY_KEY, so treat that key as a spending credential. Free checks are limited to 20 new checks an hour per address with results reused for 10 minutes. Domain names are sent to Witnessory's servers, and paid plans or site-watching products are upsold in results.

Installation

In SourceWeft

  1. Open Witnessory in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

Witnessory client

Witnessory measures how far the internet has moved to post-quantum cryptography. This is the client: the services as Python functions, a command line, and an MCP server so an agent can use them as tools. Standard library only; Apache 2.0.

pip install witnessory

From the command line

witnessory check example.org          # one site's post-quantum readiness, in a sentencewitnessory check example.org --json   # the whole signed resultwitnessory headline                   # the observatory's headline figures, by layerwitnessory probes                     # where the probes measure fromwitnessory status                     # whether every service is upwitnessory pricing                    # what is paid, and the prices

From Python

python
import witnessoryr = witnessory.check("example.org")print(r["summary"])                   # "example.org: a current browser gets post-quantum key exchange ..."witnessory.verify(r)                  # {"ed25519": True, "mldsa65": True}  (needs: pip install "witnessory[verify]")witnessory.headline()["layers"]["keys"]

As an MCP server, for agents

Command witnessory, argument mcp. For example, in a client's configuration:

json
{"mcpServers": {"witnessory": {"command": "witnessory", "args": ["mcp"]}}}

Tools: check_site, pq_headline, probe_map, service_status, pricing. Resources: Witnessory's llms.txt and pricing.json. Messages are JSON-RPC, one per line, on stdin and stdout.

Limits and keys

A free check is one vantage, once: 20 new checks an hour from one address, results reused for 10 minutes. A paid plan's key (WITNESSORY_KEY, or --key) makes checks fresh and counted per month instead of per address. Every answer carries offers: what more there is and where the prices are (https://witnessory.org/pricing.json). Watching your own sites over time from several networks, with alerts and signed evidence, is a separate product on the same page.

Paying per request, as an agent

No account is needed: GET https://api.witnessory.org/pay/check?domain=example.org answers 402 with what to pay (x402 v2; USDC on Base), and any x402-capable client pays and resends. This client can pay too:

pip install "witnessory[pay]"export WITNESSORY_PAY_KEY=0x...          # a wallet holding a little USDC on Basewitnessory pay address                   # where to send the USDCwitnessory pay check example.org         # $0.01, one fresh signed checkwitnessory pay key api-developer         # $19, a key for 2,000 fresh checks in 31 days -> WITNESSORY_KEY

From code: witnessory.pay.check("example.org") and witnessory.pay.buy_key("api-developer"). As an MCP tool: pay_check. Index of what is sold: https://api.witnessory.org/pay.

Terms: https://witnessory.org/terms.html. Privacy: https://witnessory.org/privacy.html. Contact: [email protected].

Source: README.md at commit f1284bd

Tools

6

check_site

Check whether one public website's encryption would stay private against a future quantum computer: whether a current browser gets post-quantum key exchange from it, and what its certificate uses. Signed result with a plain summary. Domain names only (no addresses, ports or private names).

Parametersdomainrequired

pq_headline

The observatory's current headline figures by layer (post-quantum key exchange on the top sites, SSH, DNSSEC, mail, routing and more), when they were computed and how many probes they rest on.

Takes no parameters.

probe_map

Where Witnessory's probes measure from: probes active in the last 7 days by country and network, and the probes with the most credits.

Takes no parameters.

service_status

Whether each Witnessory service is up, from the hourly watch.

Takes no parameters.

pay_check

Pay $0.01 from the configured wallet (WITNESSORY_PAY_KEY; USDC on Base) for one fresh, signed check of a public website, without an account. Use when the free check is rate-limited or a fresh (not reused) result is needed.

Parametersdomainrequired

pricing

What Witnessory sells and at what price: watching sites over time from several networks with alerts and signed evidence, API keys with higher limits, evidence reports, data licences. Includes how to buy.

Takes no parameters.

Version history

1
  1. v0.2.4LatestOct 29, 2026

Score

90% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts
  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts