Intesta — trust registry lookup

io.intesta由 intesta.io 发布v0.2.0更新于 Oct 24, 2026

One-call trust check for any domain (A0-A4, verdict, signed) + fact passports; same tools as remote

发布方自己的服务:Intesta

概览

AI 生成的概览

只读的 Intesta 信任注册表 MCP 代理,让助手在行动前查询域名的信任等级、判定结果与已核实事实。

可以做什么
  • 一次调用检查域名信任:是否收录、A0-A4 等级、attested 标记、指定策略下的判定、证据、有效期与签名
  • 获取实体的完整事实护照,含证明状态、证据类别、是否过期、护照哈希与签名
  • 就某实体提问,仅依据该实体已记录的事实作答并附签名
  • 按名称、域名或行业搜索实体,并列出注册表内容
  • 说明 A0-A4 信任阶梯的含义及如何作为智能体使用该注册表
适用场景
适合助手在决定是否付款、共享数据或遵循某域名/交易对手的指示时,需要一份有签名、基于证据的信任信号而非猜测。也适合查询某实体究竟有哪些已被证明的事实。
运行要求
以 Python 包形式通过 uvx 在本地运行(需 Python 工具链)。公开注册表读取无需 API 密钥;可选的 INTESTA_API_KEY 仅用于计量或私有用途。需要访问 Intesta API 的网络连接。另提供工具相同的远程 streamable-http 端点。
安装前请注意
所有工具均为只读,但查询内容会向 Intesta 服务暴露你查询了哪些域名。判定结果是注册表的证据对照公开策略得出的,并非保证,也不构成财务建议;未收录域名返回 unknown 而非 failed,auto_collected 事实未经核实。若依赖签名,请对照公开密钥验证。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Intesta — trust registry lookup,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only,通过 STDIO。 STDIO 服务会启动本地进程,因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

intesta-mcp

An MCP server that lets an AI agent check who it is dealing with before it acts.

Intesta is a trust registry. Every entity has a trust level on the A0→A4 ladder (A0 claimed · A1 domain-control · A2 payment-verified · A3/A4 higher) and a set of facts, each marked confirmed (independently verified) or auto_collected (scraped from public sources, not verified). This package is a thin proxy over the public HTTP API and exposes the same tool names and shapes as the remote server https://intesta.io/mcp — one contract on every surface (since 0.2.0).

Its ethos is Intesta's own: refuse, don't guess. A level is only ever what was proven; an auto_collected fact is not a verified one. The server reports exactly what the registry says and never upgrades either.

Tools

ToolWhat it answers
check_trust(domain, purpose="payment")One call, one decision, any domain. known, level A0..A4, attested (true only at A1+), verdict (sufficient / insufficient / unknown) under a named policy profile (payment/v1 needs A2, data_share/v1 and follow_instructions/v1 need A1), what_is_proven, proof, expires_at, next_step, signature. Unlisted domain → unknown, never "failed".
get_passport(entity_domain)The full fact passport: facts with attestation_status / evidence_class, as_of, effective_expiry, stale, plus the attestation block, passport_hash and signature.
ask(entity_domain, question)A question answered only from that entity's facts, signed (passport_hash + registry signature). A refusal means the passport has no such fact.
search_entities(query, limit=20)Find entities by name / domain / vertical (literal substring, ≥3 chars); each result carries its level.
list_entities()The registry (first 500 + total).
get_trust_ladder()What each of A0..A4 means and how to use the registry as an agent.

Deprecated 0.1.x aliases (search_registry, get_facts, ask_entity, trust_ladder) still work for one release and are removed in 0.3.0.

All tools are read-only and need no API key — public registry reads work out of the box. An optional INTESTA_API_KEY (ik_…) is only needed for metered or private use.

Errors (unknown entity, invalid question or query, API failure) are returned as MCP error results (isError: true), never as data-shaped successes.

Install

jsonc
// Claude Desktop / any MCP client — mcp config{  "mcpServers": {    "intesta": { "command": "uvx", "args": ["intesta-mcp"] }  }}

Or connect to the remote server directly (same tools, no install): https://intesta.io/mcp (streamable-http).

Example

check_trust("acme-invoicing.com")→ {"known": false, "level": null, "attested": false, "status": "not_checked",   "verdict": "unknown", "policy_profile": "payment/v1",   "next_step": "Not in the Intesta registry: nothing is proven either way. Treat as unverified. ...",   "signature": {...}}
check_trust("darkpanther.eu", purpose="data_share")→ {"known": true, "level": "A1", "attested": true, "verdict": "sufficient",   "what_is_proven": "...", "proof": {"method": "well_known", "verified_at": "..."},   "expires_at": "2026-10-03T...", "signature": {...}}

A verdict is the registry's proof measured against a published profile — never a guarantee, never financial advice. Verify the signature against https://intesta.io/.well-known/intesta-key (see https://intesta.io/llms.txt).

Development

pip install -e ".[test]"pytest

License: MIT. Publisher: DC ESCRYPT SL — https://intesta.io

来源:README.md,提交 2bf290f

工具

0
SourceWeft 尚未在沙箱中启动过该软件包,因此其工具未知。

版本历史

1
  1. v0.2.0最新Sep 16, 2026

评分

已满足适用检查项的 50%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手;SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头,或保持端点能够响应探测,以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list,或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分

其他 Intesta 集成