Invinoveritas

com.babyblueviper由 babyblueviper.com 发布官方发布者v1.14.1更新于 Nov 2, 2026

Second opinion before an irreversible agent action; signed proofs, free verify, public ledger.

已验证Streamable HTTP可网页运行开发者工具安全与监控AI 与机器学习

概览

AI 生成的概览

托管式 MCP 服务器,让 AI 代理在风险或不可逆操作前获得独立的签名第二意见,并提供验证这些证明的工具。

可以做什么
  • 对代码差异、shell 命令、部署计划、配置变更、交易或链上操作请求独立裁决(通过、有保留通过或拒绝),附按严重程度排序的问题与签名证明
  • 重新计算并校验他人转交的签名证明,确认签名密钥为官方公布密钥,可选核对内容哈希
  • 为第三方原始声明字节做带时间戳、不作评判的存证
  • 读取公开只追加的裁决账本,并将自己的签名评审证明发布到账本
  • 获取受裁决约束的支付签名回执,重试状态可防止同一 nonce 重复支付
  • 对回测收益做统计真实性检验,并审计公开代理或 API 网址的可验证性,给出评分与签名证明
适用场景
当代理即将执行难以撤销的操作——发布代码、运行破坏性 shell 命令、修改生产配置或签署交易——需要中立裁决和可供他人复核的证明时使用。收到他人提供的签名裁决或媒体声明、又不想信任发送方时也适用。
运行要求
远程 Streamable HTTP 端点,无需安装。通过 MCP OAuth 登录,或使用免费 API 密钥以 Authorization Bearer 头传递。review 与 witness 为付费调用;verify_proof、ledger 和 payment_receipt 免费且无需认证。需要能访问服务商 API 的网络。
安装前请注意
付费工具需要账号和 API 密钥,调用可能产生费用。ledger_submit 与 conformance_certify 会永久发布到公开中继和带比特币时间戳的账本,无法撤回。review、witness 和 audit_agent_readiness 会把你的工件或网址发送给第三方服务。裁决仅为建议性,不会阻止操作,不能替代自身的安全措施。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Invinoveritas,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Web executable,通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体,或 SourceWeft 对话中。智能体会读取该服务器的安装指南,先向你展示发布者、端点和登录方式,经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/com.babyblueviper%2Finvinoveritas/install.md,并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前,先告诉我它的发布者、端点和登录方式,等我确认。不要把 API 密钥写进命令或我会提交的文件;问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。

{
  "mcpServers": {
    "invinoveritas": {
      "type": "http",
      "url": "https://api.babyblueviper.com/mcp/verify"
    }
  }
}

README

invinoveritas — MCP server

An independent review gate for AI agents, as a hosted MCP server. Before your agent takes an irreversible action — shipping code, running a shell command, signing a transaction — it calls review for a neutral second opinion from a party that isn't the agent, and gets back a recomputable, Bitcoin-anchored proof anyone can re-verify without trusting the agent or us.

The one thing an agent can't self-serve is a trustworthy verdict on its own output. This is that verdict — model-agnostic, advisory (it never blocks), and checkable from the bytes.

  • Hosted, no install. Remote Streamable-HTTP MCP server: https://api.babyblueviper.com/mcp/verify
  • Sign-in: standard MCP OAuth in clients that support it (a free account can be created on the consent screen), or a free API key as a Bearer header: curl -X POST https://api.babyblueviper.com/register -d '{"label":"mcp"}'
  • verify_proof, ledger, and payment_receipt are always free / no auth.

Tools

ToolWhat it doesAuth
reviewIndependent verdict (approve / approve_with_concerns / reject) on a code diff, shell command, plan, config, trade, or on-chain transaction, with ranked issues + a portable signed proof.Bearer (paid)
verify_proofRecompute and verify a signed invinoveritas proof someone handed you — confirms it without trusting the presenter or us.free
payment_receiptSigned receipt for one verdict-governed payment. retry_state is read on chain, so the same nonce cannot double-pay. Does not move funds.free
witnessAnchor a third party's exact claim bytes, unmodified and unjudged — pure notarization (receipt + timestamp + integrity), distinct from review (our verdict). Source is self-declared and marked as such in the signed proof.Bearer (paid)

Also on this endpoint: ledger (free public verdict track record), validate (backtest reality-check), audit_agent_readiness, ledger_submit, conformance_certify. 9 tools in all; the server never moves money or assets for the user.

Add it to your agent

Cursor — one-click: Add invinoveritas to Cursor (it signs in with OAuth on the first paid call), or edit ~/.cursor/mcp.json (global) / .cursor/mcp.json (project):

json
{  "mcpServers": {    "invinoveritas": {      "url": "https://api.babyblueviper.com/mcp/verify",      "headers": { "Authorization": "Bearer YOUR_API_KEY" }    }  }}

Cline — Add via the MCP marketplace, or in cline_mcp_settings.json:

json
{  "mcpServers": {    "invinoveritas": {      "type": "streamableHttp",      "url": "https://api.babyblueviper.com/mcp/verify",      "headers": { "Authorization": "Bearer YOUR_API_KEY" }    }  }}

Gemini CLI — install as an extension:

bash
gemini extensions install https://github.com/babyblueviper1/invinoveritas-mcp

Claude Code:

bash
claude mcp add --transport http invinoveritas https://api.babyblueviper.com/mcp/verify \  --header "Authorization: Bearer YOUR_API_KEY"

Devin — Settings → Connections → MCP servers → Add a custom MCP → HTTP (Streamable), URL https://api.babyblueviper.com/mcp/verify, Auth Header Authorization: Bearer YOUR_API_KEY.

OpenHands — config.toml:

toml
[mcp]shttp_servers = [{ url = "https://api.babyblueviper.com/mcp/verify", api_key = "YOUR_API_KEY", timeout = 60 }]

Any MCP client — point it at https://api.babyblueviper.com/mcp/verify (Streamable HTTP) with header Authorization: Bearer YOUR_API_KEY. Protocol 2025-06-18; the handshake, tools/list, and tools/call work out of the box.

Use it

Tell your agent: before opening a PR or running an irreversible command, call review with the diff/command as artifact, set artifact_type (code_diff / shell_command / onchain_action / general), and sign: true. On reject, hold and fix; on approve, attach the proof so reviewers can re-verify it.

Pairing with a fast gate (e.g. Jev)

Fast judgment models such as TypeSafe's Jev (jev_gate in the community jev-mcp server) screen every tool call in a few hundred milliseconds and answer allow / confirm / block. They are a good first line. What they don't give you is an independent verdict someone else can check later. Use both: let the fast gate handle the routine calls, and escalate only the risky or irreversible ones to invinoveritas.

gate = jev_gate(action=cmd, context=why)             # ~0.3 s, every callif gate.recommendation == "allow" and not gate.touches_prod:    run(cmd)                                          # routine: no second opinion neededelif gate.recommendation == "block":    stop_and_explain(gate)                            # clear noelse:                                                 # "confirm", or anything touching prod    v = review(artifact=cmd, artifact_type="shell_command", context=why, sign=True)    if v.verdict == "reject": stop_and_explain(v.issues)    else: run(cmd); keep(v.proof)                     # signed proof anyone can verify_proof later

The fast gate keeps latency and cost low on the many calls; the signed verdict covers the few that matter, and leaves a record that doesn't depend on trusting either the agent or us.

Why a verdict you can recompute

review with sign: true returns a proof that is a BIP-340-signed Nostr event, published to a public, Bitcoin-anchored ledger. Verify it offline against our published key — recompute the event id and check the schnorr signature — or POST it to https://api.babyblueviper.com/verify-proof (free, no auth). Trust the math, not us. Wins and losses are published; the track record is a forensic artifact, not a score.

  • Recompute a proof yourself: zero-dep pip install invinoveritas-verify / npm i invinoveritas-verify
  • Server card: https://api.babyblueviper.com/.well-known/mcp/server-card.json

License

MIT

来源:README.md,提交 d07e163

工具

10

review

Pre-action verdict

Independent verdict on a proposed action before it is taken: a code diff, shell command, deployment plan, configuration change, another agent's output, or a proposed transaction. Returns approve / approve_with_concerns / reject with a confidence score, issues ranked by severity, suggested fixes and alternatives. With sign=true the verdict is returned as a signed proof that anyone can check later with verify_proof. The verdict is a reasoned second opinion, not a guarantee of outcome. Docs: https://api.babyblueviper.com/docs

输入参数signfactspolicycontextartifact必填concernsevidenceartifact_typeverdict_relayaction_bindingrelated_claimsdisclosed_summary另有 8 个

verify_proof

Verify a proof (free)

Checks a signed invinoveritas proof without trusting whoever handed it over: recomputes the event id, checks the Schnorr signature, and confirms the signing key is invinoveritas's published key. Optionally pass expect_artifact_hash (sha256 of the content you received) to confirm the proof covers that exact content. Accepts the full event, or an event_id to look up. Returns {valid, checks, proof_payload}. Free, no sign-in. Docs: https://api.babyblueviper.com/verify

输入参数eventevent_idproof_idverifier_signatureexpect_artifact_hashexpect_intended_verifier

payment_receipt

Payment receipt (free)

Signed receipt for one verdict-governed payment: endpoint, network, asset, max amount, payer, facilitator verdict, settlement id, denial reason, and retry state. retry_state is read from the token's authorizationState, so retrying with the same nonce cannot double-pay. Pass the signed review event and the payment args it bound; optional tx_hash. Refuses unsigned when the verdict does not verify or does not bind those args. The receipt itself checks with verify_proof. Free, no sign-in. Does not move funds. Docs: https://github.com/babyblueviper1/invinoveritas/tree/main/examples/qbtlabs-x402-verdict-gate#payment-receipt-safe-to-retry

输入参数args必填event必填tx_hashterms_hashoutput_hashresource_urlauthorization_signaturemax_verdict_age_seconds

verify_media

Verify media by hash (free)

Check whether a video, audio or image file is byte-for-byte a file a publisher registered with invinoveritas. Pass the file's SHA-256 (compute it locally; the file is not sent). A match returns the registration: per-claim evidential states from its C2PA Content Credentials (signature/hash binding, signer trust, declared edit history, declared AI-generation labels: VERIFIED / DECLARED_ONLY / CONTRADICTED / INSUFFICIENT), any capture tier with its caveat, the signed verdict and the Bitcoin timestamp. No match means not registered, which says nothing either way about the file. A re-encoded copy has a different hash. It never asserts that content is true. Full checks of the file itself: POST /verify-media (upload, free). Free, no auth.

输入参数sha256必填

witness

Witness a third-party claim

Timestamps and signs a third party's exact claim, unmodified and unjudged: 'we received this text, attributed to source X, at time T', not 'we agree with it'. The source is recorded as self-declared. The resulting proof checks with verify_proof. Docs: https://api.babyblueviper.com/docs

输入参数body必填source必填

validate

Backtest reality-check

Statistical reality-check of a backtest from its realized returns (or trade rows), not the strategy itself. Returns likely_real / borderline / overfit_or_noise using the Deflated Sharpe Ratio (adjusted for the number of variants tried), a sign-flip permutation test, and out-of-sample decay across purged folds. Inputs are not retained beyond a redacted audit hash. Docs: https://api.babyblueviper.com/docs

输入参数tradesk_foldsn_permsreturnsagent_idn_trialstrial_sharpesperiods_per_year

ledger

Public verdict ledger (free)

Reads invinoveritas's public track record of signed verdicts, including ones that turned out wrong. Each entry is a signed Nostr event whose id and signature can be recomputed against invinoveritas's published key; entries are append-only and Bitcoin-timestamped, so they can't be edited after the fact. No arguments returns the index; pass entry to read one. Free, no sign-in. Docs: https://api.babyblueviper.com/ledger

输入参数entry

ledger_submit

Publish your verdict to the ledger

Publishes one of your own signed review proofs (from review with sign=true) as a public entry on the invinoveritas ledger. Publication is immediate and permanent: the entry is broadcast to Nostr relays and Bitcoin-timestamped. Only genuine invinoveritas-signed proofs are accepted. Docs: https://api.babyblueviper.com/ledger

输入参数noteevent必填

conformance_certify

Publish a verifier's conformance grade

Publishes a verifier's current conformance grade from the public registry (conformance.json) as a permanent, signed ledger entry, labeled 'certified as of this measurement'. It records the registry's existing measurement and cannot change it. Only works for a verifier currently listed as certified. Docs: https://api.babyblueviper.com/conformance

输入参数name必填note

audit_agent_readiness

Agent-readiness audit

Audits a public agent or API URL for verifiability: discovery files (llms.txt, MCP card, robots, sitemap), handshake endpoints, and whether presented signed proofs validate. Returns a 0-100 score, a grade, ranked fixes, and a signed proof of the audit. Every result re-derives from a public fetch. Docs: https://api.babyblueviper.com/docs

输入参数url必填

版本历史

2
  1. v1.14.1最新Sep 27, 2026
  2. v1.13.0Sep 16, 2026

评分

已满足适用检查项的 90%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分

    请在仓库或注册中心条目中声明许可证。