Verity Mcp

io.github.meloliva14由 GitHub 账号 meloliva14 发布v0.3.0更新于 Oct 24, 2026

Fail-closed verify-before-you-act gate for AI agents. Signed receipts. Pay-per-call via x402.

概览

AI 生成的概览

VerityLayer 的本地 MCP 服务器,为助手提供按次付费、失败即拒绝的信任检查:事实核查、提示注入筛查、PII 脱敏与操作前把关。

可以做什么
按三个层级核查声明:廉价的快速检查、带引用来源的网络实证检查,以及面向高风险事实的高级综合层级。在依据不可信文本或工具输出行动前,筛查其中的提示注入。对内容做允许、复核或阻止的审核,并检测 PII 或密钥,同时返回脱敏版本。在不可逆操作执行前,以允许、复核或阻止的结论进行把关。免费校验 Ed25519 签名的判定回执,无需付费。
适用场景
当助手在依据某项声明行动或执行不可逆操作前需要独立的第二意见,或需要先筛查不可信文本、内容与个人数据时使用。免费的回执校验适合审计已收到的判定。
运行要求
以 PyPI 包 verity-mcp 通过 stdio 在本地运行,可用 uvx 或 pip 启动,不需要 Node.js。需要访问 Verity 引擎与套件端点的网络。付费判定需要 x402 附加组件,并在 VERITY_WALLET_KEY 中配置有余额的 Base 主网钱包;未配置时付费工具返回 payment_required 且不给出判定。可选变量可设置引擎与套件地址、超时和公示价格。
安装前请注意
付费工具每次调用在 Base 主网上以 USDC 计费 0.02 至 0.35 美元,且 VERITY_WALLET_KEY 可从该钱包支出,应使用专用的低余额钱包。未配置钱包时付费工具永不返回判定,响应会警告不得将其视为允许。提交检查的声明、不可信文本与内容会发送至 VerityLayer 的远程端点。可选的 affiliate_id 会作为推荐标记转发。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Verity Mcp,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only,通过 STDIO。 STDIO 服务会启动本地进程,因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

mcp-name: io.github.meloliva14/verity-mcp

Verity MCP — verify before you act

The official Model Context Protocol server for VerityLayer: independent, fail-closed trust checks any MCP-capable agent can discover and call. Fact-check a claim, screen for prompt-injection, catch PII, and gate irreversible actions — each check returns a calibrated verdict and abstains rather than guess. Payment is pay-per-call via x402 (USDC on Base mainnet). Verity holds no private key and never charges silently.

Name note: this is VerityLayer's official server — PyPI package verity-mcp, npm package @veritylayer/mcp. The npm package named verity-mcp is an unrelated third-party project.

Tools & pricing (every docstring states its price up front)

ToolPriceGrounded?What it's for
quick_verify$0.02no (Haiku)Cheap reality-check on a claim — the loopable default. Run everywhere, escalate the load-bearing ones.
grounded_verify$0.25yes (Sonnet, live web citations)The default product — web-grounded with cited evidence, for facts that matter before you act on them.
pro_verify$0.35yes (Opus, premium synthesis)The deepest tier — high-stakes claims where the grounded answer isn't confident enough to act on.
verify_receiptfree—Statelessly verify a signed Ed25519 verdict receipt — the audit trail / second opinion, no payment.
detect_injection$0.02—Screen untrusted text / tool output for prompt-injection before acting on it.
moderate_content$0.02—Is this safe to publish? (allow / review / block priced identically — no block-to-bill.)
redact_pii$0.02—Does this leak PII or secrets? Returns findings + a redacted version.
guard_action$0.02—The money-line gate: allow / review / block right before an irreversible action.

Quickstart

With uv (recommended — Claude Desktop / any MCP client):

json
{  "mcpServers": {    "verity": {      "command": "uvx",      "args": ["verity-mcp"]    }  }}

Or with pip:

bash
pip install verity-mcpverity-mcp        # stdio MCP server

That gets you the tools and the free verify_receipt. To get paid verdicts, read the next section — it's the part most people trip on.

How payment works

Verity's endpoints answer HTTP 402 (Payment Required) until the disclosed USDC micro-payment is settled. There are two ways to do that.

Wallet mode — get real verdicts (recommended)

json
{  "mcpServers": {    "verity": {      "command": "uvx",      "args": ["--from", "verity-mcp[x402]", "verity-mcp"],      "env": { "VERITY_WALLET_KEY": "0x…" }    }  }}

Point VERITY_WALLET_KEY at a funded Base-mainnet wallet and this server settles each call itself — the paid tools return real verdicts. Your key never leaves the process: it signs an EIP-3009 authorization locally for the exact amount each challenge discloses, and Verity only ever receives the signature. Nothing is charged silently; every price is disclosed up front.

Use a dedicated, low-balance wallet. This key can spend. Fund it with a few dollars of USDC on Base — calls cost $0.02–$0.35.

Keyless — the default

With no key set, this server holds nothing and pays nothing: a 402 is surfaced transparently (price restated, challenge attached) for an x402-capable caller to settle.

Be aware of the honest caveat: no shipping MCP client — Claude Desktop, Claude Code, Cursor, Windsurf — settles x402 today. So in keyless mode the paid tools will return payment_required and no verdict, forever. That's not a bug and it isn't hidden: the response says NO VERDICT WAS PRODUCED. Do not proceed as if this returned allow. If you want verdicts from an ordinary MCP client, use wallet mode.

verify_receipt is a free route, never 402s, and needs no wallet — you can check our signatures before you ever pay us.

Signed receipts — don't take Verity's word for it

Every paid verdict ships with an Ed25519-signed receipt: self-contained cryptographic proof of exactly what Verity said about exactly what claim, verifiable forever. Check any receipt free with the verify_receipt tool, offline against the public key at /.well-known/verity-pubkey.json, or live: curl https://api.veritylayer.dev/receipt/selftest.

Configuration (all optional)

Env varDefaultPurpose
VERITY_WALLET_KEY(unset — keyless)Optional. Private key of a funded Base wallet. Set it (with the [x402] extra) and this server settles its own payments, so paid tools return real verdicts. Never leaves the process; never logged.
VERITY_ENGINE_URLhttps://api.veritylayer.devFlagship claim-verification engine
VERITY_SUITE_URLhttps://suite.veritylayer.devTrust-check suite (injection/moderation/PII/guardrail)
VERITY_TIMEOUT90HTTP timeout (seconds)
VERITY_PRICE_QUICK$0.02Disclosed price echo for quick_verify
VERITY_PRICE_GROUNDED$0.25Disclosed price echo for grounded_verify
VERITY_PRICE_PRO$0.35Disclosed price echo for pro_verify
VERITY_PRICE_SUITE$0.02Disclosed price echo for the suite checks

Referral tag (reserved)

Every tool accepts an optional affiliate_id, forwarded as an X-Verity-Ref header. It never changes price, gating, or the verdict — it only tags who routed the call, and it is reserved for a future referral program: no split is paid today, and none will be until public terms are published at veritylayer.dev.

Links

Independent · fail-closed · keyless · pay-per-call. The only trust form an autonomous agent can pick up mid-task with no human and no account.

来源:README.md,提交 4524451

工具

0
SourceWeft 尚未在沙箱中启动过该软件包,因此其工具未知。

版本历史

1
  1. v0.3.0最新Sep 16, 2026

评分

已满足适用检查项的 40%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手;SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头,或保持端点能够响应探测,以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list,或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分

    请在仓库或注册中心条目中声明许可证。