Witnessd

vip.witnessd由 witnessd.vip 发布v0.1.1更新于 Oct 24, 2026

Neutral third-party witness: independently fetch, hash, timestamp, archive any URL or API response.

已验证STDIO仅桌面网页搜索与抓取安全与监控

概览

AI 生成的概览

让助手把公开网址或 API 响应交由独立第三方抓取、哈希、加时间戳并归档，返回签名证书。

可以做什么
Witnessd 是一个中立的第三方见证服务。其 witness_url 工具会独立抓取公开网址或 API 端点，对响应做哈希与时间戳并归档，返回快照 id 和签名证书。get_certificate 可凭任意快照 id 取回清单、Ed25519 签名、Merkle 证明和 Base 锚定交易；retrieve_snapshot 返回归档的响应正文及证书。快照哈希按小时做 Merkle 批量并锚定在 Base 上，因此证书无需信任运营方即可验证。
适用场景
适用于日后争议可能取决于某个网址或 API 在某一时刻返回了什么的情况：在交易前见证对手方公布的价格或条款，或在依据第三方 API 数据行动前记录其返回内容。也可让第三方凭快照 id 获取归档证据。
运行要求
通过 npm 包 witnessd-mcp 以 stdio 在本地运行（npx -y witnessd-mcp），仅限桌面端，无网页版。需要访问 witnessd 服务的网络（默认 WITNESSD_URL 覆盖），以及一个支付凭据：EVM_PRIVATE_KEY（持有 Base 上 USDC 的钱包私钥）或 WITNESSD_API_KEY（预付额度密钥）。未声明账号登录。
安装前请注意
按次付费：witness_url 每次 0.02 美元，retrieve_snapshot 每次 0.05 美元；设置 EVM_PRIVATE_KEY 后通过 x402 在 Base 上以 USDC 自动支付，请使用小额专用钱包，切勿使用主钱包。EVM_PRIVATE_KEY 与 WITNESSD_API_KEY 均为机密。证书（哈希、时间戳、证明）是公开的，归档内容仅交付给付费请求方。见证范围限于任何人可见的公开页面，正文不超过 10 MB。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Witnessd，将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only，通过 STDIO。 STDIO 服务会启动本地进程，因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

witnessd-mcp

MCP server for witnessd — a neutral third-party witness for the machine-readable web.

Give your agent the ability to create tamper-evident evidence: witnessd independently fetches any public URL or API endpoint, hashes and timestamps the response, archives it, and issues a signed certificate. Snapshot hashes are Merkle-batched hourly and anchored on Base, so certificates verify forever — by anyone, without trusting the operator.

Use it before transacting with a counterparty ("witness their published price/terms"), before acting on third-party data ("witness what the API returned"), or whenever a dispute might later hinge on what a URL said at a moment in time.

Quick install

You useRun this
Claude Code (skill + MCP server in one step)/plugin install witnessd --marketplace jschunter/witnessd-mcp
Any agent with Agent Skills (Cursor, Codex, Copilot, Gemini CLI and others)npx skills add jschunter/witnessd-mcp
Any MCP client, MCP server onlynpx -y witnessd-mcp (config below)

The skill (plugin/skills/witnessd/SKILL.md) teaches an agent when a neutral witness is worth two cents: before paying an unfamiliar seller, before acting on third-party data, or when asked to prove what a page said. It also sets spending rules: at most 5 paid calls per task without approval, a one-line report of each call, and no paid retries in a loop. The MCP server gives the agent the tools.

On older Claude Code versions, run /plugin marketplace add jschunter/witnessd-mcp and then /plugin install witnessd@witnessd.

Tools

ToolPriceWhat it does
witness_url$0.02Independent fetch + hash + timestamp + archive of a URL right now; returns snapshot id + signed certificate
get_certificatefreeCertificate for any snapshot id: manifest, Ed25519 signature, Merkle proof, Base anchor transaction
retrieve_snapshot$0.05The archived response body + certificate — works for any snapshot id, any payer (this is how third parties obtain evidence)

Install

bash
npx -y witnessd-mcp

Claude Desktop / Cursor config:

json
{  "mcpServers": {    "witnessd": {      "command": "npx",      "args": ["-y", "witnessd-mcp"],      "env": {        "EVM_PRIVATE_KEY": "0x…"      }    }  }}

Payment — two options

Set one of these environment variables:

  • EVM_PRIVATE_KEY — a wallet key holding USDC on Base. The server auto-pays each call via x402 (the buyer only signs; no ETH needed for gas). Use a small dedicated wallet, never your main one.
  • WITNESSD_API_KEY — a prepaid credit key (buy a $1 pack via POST https://witnessd.vip/api/credits, x402-payable).

Optional: WITNESSD_URL to point at a different witnessd instance (default https://witnessd.vip).

Verify without trusting us

Certificates are self-verifying: leaf_hash = sha256(canonical-json(manifest)), Ed25519-signed, Merkle-proven into an hourly batch root anchored on Base (calldata 0x + wtns1 + root). Standalone checker: witnessd.vip/verify.js.

Privacy & scope

Certificates (hashes, timestamps, proofs) are public; archived content is delivered only to paying requesters and never republished. witnessd only witnesses what any stranger can see — no logins, no private networks, bodies ≤10 MB. Machine-readable service docs: llms.txt · openapi.json · /.well-known/x402.

MIT license.

来源：README.md，提交 69eabdc

工具

0
SourceWeft 尚未在沙箱中启动过该软件包，因此其工具未知。

版本历史

1
  1. v0.1.1最新Sep 16, 2026

评分

已满足适用检查项的 50%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手；SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头，或保持端点能够响应探测，以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list，或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分