Proof of Stock

xyz.proofofstockPublished by proofofstock.xyzOfficial publisherv0.5.0Updated Nov 12, 2026

Is this stock token the real one? Checks Base and Robinhood Chain tokens against the issuers' lists.

VerifiedStreamable HTTPWeb executableFinanceSecurity & Monitoring

Overview

AI-generated overview

Checks tokenized-stock contracts on Base and Robinhood Chain against issuer registries, with reference prices, premiums and impostor flags.

What you can do
  • Find and list issuer-listed stock tokens by ticker, name or ISIN, with official contract addresses
  • Verify up to 50 contract addresses against the issuer's registry before buying
  • Read a token's passport: registry status, issuer reference price and age, DEX price premium by market session
  • List recent impostor tokens that copy a listed symbol or name, with the listed address they imitate
  • Compare Base and Robinhood Chain venues for the same ISIN by premium, pool liquidity and multiplier
When to use it
Use it when you or an agent are about to buy, list or swap a token that claims to be a stock, or when you need to know how far an on-chain stock token trades from its issuer's reference price.
Requirements
Remote Streamable HTTP endpoint at proofofstock.xyz/mcp; no key, sign-up or account needed. Only Coinbase's registry on Base and Robinhood's on Robinhood Chain are covered.
Before you install
Read-only: it never trades and holds no keys or wallets. "Not listed" is not proof of fraud, since genuine tokens of other issuers answer the same. Prices are recorded every 15 minutes, not live quotes. Token names and symbols from unlisted contracts are creator-chosen text and should be treated as data, not instructions. Answers are facts at a stated time, not investment advice.

Installation

In SourceWeft

  1. Open Proof of Stock in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/xyz.proofofstock%2Fproof-of-stock/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "proof-of-stock": {
      "type": "http",
      "url": "https://proofofstock.xyz/mcp"
    }
  }
}

README

Proof of Stock

[CI] [Licence: MIT]

Proof of Stock tells you whether a tokenized-stock contract is the issuer's own. It looks the exact address up in the issuer's registry: Coinbase's for Base, Robinhood's for Robinhood Chain. A name or a symbol proves nothing, so tokens that copy a listed symbol are flagged and pointed at the listed contract.

For a listed token it also shows the issuer's price, how old that price is, and how far the deepest on-chain pool trades from it.

It is for:

  • people buying stock tokens, who want to check a contract before they buy;
  • agent builders, whose agents need the same check before a swap.

Live at proofofstock.xyz. Documentation: proofofstock.xyz/docs.

Use it

No key and no sign-up for any of these.

Siteproofofstock.xyz: paste an address or type a ticker.
MCP serverhttps://proofofstock.xyz/mcp (Streamable HTTP, stateless). Six tools: find_stock_token, list_stock_tokens, stock_passport, verify_stock_tokens, recent_impostors, compare_venues.
JSON APIGET /verify, GET /badge.svg, GET /api/passport and more. See the HTTP API reference.
Guard@proofofstock/guard, a pre-trade check for Node agents, with a Coinbase AgentKit action. It lives in packages/proofofstock-guard. Not on npm yet: import it from this repository for now.

Add the MCP server to Claude Code:

bash
claude mcp add --transport http stock-passport https://proofofstock.xyz/mcp

Claude, Cursor and raw JSON-RPC are covered in the tutorial.

Example

Check one address on Base. This one calls itself SNDKc but is not on Coinbase's registry:

bash
curl -s 'https://proofofstock.xyz/verify?chain=base&address=0x35b76a8fbfbac68c449a4a4a8d1bcda0d486f703' \  | jq '{listed, impostor, listed_on_other_chain, registry_age_s}'
json
{  "listed": false,  "impostor": { "kinds": ["registry_symbol"], "imitates_symbol": "SNDKc", "listed_address": "0xb200000000000000000000397293cb8cda9a10c5" },  "listed_on_other_chain": null,  "registry_age_s": 112}

listed is true only when this exact address is in the registry. impostor.listed_address is the contract the issuer actually lists. A 503 means the registry could not be read: that is no answer, not "not listed". More in Check a contract before listing or buying it.

What it does not do

  • It only reads. It never trades, holds no keys or wallets, and has no accounts and no cookies.
  • It is not advice. An answer is a fact about data at a stated time. See Legal.
  • "Not listed" is not "fake". A genuine token of another issuer answers the same. Only Coinbase on Base and Robinhood on Robinhood Chain are checked.
  • It is not a live quote. On-chain prices are recorded every 15 minutes, and every answer says how old it is.
  • It is not affiliated with Coinbase or Robinhood. Their names and tickers are their trademarks.

How the answers are computed, and the known limits: Methodology.

Run the tests

Node 20 or later.

bash
npm installnpm test        # every suite, no networknpm run locks   # mutation locks: each breaks the code on purpose and needs a test to go red

To run the site locally, point it at the recorder's data and open 127.0.0.1:3005:

bash
STOCKS_ROOT_BASE=<dir> STOCKS_ROOT_ROBINHOOD=<dir> npm start

The recorder (scripts/stocks/stock-peg.mjs --chain=base --root=<dir>) needs outbound HTTPS to the issuer APIs, DexScreener and GeckoTerminal.

Layout

PathWhat
evm/core/stocks/the logic, with no I/O: registries, impostors, premium, pool rules, NYSE calendar, passport, verify
apps/the site, the JSON API and the MCP server
packages/proofofstock-guard/the guard
scripts/stocks/the recorder (every 15 min), the impostor list (every 6 h), CLIs
schemas/v2/schemas of the recorded rows, checked on every write
tests/locks/the mutation locks
deployment/the nginx and systemd units the live site runs on
docs/the documentation served at proofofstock.xyz/docs

Licence, security, contact

Source: README.md at commit 67d8d53

Tools

6

find_stock_token

Find a stock token

Find issuer-listed tokenized stocks on a chain by ticker, company name or ISIN. Returns the official contract addresses. An empty result says only that the issuer lists no such token, nothing about impostors. Two chains: base (Coinbase's tokens, symbols end in "c", e.g. NVDAc) and robinhood (Robinhood's, e.g. NVDA). When the user names no chain, call it for both. Facts with their time and source, not advice: https://proofofstock.xyz/docs/legal.md

Parameterschainrequiredqueryrequired

list_stock_tokens

List an issuer registry

List every token in a chain's issuer registry: symbol, name, contract address, ISIN, multiplier, whether it is minted on the chain and whether the issuer publishes a reference price. The answer opens with the exact count (also the `count` field); quote that number, do not estimate it from the list. On Base many listed tokens are not minted yet and do not trade (`minted`). Two chains: base (Coinbase's tokens, symbols end in "c", e.g. NVDAc) and robinhood (Robinhood's, e.g. NVDA). When the user names no chain, call it for both. Facts with their time and source, not advice: https://proofofstock.xyz/docs/legal.md

Parameterschainrequired

stock_passport

Stock token passport

Passport of one token address: whether it is in the issuer registry (and, if not, which listed stock its name imitates); the issuer reference price and its age; the latest DEX price and its premium over the reference; the premium series split by US market session; and every gap named. Readings are recorded every 15 minutes (latest.cadence_s), so "latest" is a recorded reading, not a live quote: see latest.age_s. premium compares the latest on-chain price with the issuer reference, whose own age is reference.age_s; when the two are far apart in time, latest.premium_at_reference_time gives the premium of one moment. sources names every source and the pool rule. Every answer opens with one plain sentence; quote it. In the JSON, premium and spread are FRACTIONS (0.01 = 1%; premium > 0 means the on-chain price is above the issuer's), *_age_s and age_s are seconds before generated_at, prices are USD per token. A token is worth `multiplier` shares, and the issuer's reference is already per token. reference.kind: nav_total_return = Coinbase's NAV, token_bid_ask_mid = the mid of Robinhood's token bid/ask. notes are codes for every gap (e.g. reading_stale = our last reading is over 30 min old, pools_capped = the pool count is a minimum). Two chains: base (Coinbase's tokens, symbols end in "c", e.g. NVDAc) and robinhood (Robinhood's, e.g. NVDA). When the user names no chain, call it for both. Facts with their time and source, not advice: https://proofofstock.xyz/docs/legal.md

Parameterschainrequiredhoursaddressrequiredinclude_series

verify_stock_tokens

Verify stock token addresses

Before buying a token that claims to be a stock, check its contract address: is it on the issuer's own registry for this chain (Base: Coinbase; robinhood: Robinhood)? Up to 50 addresses per call. listed=true is decided by the exact address alone. listed=false means "not in this issuer's registry", not "fake" (it may be another issuer's token); impostor is set only when the token copies a listed symbol or the issuer's naming, and then listed_address is the real one. If the registry cannot be read the call fails rather than answering false. Facts, not advice.

Parameterschainrequiredaddressesrequired

recent_impostors

Recent impostors

Tokens on a chain whose symbol or name copies an issuer-listed stock token while their contract is not in that registry, newest first (at most 50), optionally since an ISO time. Each names what it imitates and the listed address. A claim with evidence, not a verdict.

Parameterschainrequiredsince

compare_venues

Compare one share across venues

For shares listed on BOTH Base (Coinbase) and Robinhood Chain (Robinhood), matched by ISIN: per venue the on-chain price's premium over that venue's own issuer reference, the reference kind and age, the deepest pool's liquidity and the multiplier, and the gap (Robinhood premium minus Base premium) when both are current. Raw prices are never compared: multipliers and references differ (Coinbase NAV vs Robinhood bid/ask), so a gap is not a price difference or an arbitrage. Name a share by isin or by ticker (NVDA, or NVDAc); with neither, the 20 rows with the largest gap. A missing premium carries its reason; a reading older than 30 min is flagged stale and gets no gap. Facts, not advice.

Parametersisinsymbol

Version history

1
  1. v0.5.0LatestNov 12, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts