FractalAI Post-Quantum Proofs

io.github.johnInarti由 GitHub 帳號 johnInarti 發布v0.1.3更新於 Oct 24, 2026

Post-quantum (ML-DSA-65/Dilithium-3) proof, provenance & AI-decision receipts, paid via x402.

已驗證STDIO僅桌面金融安全與監控

概覽

AI 產生的概覽

一個本機 MCP 伺服器,讓助理驗證後量子 ML-DSA-65 簽章,並透過 x402 微支付購買簽章、來源證明與 AI 決策存證服務。

可以做什麼
免費驗證後量子 ML-DSA-65/Dilithium-3 簽章是否與公鑰相符,並回傳有效性結論。取得付費資源的即時 x402 付款要求以及服務的探索清單。支付少量 USDC 購買對訊息或雜湊的後量子簽章。購買內容來源證明封條,包含 drand 輪次、簽章與鏈上錨定嘗試。購買對 AI 代理所宣告決策的存證,寫入僅可追加的日誌並回傳可離線驗證的簽章。
適用情境
當你需要驗證後量子簽章,或希望為內容與代理決策取得付費的簽章來源證明或決策回執時使用。免費的驗證與結帳工具可單獨使用;付費工具僅在你願意在 Base 上發送 USDC 時才有意義。
執行需求
以本機 Node.js 程序透過 stdio 執行,需從 npm 套件安裝並先建置。需要連線至 FractalAI 端點的網路,預設為公開部署,可用環境變數 FRACTALAI_BASE_URL 覆寫。付費工具需要 Base 上的 USDC 餘額與已確認的交易雜湊;未宣告需要帳號或 API 金鑰。
安裝前請注意
付費工具按次收取 Base 上的 USDC(每次約 0.02 至 0.05 美元),需你自行發起真實轉帳並回傳交易雜湊,一個雜湊只能購買一次呼叫。付費工具會使用伺服器綁定的節點金鑰寫入鏈上錨定。簽章只證明確切位元組由該金鑰簽署,並不證明內容真實;存證只記錄所宣告的決策,不判斷其是否正確。請求會傳送至第三方端點。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 FractalAI Post-Quantum Proofs,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

FractalAI MCP Server

A Model Context Protocol (MCP) server that exposes FractalAI's live post-quantum cryptography and x402 micropayment capabilities as tools any MCP client (Claude Desktop, IDEs, agent frameworks) can call over stdio.

It talks to the real, public FractalAI deployment at https://fractalai.net.co — nothing here is mocked.

What it does

ToolCostWhat it does
verify_prooffreeVerify a post-quantum ML-DSA-65 / Dilithium-3 / NIST FIPS 204 signature against its public key. Returns { valid, verdict }.
x402_checkoutfreeReturn live x402 (HTTP 402) payment requirements for a paid resource — price, network, USDC asset, payTo, and the accepts[] entries. Also fetches the full .well-known/x402.json manifest.
pqc_sign$0.02 USDCBuy one ML-DSA-65 / Dilithium-3 signature over a message (its sha256 is signed) or a hex hash (signed directly).
seal_provenance$0.05 USDCBuy a PQC + drand provenance seal over content: a drand round + a self-contained ML-DSA-65 / Dilithium-3 signature + an on-chain anchor attempt (this server's node-bound Dilithium-2 key) over the content hash.
attest_decision$0.05 USDCSeal an AI agent's declared decision (input hash, output, model, timestamp) — chained in an append-only Black Box, anchored on-chain (VAID-1, node-bound Dilithium-2 key), and returned with a self-contained ML-DSA-65 / Dilithium-3 signature for independent offline verification.

Honest scope (read this)

  • The signature every tool here serves/verifies directly is ML-DSA-65 / Dilithium-3 (NIST FIPS-204, Cat-3). seal_provenance and attest_decision ALSO write a separate on-chain anchor (VAID-1) using this server's node-bound Dilithium-2 key — additive, not the signature returned to you.
  • Dilithium-3 is resistant to known classical and quantum attacks per NIST FIPS 204 — it is NOT "unbreakable". A signature proves the exact bytes you submitted were signed by this server's post-quantum key. It says nothing about the truthfulness of the signed content.
  • seal_provenance produces a provenance record, not a content audit.
  • attest_decision notarizes a decision as declared; it does not judge whether the decision was correct.
  • The paid tools run a real HTTP 402 flow. Without a payment_tx_hash they return the payment challenge (accepts[]) — they never fabricate a result.

Payment model (x402)

Paid tools are gated by x402: pay in USDC on Base to the service's treasury, then the tool returns the resource. This server uses the facilitator-less txHash settlement path, which needs no facilitator account:

  1. Call the tool once with no payment_tx_hash. You get back the accepts[] block: the exact USDC amount, the asset (USDC on Base), and the payTo treasury address.
  2. Send that USDC transfer on Base yourself.
  3. Call the tool again with payment_tx_hash set to the confirmed transaction hash. One txHash buys exactly one call (anti-replay is enforced server-side).

verify_proof and x402_checkout are always free.

Install & build

bash
cd integrations/mcpnpm installnpm run build

Configure in an MCP client

Claude Desktop (claude_desktop_config.json)

json
{  "mcpServers": {    "fractalai": {      "command": "node",      "args": ["/absolute/path/to/integrations/mcp/dist/index.js"]    }  }}

Any stdio MCP client

Run the built entrypoint: node dist/index.js. It speaks MCP over stdio; all logging goes to stderr so stdout stays a clean JSON-RPC channel.

Environment

  • FRACTALAI_BASE_URL — override the endpoint base (defaults to https://fractalai.net.co).

Example flows

Verify a signature (free):

json
{  "name": "verify_proof",  "arguments": {    "signed_message_b64": "<base64 of the exact bytes that were signed>",    "signature": "<base64 ML-DSA-65 / Dilithium-3 signature>",    "public_key": "<base64 ML-DSA-65 / Dilithium-3 public key>"  }}

Price a signature (free), then buy it (paid):

json
{ "name": "x402_checkout", "arguments": { "resource": "sign" } }
json
{ "name": "pqc_sign", "arguments": { "message": "hello world" } }

The first pqc_sign call (no payment_tx_hash) returns the payment challenge. Pay the USDC, then call again:

json
{  "name": "pqc_sign",  "arguments": { "message": "hello world", "payment_tx_hash": "0x…" }}

About FractalAI

FractalAI is an AI-native Layer 1 blockchain (chain id 62124) written in Rust with post-quantum cryptography (ML-DSA-65 / Dilithium-3 signatures, Kyber encryption). These x402 endpoints sell post-quantum proof, provenance and decision-attestation services to autonomous agents. See https://fractalai.net.co and the discovery manifest at https://fractalai.net.co/.well-known/x402.json.

License

MIT

來源:README.md,提交 b469d75

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包,因此其工具未知。

版本歷史

2
  1. v0.1.3最新Oct 9, 2026
  2. v0.1.2Sep 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分