Orphograph

io.github.Orphograph由 GitHub 帳號 Orphograph 發布v0.1.6更新於 Nov 6, 2026

Anchor a file's SHA-256 fingerprint to Bitcoin. The file never leaves the device.

已驗證STDIO僅桌面金融安全與監控

概覽

AI 產生的概覽

Orphograph 把本機檔案、資料夾或生成文字的 SHA-256 指紋錨定到比特幣，檔案內容不離開本機。

可以做什麼
  • 將本機檔案或整個資料夾（合併為一個 Merkle 根）錨定到比特幣
  • 錨定生成的文字或代理程式執行的各個步驟，可選擇加鹽或附帶 zk 證明
  • 查詢收據並追溯編輯譜系鏈
  • 依文字或雜湊驗證某份收據是否涵蓋某個確切輸出
  • 列出訂閱者保管庫中的收據
適用情境
當你需要可防竄改、帶時間戳地證明某個檔案、資料夾或 AI 生成輸出在某個時刻以某種形式存在時適用，例如稽核留痕、代理程式執行溯源或檔案紀錄，同時內容本身保持私密。
執行需求
以 stdio 方式在本機執行，為單一 Python 腳本（需 Python 3.9 以上，僅用標準函式庫），也可用 mcpb 套件安裝，PyPI 上亦有發布。呼叫工具時需要連線至 Orphograph API 的網路。選用 ORPHO_API_KEY 可提高免費額度；ORPHO_BASE_URL 可覆寫介面位址。
安裝前請注意
錨定會把指紋傳送給第三方服務，且指紋在收據上是公開的，因此簡短或可猜測的輸出應加鹽。免費額度為每 24 小時 3 次錨定，更多需付費方案或 x402 付款。啟用付款需設定 ORPHO_X402_PAYER_KEY_FILE（存放 Base 錢包私鑰、含 USDC 的檔案），並搭配 ORPHO_X402_DAILY_CAP_CENTS 與 ORPHO_X402_MAX_CENTS_PER_CALL 限制支出。收據查詢並不驗證鏈上狀態，需用 OpenTimestamps 用戶端確認。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Orphograph，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

Orphograph MCP server

A single-file Model Context Protocol server that lets a Claude / Claude Code / Cursor / any-MCP-host instance anchor files to the Bitcoin chain via Orphograph without the file ever leaving the user's machine.

mcp-name: io.github.Orphograph/orphograph

  • License: MIT
  • Dependencies: Python ≥ 3.9 standard library only. Also on PyPI as orphograph-mcp 0.1.1.
  • Lines of code: ~310, single file.
  • Protocol: MCP 2024-11-05 over stdio.

Install

Save the script anywhere:

curl -sSL https://orphograph.com/mcp/orphograph_mcp.py -o ~/bin/orphograph_mcp.py

Then register it with your MCP host.

Claude Desktop (~/Library/Application Support/Claude/claude_desktop_config.json)

json
{  "mcpServers": {    "orphograph": {      "command": "python3",      "args": ["/Users/YOU/bin/orphograph_mcp.py"],      "env": {        "ORPHO_API_KEY": ""      }    }  }}

Claude Code

claude mcp add orphograph python3 /Users/YOU/bin/orphograph_mcp.py

Or edit ~/.claude/settings.json and add the same mcpServers block.

Cursor (~/.cursor/mcp.json)

json
{  "mcpServers": {    "orphograph": {      "command": "python3",      "args": ["/Users/YOU/bin/orphograph_mcp.py"],      "env": {        "ORPHO_API_KEY": ""      }    }  }}

Tools exposed

ToolPurposeAuth
orphograph_anchor_file(path)Hash a local file and register the fingerprint on Bitcoin.Optional API key
orphograph_anchor_folder(path)Hash a whole folder into an RFC-6962 Merkle tree and anchor one root covering every file.Optional API key
orphograph_anchor_output(text, …)Hash generated output (an agent result, a transcript) in-process and anchor it. Accepts an optional zk_proof. The fingerprint is public on the receipt, so for short or guessable output pass salt: true: it anchors SHA-256(salt + text), returns salt_hex (never transmitted) and needs it to verify. Every anchor reply says bitcoin_status: pending until the calendars commit to a Bitcoin block (usually hours), then confirmed.Optional API key
orphograph_verify_receipt(receipt_id)Look up what the office recorded for a receipt. A lookup — it does NOT consult the chain; run ots verify for that.None
orphograph_verify_lineage(receipt_id)Walk an edit-lineage chain back through its committed parents.None
orphograph_list_vault(limit?)List the subscriber's receipts.API key required
orphograph_anchor_run(steps, label?)Anchor every step of an agent run under one receipt; each step provable alone.None
orphograph_verify_output(receipt_id, text | sha256_hex, salt_hex?)Check whether a receipt covers an exact output, trusting only the anchored hash. Pass salt_hex for an output anchored with a salt.None

Privacy contract

  • The file body never leaves the device.
  • The script computes SHA-256 + SHA-512 in-process and transmits only those fingerprints to https://orphograph.com/api/anchor.
  • The script makes no network call until a tool is explicitly invoked by the host.
  • File reads stream in 1 MB chunks; large files do not load into memory.

Configuration

Environment variablePurpose
ORPHO_API_KEYOptional. Issued from orphograph.com/account.html. Without it, the install is rate-limited to the free tier (3 anchors per 24 hours).
ORPHO_BASE_URLOptional. Defaults to https://orphograph.com. Override for testing or self-hosted instances.
ORPHO_X402_PAYER_KEY_FILEOptional (0.1.6). Path to a chmod 600 file holding the hex private key of a dedicated Base wallet with USDC. With the daily cap below, anchors past the free tier are paid with x402. The key never leaves the machine.
ORPHO_X402_DAILY_CAP_CENTSOptional (0.1.6). The most the server may pay in one UTC day, in cents. Paying stays off unless this and the key file are both set.
ORPHO_X402_MAX_CENTS_PER_CALLOptional (0.1.6). The most one anchor may cost, in cents. Default 5.

With paying on, the server pins the USDC contract, its signing domain and the chain (Base); a 402 asking for anything else, or for more than either cap, is declined and nothing is signed. Spending is recorded in ~/.orphograph/x402_spend.json. A paid result carries x402_payment with the amount and the on-chain transaction.

Tiers and limits

TierCapPrice
Free3 anchors / 24h$0
Writer Pack25 anchors, never expires$5 one-time
Pack of Two Hundred200 anchors, never expires$20 one-time
Standing OrderUnrestricted anchoring$9 / month
Agents (x402)Past the free tier, per anchor1 cent in USDC on Base

Verification

The MCP server only issues calls. Every receipt it produces can be checked without this office, in two independent steps:

  1. Structure — the open-source verifier at github.com/Orphograph/Orphograph re-derives the hashes and checks the receipt offline. It makes no network calls of its own.
  2. Chain — the OpenTimestamps client (ots verify) confirms the commitment actually landed in a Bitcoin block. The bundled verifier will invoke it for you when passed --ots.

Only step 2 consults Bitcoin.

Reporting issues

Open an issue at the public repo, or write to [email protected].

來源：mcp/README.md，提交 c770c4d

工具

0
SourceWeft 曾在隔離沙箱中以無憑證方式啟動該軟體包一次，以列出其工具，但未能完成：該軟體包類型無法在沙箱中執行。

版本歷史

5
  1. v0.1.6最新Nov 6, 2026
  2. v0.1.5Nov 5, 2026
  3. v0.1.3Nov 5, 2026
  4. v0.1.2Oct 15, 2026
  5. v0.1.1Sep 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手；SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list，或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分