Mifori CertAgent Trust Oracle

io.github.manuel-cubiko由 GitHub 帳號 manuel-cubiko 發布v1.0.0更新於 Oct 25, 2026

Live AI agent trust oracle: audit synthetic IQ, latency & JSON compliance via x402 or free tokens.

已驗證Streamable HTTP可網頁執行安全與監控AI 與機器學習

概覽

AI 產生的概覽

遠端信任預言機,讓助理稽核 AI 代理與 MCP 伺服器的信譽、延遲與協定合規性,並查詢簽章憑證。

可以做什麼
對代理端點執行即時多協定稽核,探測 MCP JSON-RPC、伺服器卡片、A2A 卡片與挑戰應答端點,並拒絕靜態 REST 網址。提交回饋、評分爭議或沙箱額度申請,回傳一個免費單次稽核額度權杖。查詢免費的已驗證 MCP 伺服器與代理排行榜,依 Synthetic IQ 與延遲排序。依評估 ID 取得並以密碼學驗證簽章稽核憑證,或列出某代理的公開稽核歷史。
適用情境
需要在依賴某個 AI 代理或 MCP 伺服器前判斷其可信度、依實測品質與延遲比較代理,或核驗他人出示的簽章稽核憑證時使用。
執行需求
透過 streamable HTTP 連線 agent.mifori.com 的遠端端點;未宣告驗證、API 金鑰或環境變數。被稽核目標須提供支援的代理協定,而非一般 REST 網址。
安裝前請注意
稽核工具會主動探測你提供的目標端點,只應指向你有權測試的系統。提交回饋會持久保存資料並發放額度權杖;標記為私有的憑證可憑評估 ID 取得,應將該 ID 視為敏感資訊。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Mifori CertAgent Trust Oracle,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable,透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式,或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南,先向你展示發布者、端點和登入方式,經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/io.github.manuel-cubiko%2Fmifori-cert-agent/install.md,並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前,先告訴我它的發布者、端點和登入方式,等我確認。不要把 API 金鑰寫進命令或我會提交的檔案;問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "mifori-certagent-trust-oracle": {
      "type": "http",
      "url": "https://agent.mifori.com/mcp"
    }
  }
}

工具

4

verify_agent_reputation

Verify Agent Reputation (Multi-Protocol Audit)

Executes a live multi-protocol audit against target_bot_url (supporting MCP JSON-RPC 2.0 initialize + tools/list + execution probe over HTTP/SSE, SEP-1649 MCP Server Cards, Google A2A Agent Cards, and Mifori Cognitive challenge-response endpoints; non-agent static REST URLs are strictly rejected with 0 points) to benchmark Synthetic IQ (0-100), steady-state latency, JSON schema compliance, and verified tool capabilities, returning an Ed25519 asymmetrically signed certificate (eval_id). Pass public=false to run a private/confidential audit that returns a signed certificate without publishing target_bot_url to the public leaderboard. Two-step parameter workflow: (1) call with target_bot_url alone (omitting payment_proof) for a free PAYMENT_REQUIRED_402 quote, or call submit_agent_feedback with eval_id='sandbox' to obtain a free single-use 'mfr_fbk_...' credit token without needing a prior dispute; (2) invoke with payment_proof set to a 'mfr_fbk_...' token or a verified $0.005 Base Mainnet USDC transaction hash ('0x...').

輸入參數publicagent_idpayer_walletpayment_prooftarget_bot_url必填target_bearer_token

submit_agent_feedback

Submit Telemetry or Request Free Sandbox Audit Credit

Persists machine-to-machine telemetry, score disputes, or initial sandbox credit requests in <100ms with no authentication or payment required, immediately granting 1 free single-use audit credit token ('mfr_fbk_...'). First-time evaluators without a prior audit or dispute can pass eval_id='sandbox' (or 'onboarding') and describe their intended evaluation in reported_issue to receive a legitimate free reward_token for verify_agent_reputation without fabricating a complaint.

輸入參數eval_id必填reported_issue必填suggested_metric

get_agent_leaderboard

Search & Get Verified Agent Leaderboard

Queries a free, unauthenticated snapshot of verified MCP servers and autonomous AI agents deduplicated by endpoint and ordered by Synthetic IQ descending (0-100) and round-trip latency ascending (ms). Each entry includes protocol_detected ('MCP 2.0', 'Mifori Cognitive v1', etc.) and verified_capabilities (listing verified MCP tool names and server versions). Pass query (e.g. 'wiki', 'search', 'cloudflare', 'crypto', 'docs') to filter agents by tool capability, DID, or domain, and optionally filter by tier ('AAA', 'AA', 'B', 'REJECTED').

輸入參數tierlimitquery

get_agent_certificate

Get Agent Audit Certificate & History

Retrieves and cryptographically validates a signed audit certificate by eval_id (including private certificates created with public=false) or lists chronological public audit history for an agent_id in <50ms with no authentication, payment, or rate limits. Pass eval_id alone for an exact single-certificate lookup with asymmetric Ed25519 signature verification against Mifori's public key (/.well-known/jwks.json), or pass agent_id (a DID or target_bot_url) with limit (1-50, default 10) to inspect historical evaluations.

輸入參數limiteval_idagent_id

版本歷史

1
  1. v1.0.0最新Oct 15, 2026

評分

已滿足適用檢查項的 83%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分

    請宣告包含 README 的 GitHub 儲存庫,或在 OAuth 受保護資源後設資料中提供 resource_documentation。

  • 授權條款不適用

    託管服務按其提供方的條款使用,因此這裡不要求授權條款。此檢查項不計入百分比。