Provenance

io.github.MarkovianProtocol由 GitHub 帳號 MarkovianProtocol 發布v0.2.0更新於 Oct 25, 2026

Stamp or notarize data into a public witnessed transparency log. Proves timing, not truth.

已驗證Streamable HTTP可網頁執行開發者工具安全與監控

概覽

AI 產生的概覽

遠端 MCP 伺服器,讓助理把檔案或雜湊值公證、把資料蓋章進一個由見證者共同簽署並錨定比特幣的公開透明日誌,並可加以驗證

可以做什麼
把檔案或 SHA-256 雜湊值公證進公開透明日誌並取回回執;遠端端點只接受雜湊值,檔案需先由本機 stdio 伺服器雜湊才不會離開本機。把任意資料(例如 AI 輸出或某項決定)提交進日誌,取得 markovian-provenance/v1 格式的防竄改來源憑證。不需金鑰或帳號,依 merkle root 在公開驗證器上查詢憑證,再自行計算內容的 SHA-256 並與回傳的 data_hash 比對。當憑證帶有 derived_from 連結時,依 merkle root 追溯完整來源譜系,回傳含各節點雜湊綁定與錨定狀態、各邊驗證結果的圖形結構。
適用情境
適用於需要證明某份資料或 AI 輸出在特定時間已存在且之後未被更動,或需要追溯某個輸出由什麼衍生而來的情境。它不判斷內容是否正確:證明的是時間,而非真實性。
執行需求
遠端 streamable HTTP 端點;未宣告驗證、環境變數或請求標頭。遠端端點只接受 SHA-256 十六進位字串,因此對檔案做雜湊需要本機 stdio 伺服器。需要能連線公開日誌與驗證器的網路。
安裝前請注意
被蓋章的內容會提交到公開且由見證者共同簽署的透明日誌,不能視為私密,應提交雜湊值而非原始內容。驗證只確認紀錄存在並回傳 data_hash,需自行重新計算並比對雜湊值。驗證通過不代表資料內容正確。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Provenance,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable,透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式,或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南,先向你展示發布者、端點和登入方式,經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/io.github.MarkovianProtocol%2Fprovenance/install.md,並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前,先告訴我它的發布者、端點和登入方式,等我確認。不要把 API 金鑰寫進命令或我會提交的檔案;問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "provenance": {
      "type": "http",
      "url": "https://api.markovianprotocol.com/mcp/"
    }
  }
}

README

該儲存庫沒有 README。

工具

4

markovian_notarize

Markovian Notarize

Notarize any file or hash into a public transparency log cosigned by 7 witnesses from 6 operators and anchored to Bitcoin. Hash-only: pass a sha256 hex string, or with the local stdio server a file path (hashed on your machine; the file never leaves it) — only 32 bytes reach the log. Returns a receipt with the leaf index, inclusion-proof URL, an offline c2sp.org/tlog-proof bundle URL, and the witness trust policy. Proves the hash existed no later than the covering checkpoint, in a single history everyone sees identically; does NOT prove authorship or that the content is true. Rate-limited (10/hour). Typical use: notarize an output the moment it is produced, keep the file, hand anyone the proof URL.

輸入參數pathsha256

markovian_stamp

Markovian Provenance Stamp

Commit any data (an AI output, a decision, a record) into a public, witnessed transparency log and get back a verifiable, tamper-evident provenance stamp (canonical markovian-provenance/v1). It proves the data existed and was committed at this time; it does NOT assert the data is correct (provenance, not truth). No wallet, account, or funding is required, the first stamp just works, and only the SHA-256 hash of your data is sent to the public API, the raw data is never stored. The returned merkle_root is the handle: save it, then call markovian_verify(merkle_root) to prove integrity later, or pass prior stamps in derived_from to build a lineage you can walk with markovian_trace. Typical use: stamp an agent output the moment it is produced, so anyone can later confirm it was not altered.

輸入參數data必填labelwalletderived_from

markovian_verify

Markovian Verify

Look up a Markovian stamp by its merkle_root against the public verifier, with no key or account. verified:true means the stamp record exists and the response echoes its committed data_hash — recompute your content's SHA-256 and compare it to that data_hash yourself to confirm the content is unaltered. An unknown merkle_root returns verified:false. The trust-nobody path is the stamp's witnessed transparency-log leaf (log_index / inclusion URL from markovian_stamp): its inclusion proof verifies against the witnessed log head with no trust in this endpoint. Read-only; anyone can run it, including a party who does not trust the stamper.

輸入參數merkle_root必填

markovian_trace

Markovian Trace

Walk and verify a stamp's full provenance lineage by merkle_root. Use this when a stamp was created with derived_from links, to map what an output was built from. Returns a MAP of the graph (not a yes/no verdict): each node carries hash_binds and anchored, each edge carries edge_verified, and `valid` is true only if every node and edge checks out. A node whose payload was never published is an unresolved frontier (resolved:false). Read-only. Provenance, not truth.

輸入參數merkle_root必填

版本歷史

2
  1. v0.2.0最新Sep 24, 2026
  2. v0.1.0Sep 16, 2026

評分

已滿足適用檢查項的 75%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分

    請宣告包含 README 的 GitHub 儲存庫,或在 OAuth 受保護資源後設資料中提供 resource_documentation。

  • 授權條款10 分

    請在儲存庫或註冊中心條目中宣告授權條款。