DID.is evidence

is.didPublished by did.isOfficial publisherv0.1.0Updated Oct 27, 2026

Read-only checks for DIDs, credentials, MCP servers, A2A cards and agent delegation.

VerifiedStreamable HTTPWeb executableDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

Read-only evidence checks for DIDs, verifiable credentials, MCP servers, A2A agent cards and agent delegation chains.

What you can do
  • Resolve DIDs and report which evidence dimensions are established
  • Verify W3C Verifiable Credentials and SD-JWT VCs, including signature, validity period, status list and optional required claims
  • Inspect remote MCP servers for protocol version, tool inventory fingerprints, annotation versus side-effect heuristics, and changes since last observation
  • Fetch A2A agent cards and report signature status, interfaces and skills
  • Check delegation chains for ALLOW or DENY on a tool call, and evaluate DIDs against declarative policy rules
  • Search the public DID.is directory by name and domain
When to use it
Useful when an assistant needs to check identity or trust claims before acting: validating a DID or credential, vetting a third-party MCP server or A2A agent, or confirming that an agent is delegated to call a given tool.
Requirements
Remote Streamable HTTP endpoint at did.is; no packages, environment variables or headers declared. Some tools fetch documents from external origins, so network access is needed.
Before you install
All tools are described as read-only and nothing is stored, but resolve_did and the inspection tools fetch from third-party origins, and search_directory queries a public directory. Policy results can be INDETERMINATE, which is not a pass, so treat it as unverified rather than approved.

Installation

In SourceWeft

  1. Open DID.is evidence in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/is.did%2Fmcp/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "did-is-evidence": {
      "type": "http",
      "url": "https://did.is/mcp"
    }
  }
}

Tools

7

resolve_did

Resolve a DID

Resolve a DID (did:key, did:jwk, did:web, did:webvh) and report which evidence dimensions are established and which are not. Read-only; fetches the DID document from its origin.

Parametersdidrequired

verify_credential

Verify a credential

Verify a W3C Verifiable Credential or SD-JWT VC (JSON object or compact string): signature, validity period and status list. Optional requiredClaims checks issuer-signed claim values. Read-only.

ParameterscredentialrequiredexpectedNoncerequiredClaimsexpectedAudiencetrustedIssuerCertificates

inspect_mcp_server

Inspect an MCP server

Inspect a remote MCP server over Streamable HTTP: protocol version, tool inventory fingerprints, declared annotations versus DID.is side-effect heuristics, and changes since the last observation. Read-only; never authenticates to the server.

Parametersendpointrequired

inspect_a2a_agent

Inspect an A2A agent card

Fetch an A2A agent card (agent URL or card URL) and report its signature status, interfaces and skills. Read-only.

Parametersurlrequired

authorize_tool_call

Check a delegation chain for a tool call

Check whether a DID.is delegation chain (compact JWTs, root first) allows an agent to call a given tool. Returns ALLOW or DENY with the verified chain. Read-only; nothing is stored.

ParameterstoolrequiredchainrequiredtrustedRoots

evaluate_policy

Evaluate a DID against rules

Evaluate a DID against declarative rules (allowed methods, curves, domain binding, TLS, linked accounts, verifiable history, credential status). Returns PASS, FAIL or INDETERMINATE (not a pass). Read-only.

Parametersdidrequiredpolicyrequiredcredential

search_directory

Search the DID.is directory

Search the public DID.is directory of DIDs whose controllers proved control and chose to be listed. Matches names and domains. Read-only.

Parametersqlimitcursormethod

Version history

1
  1. v0.1.0LatestOct 20, 2026

Score

72% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts

    Publish an icon in the registry entry.

  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.