Invinoveritas

com.babyblueviper由 babyblueviper.com 發布官方發布者v1.14.1更新於 Nov 2, 2026

Second opinion before an irreversible agent action; signed proofs, free verify, public ledger.

已驗證Streamable HTTP可網頁執行開發者工具安全與監控AI 與機器學習

概覽

AI 產生的概覽

託管式 MCP 伺服器,讓 AI 代理在風險或不可逆操作前取得獨立的簽章第二意見,並提供驗證這些證明的工具。

可以做什麼
  • 對程式碼差異、shell 指令、部署計畫、設定變更、交易或鏈上操作請求獨立裁決(通過、有保留通過或拒絕),附上依嚴重度排序的問題與簽章證明
  • 重新計算並驗證他人轉交的簽章證明,確認簽章金鑰為官方公布金鑰,可選核對內容雜湊
  • 為第三方原始聲明位元組做帶時間戳、不作評判的存證
  • 讀取公開且僅可追加的裁決帳本,並將自己的簽章審查證明發布到帳本
  • 取得受裁決約束的付款簽章回執,重試狀態可避免同一 nonce 重複付款
  • 對回測報酬做統計真實性檢驗,並稽核公開代理或 API 網址的可驗證性,給出評分與簽章證明
適用情境
當代理即將執行難以復原的操作——發布程式碼、執行破壞性 shell 指令、修改正式環境設定或簽署交易——需要中立裁決與可供他人複核的證明時使用。收到他人提供的簽章裁決或媒體聲明、又不想信任寄送方時也適用。
執行需求
遠端 Streamable HTTP 端點,無需安裝。透過 MCP OAuth 登入,或使用免費 API 金鑰以 Authorization Bearer 標頭傳遞。review 與 witness 為付費呼叫;verify_proof、ledger 和 payment_receipt 免費且無需驗證。需要能連線至服務商 API 的網路。
安裝前請注意
付費工具需要帳號與 API 金鑰,呼叫可能產生費用。ledger_submit 與 conformance_certify 會永久發布到公開 relay 與帶比特幣時間戳的帳本,無法撤回。review、witness 和 audit_agent_readiness 會把你的成品或網址傳送給第三方服務。裁決僅屬建議性質,不會阻止操作,不能取代自身的安全措施。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Invinoveritas,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable,透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式,或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南,先向你展示發布者、端點和登入方式,經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/com.babyblueviper%2Finvinoveritas/install.md,並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前,先告訴我它的發布者、端點和登入方式,等我確認。不要把 API 金鑰寫進命令或我會提交的檔案;問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "invinoveritas": {
      "type": "http",
      "url": "https://api.babyblueviper.com/mcp/verify"
    }
  }
}

README

invinoveritas — MCP server

An independent review gate for AI agents, as a hosted MCP server. Before your agent takes an irreversible action — shipping code, running a shell command, signing a transaction — it calls review for a neutral second opinion from a party that isn't the agent, and gets back a recomputable, Bitcoin-anchored proof anyone can re-verify without trusting the agent or us.

The one thing an agent can't self-serve is a trustworthy verdict on its own output. This is that verdict — model-agnostic, advisory (it never blocks), and checkable from the bytes.

  • Hosted, no install. Remote Streamable-HTTP MCP server: https://api.babyblueviper.com/mcp/verify
  • Sign-in: standard MCP OAuth in clients that support it (a free account can be created on the consent screen), or a free API key as a Bearer header: curl -X POST https://api.babyblueviper.com/register -d '{"label":"mcp"}'
  • verify_proof, ledger, and payment_receipt are always free / no auth.

Tools

ToolWhat it doesAuth
reviewIndependent verdict (approve / approve_with_concerns / reject) on a code diff, shell command, plan, config, trade, or on-chain transaction, with ranked issues + a portable signed proof.Bearer (paid)
verify_proofRecompute and verify a signed invinoveritas proof someone handed you — confirms it without trusting the presenter or us.free
payment_receiptSigned receipt for one verdict-governed payment. retry_state is read on chain, so the same nonce cannot double-pay. Does not move funds.free
witnessAnchor a third party's exact claim bytes, unmodified and unjudged — pure notarization (receipt + timestamp + integrity), distinct from review (our verdict). Source is self-declared and marked as such in the signed proof.Bearer (paid)

Also on this endpoint: ledger (free public verdict track record), validate (backtest reality-check), audit_agent_readiness, ledger_submit, conformance_certify. 9 tools in all; the server never moves money or assets for the user.

Add it to your agent

Cursor — one-click: Add invinoveritas to Cursor (it signs in with OAuth on the first paid call), or edit ~/.cursor/mcp.json (global) / .cursor/mcp.json (project):

json
{  "mcpServers": {    "invinoveritas": {      "url": "https://api.babyblueviper.com/mcp/verify",      "headers": { "Authorization": "Bearer YOUR_API_KEY" }    }  }}

Cline — Add via the MCP marketplace, or in cline_mcp_settings.json:

json
{  "mcpServers": {    "invinoveritas": {      "type": "streamableHttp",      "url": "https://api.babyblueviper.com/mcp/verify",      "headers": { "Authorization": "Bearer YOUR_API_KEY" }    }  }}

Gemini CLI — install as an extension:

bash
gemini extensions install https://github.com/babyblueviper1/invinoveritas-mcp

Claude Code:

bash
claude mcp add --transport http invinoveritas https://api.babyblueviper.com/mcp/verify \  --header "Authorization: Bearer YOUR_API_KEY"

Devin — Settings → Connections → MCP servers → Add a custom MCP → HTTP (Streamable), URL https://api.babyblueviper.com/mcp/verify, Auth Header Authorization: Bearer YOUR_API_KEY.

OpenHands — config.toml:

toml
[mcp]shttp_servers = [{ url = "https://api.babyblueviper.com/mcp/verify", api_key = "YOUR_API_KEY", timeout = 60 }]

Any MCP client — point it at https://api.babyblueviper.com/mcp/verify (Streamable HTTP) with header Authorization: Bearer YOUR_API_KEY. Protocol 2025-06-18; the handshake, tools/list, and tools/call work out of the box.

Use it

Tell your agent: before opening a PR or running an irreversible command, call review with the diff/command as artifact, set artifact_type (code_diff / shell_command / onchain_action / general), and sign: true. On reject, hold and fix; on approve, attach the proof so reviewers can re-verify it.

Pairing with a fast gate (e.g. Jev)

Fast judgment models such as TypeSafe's Jev (jev_gate in the community jev-mcp server) screen every tool call in a few hundred milliseconds and answer allow / confirm / block. They are a good first line. What they don't give you is an independent verdict someone else can check later. Use both: let the fast gate handle the routine calls, and escalate only the risky or irreversible ones to invinoveritas.

gate = jev_gate(action=cmd, context=why)             # ~0.3 s, every callif gate.recommendation == "allow" and not gate.touches_prod:    run(cmd)                                          # routine: no second opinion neededelif gate.recommendation == "block":    stop_and_explain(gate)                            # clear noelse:                                                 # "confirm", or anything touching prod    v = review(artifact=cmd, artifact_type="shell_command", context=why, sign=True)    if v.verdict == "reject": stop_and_explain(v.issues)    else: run(cmd); keep(v.proof)                     # signed proof anyone can verify_proof later

The fast gate keeps latency and cost low on the many calls; the signed verdict covers the few that matter, and leaves a record that doesn't depend on trusting either the agent or us.

Why a verdict you can recompute

review with sign: true returns a proof that is a BIP-340-signed Nostr event, published to a public, Bitcoin-anchored ledger. Verify it offline against our published key — recompute the event id and check the schnorr signature — or POST it to https://api.babyblueviper.com/verify-proof (free, no auth). Trust the math, not us. Wins and losses are published; the track record is a forensic artifact, not a score.

  • Recompute a proof yourself: zero-dep pip install invinoveritas-verify / npm i invinoveritas-verify
  • Server card: https://api.babyblueviper.com/.well-known/mcp/server-card.json

License

MIT

來源:README.md,提交 d07e163

工具

10

review

Pre-action verdict

Independent verdict on a proposed action before it is taken: a code diff, shell command, deployment plan, configuration change, another agent's output, or a proposed transaction. Returns approve / approve_with_concerns / reject with a confidence score, issues ranked by severity, suggested fixes and alternatives. With sign=true the verdict is returned as a signed proof that anyone can check later with verify_proof. The verdict is a reasoned second opinion, not a guarantee of outcome. Docs: https://api.babyblueviper.com/docs

輸入參數signfactspolicycontextartifact必填concernsevidenceartifact_typeverdict_relayaction_bindingrelated_claimsdisclosed_summary另有 8 個

verify_proof

Verify a proof (free)

Checks a signed invinoveritas proof without trusting whoever handed it over: recomputes the event id, checks the Schnorr signature, and confirms the signing key is invinoveritas's published key. Optionally pass expect_artifact_hash (sha256 of the content you received) to confirm the proof covers that exact content. Accepts the full event, or an event_id to look up. Returns {valid, checks, proof_payload}. Free, no sign-in. Docs: https://api.babyblueviper.com/verify

輸入參數eventevent_idproof_idverifier_signatureexpect_artifact_hashexpect_intended_verifier

payment_receipt

Payment receipt (free)

Signed receipt for one verdict-governed payment: endpoint, network, asset, max amount, payer, facilitator verdict, settlement id, denial reason, and retry state. retry_state is read from the token's authorizationState, so retrying with the same nonce cannot double-pay. Pass the signed review event and the payment args it bound; optional tx_hash. Refuses unsigned when the verdict does not verify or does not bind those args. The receipt itself checks with verify_proof. Free, no sign-in. Does not move funds. Docs: https://github.com/babyblueviper1/invinoveritas/tree/main/examples/qbtlabs-x402-verdict-gate#payment-receipt-safe-to-retry

輸入參數args必填event必填tx_hashterms_hashoutput_hashresource_urlauthorization_signaturemax_verdict_age_seconds

verify_media

Verify media by hash (free)

Check whether a video, audio or image file is byte-for-byte a file a publisher registered with invinoveritas. Pass the file's SHA-256 (compute it locally; the file is not sent). A match returns the registration: per-claim evidential states from its C2PA Content Credentials (signature/hash binding, signer trust, declared edit history, declared AI-generation labels: VERIFIED / DECLARED_ONLY / CONTRADICTED / INSUFFICIENT), any capture tier with its caveat, the signed verdict and the Bitcoin timestamp. No match means not registered, which says nothing either way about the file. A re-encoded copy has a different hash. It never asserts that content is true. Full checks of the file itself: POST /verify-media (upload, free). Free, no auth.

輸入參數sha256必填

witness

Witness a third-party claim

Timestamps and signs a third party's exact claim, unmodified and unjudged: 'we received this text, attributed to source X, at time T', not 'we agree with it'. The source is recorded as self-declared. The resulting proof checks with verify_proof. Docs: https://api.babyblueviper.com/docs

輸入參數body必填source必填

validate

Backtest reality-check

Statistical reality-check of a backtest from its realized returns (or trade rows), not the strategy itself. Returns likely_real / borderline / overfit_or_noise using the Deflated Sharpe Ratio (adjusted for the number of variants tried), a sign-flip permutation test, and out-of-sample decay across purged folds. Inputs are not retained beyond a redacted audit hash. Docs: https://api.babyblueviper.com/docs

輸入參數tradesk_foldsn_permsreturnsagent_idn_trialstrial_sharpesperiods_per_year

ledger

Public verdict ledger (free)

Reads invinoveritas's public track record of signed verdicts, including ones that turned out wrong. Each entry is a signed Nostr event whose id and signature can be recomputed against invinoveritas's published key; entries are append-only and Bitcoin-timestamped, so they can't be edited after the fact. No arguments returns the index; pass entry to read one. Free, no sign-in. Docs: https://api.babyblueviper.com/ledger

輸入參數entry

ledger_submit

Publish your verdict to the ledger

Publishes one of your own signed review proofs (from review with sign=true) as a public entry on the invinoveritas ledger. Publication is immediate and permanent: the entry is broadcast to Nostr relays and Bitcoin-timestamped. Only genuine invinoveritas-signed proofs are accepted. Docs: https://api.babyblueviper.com/ledger

輸入參數noteevent必填

conformance_certify

Publish a verifier's conformance grade

Publishes a verifier's current conformance grade from the public registry (conformance.json) as a permanent, signed ledger entry, labeled 'certified as of this measurement'. It records the registry's existing measurement and cannot change it. Only works for a verifier currently listed as certified. Docs: https://api.babyblueviper.com/conformance

輸入參數name必填note

audit_agent_readiness

Agent-readiness audit

Audits a public agent or API URL for verifiability: discovery files (llms.txt, MCP card, robots, sitemap), handshake endpoints, and whether presented signed proofs validate. Returns a 0-100 score, a grade, ranked fixes, and a signed proof of the audit. Every result re-derives from a public fetch. Docs: https://api.babyblueviper.com/docs

輸入參數url必填

版本歷史

2
  1. v1.14.1最新Sep 27, 2026
  2. v1.13.0Sep 16, 2026

評分

已滿足適用檢查項的 90%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分

    請在儲存庫或註冊中心條目中宣告授權條款。