io.github.allooloo由 GitHub 帳號 allooloo 發布v2.3.1更新於 Nov 7, 2026
The record of what the agent relied on: a signed, chained receipt per cleared read. Verify by id.
遠端 MCP 服務，為受監管記錄中已放行的讀取寫入、列出並驗證具簽章的鏈式回執，並提供簽章對帳單與稽核金鑰。
Web executable，透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。
把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式，或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南，先向你展示發布者、端點和登入方式，經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。
閱讀 https://sourceweft.com/mcp/io.github.allooloo%2Frco-records/install.md，並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前，先告訴我它的發布者、端點和登入方式，等我確認。不要把 API 金鑰寫進命令或我會提交的檔案；問我金鑰應從哪裡取得。把它新增到你客戶端的 mcpServers 設定中。
{
"mcpServers": {
"rco-records-record-of-cleared-orders": {
"type": "http",
"url": "https://mcp.rco-records.ai/mcp"
}
}
}RCO — the record of what the agent relied on. Every read, receipted.
Every answer the Allooloo record gives a regulated agent is receipted: one signed receipt per cleared read, chained to the one before, verifiable by anyone against a published key. The receipt is the agent's alibi.
write_receipt (bearer token per writer), verify_receipt (public)https://rco-records.ai/receipts/{id}Standard held by Allooloo Technologies Corp. · Open standard, MIT licence. — https://allooloo.ai
The spec and the reference verify() ship under MIT (LICENSE). Nothing else is licensed: the chain, the keys, the door and the Register are operated by Allooloo, not licensed.
verify(receipt, jwks) is a pure function: recompute hash (and id for v1), check sig against kid. A receipt verifies forever without asking Allooloo anything.
來源：README.md，提交 22ad261
Write one v1 receipt for a read a gate has cleared. Authenticated: Authorization: Bearer <writer token>. Idempotent on (writer, subject, subject_type, market, rule_version, cleared_at, answer_hash). Returns the receipt.
callermarketsubject必填caller_keycleared_atanswer_hashrule_version必填subject_type必填Return one receipt by id (rco:… for v1, dec_… for v0) with the verification result (hash, id, signature) and the public key (JWK) that checks it. Public.
id必填Your own receipts only — the rows whose caller is your customer key — by seq range (from_seq, to_seq, after_seq) or date range (from, to: YYYY-MM-DD, to inclusive), limit ≤ 500. Authorization: Bearer <customer key>. Refuses without a key.
tofromlimitto_seqfrom_seqafter_seqA signed statement of your slice for a month (month: YYYY-MM) or a date range (from, to: YYYY-MM-DD, to exclusive): count, first and last seq, slice digest, the chain tip at issue, Ed25519 signature by Allooloo. Authorization: Bearer <customer key>.
tofrommonthIssue a read-only sub-key on your own slice for your auditor (list_receipts and get_statement only). Authorization: Bearer <customer key>. The key value is returned once.
name已滿足適用檢查項的 100%
該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。
node sdk/typescript/cli.ts rco:4xvpzgxxmno5bfxxmv5hpython sdk/python/rco_verify.py rco:4xvpzgxxmno5bfxxmv5h