io.github.allooloo由 GitHub 账号 allooloo 发布v2.3.1更新于 Nov 7, 2026
The record of what the agent relied on: a signed, chained receipt per cleared read. Verify by id.
远程 MCP 服务，为受监管记录的已放行读取写入、列出并验证带签名的链式回执，并提供签名对账单与审计密钥。
Web executable，通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。
把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体，或 SourceWeft 对话中。智能体会读取该服务器的安装指南，先向你展示发布者、端点和登录方式，经你同意后再把它添加到你的客户端。密钥不会写进任何命令。
阅读 https://sourceweft.com/mcp/io.github.allooloo%2Frco-records/install.md，并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前，先告诉我它的发布者、端点和登录方式，等我确认。不要把 API 密钥写进命令或我会提交的文件；问我密钥应从哪里获取。把它添加到你客户端的 mcpServers 配置中。
{
"mcpServers": {
"rco-records-record-of-cleared-orders": {
"type": "http",
"url": "https://mcp.rco-records.ai/mcp"
}
}
}RCO — the record of what the agent relied on. Every read, receipted.
Every answer the Allooloo record gives a regulated agent is receipted: one signed receipt per cleared read, chained to the one before, verifiable by anyone against a published key. The receipt is the agent's alibi.
write_receipt (bearer token per writer), verify_receipt (public)https://rco-records.ai/receipts/{id}Standard held by Allooloo Technologies Corp. · Open standard, MIT licence. — https://allooloo.ai
The spec and the reference verify() ship under MIT (LICENSE). Nothing else is licensed: the chain, the keys, the door and the Register are operated by Allooloo, not licensed.
verify(receipt, jwks) is a pure function: recompute hash (and id for v1), check sig against kid. A receipt verifies forever without asking Allooloo anything.
来源：README.md，提交 22ad261
Write one v1 receipt for a read a gate has cleared. Authenticated: Authorization: Bearer <writer token>. Idempotent on (writer, subject, subject_type, market, rule_version, cleared_at, answer_hash). Returns the receipt.
callermarketsubject必填caller_keycleared_atanswer_hashrule_version必填subject_type必填Return one receipt by id (rco:… for v1, dec_… for v0) with the verification result (hash, id, signature) and the public key (JWK) that checks it. Public.
id必填Your own receipts only — the rows whose caller is your customer key — by seq range (from_seq, to_seq, after_seq) or date range (from, to: YYYY-MM-DD, to inclusive), limit ≤ 500. Authorization: Bearer <customer key>. Refuses without a key.
tofromlimitto_seqfrom_seqafter_seqA signed statement of your slice for a month (month: YYYY-MM) or a date range (from, to: YYYY-MM-DD, to exclusive): count, first and last seq, slice digest, the chain tip at issue, Ed25519 signature by Allooloo. Authorization: Bearer <customer key>.
tofrommonthIssue a read-only sub-key on your own slice for your auditor (list_receipts and get_statement only). Authorization: Bearer <customer key>. The key value is returned once.
name已满足适用检查项的 100%
该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。
node sdk/typescript/cli.ts rco:4xvpzgxxmno5bfxxmv5hpython sdk/python/rco_verify.py rco:4xvpzgxxmno5bfxxmv5h