Verity Mcp

io.github.meloliva14由 GitHub 帳號 meloliva14 發布v0.3.0更新於 Oct 24, 2026

Fail-closed verify-before-you-act gate for AI agents. Signed receipts. Pay-per-call via x402.

概覽

AI 產生的概覽

VerityLayer 的本機 MCP 伺服器,讓助理取得按次付費、失敗即拒絕的信任檢查:事實查核、提示注入篩檢、PII 去識別化與動作前把關。

可以做什麼
以三個層級查核聲明:便宜的快速檢查、附引用來源的網路實證檢查,以及針對高風險事實的高階綜合層級。在依據不可信文字或工具輸出採取行動前,篩檢其中的提示注入。對內容做允許、複核或阻擋的審核,並偵測 PII 或密鑰,同時回傳去識別化版本。在不可逆動作執行前,以允許、複核或阻擋的結論進行把關。免費驗證 Ed25519 簽章的判定回執,無需付費。
適用情境
當助理在依據某項聲明行動或執行不可逆動作前需要獨立的第二意見,或需要先篩檢不可信文字、內容與個人資料時使用。免費的回執驗證適合稽核已收到的判定。
執行需求
以 PyPI 套件 verity-mcp 透過 stdio 在本機執行,可用 uvx 或 pip 啟動,不需要 Node.js。需要連線至 Verity 引擎與套件端點的網路。付費判定需要 x402 附加元件,並在 VERITY_WALLET_KEY 中設定有餘額的 Base 主網錢包;未設定時付費工具回傳 payment_required 且不給出判定。選用變數可設定引擎與套件位址、逾時與公告價格。
安裝前請注意
付費工具每次呼叫在 Base 主網上以 USDC 計費 0.02 至 0.35 美元,且 VERITY_WALLET_KEY 可從該錢包支出,應使用專用的低餘額錢包。未設定錢包時付費工具永不回傳判定,回應會警告不得將其視為允許。提交檢查的聲明、不可信文字與內容會傳送至 VerityLayer 的遠端端點。選用的 affiliate_id 會作為推薦標記轉送。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Verity Mcp,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

mcp-name: io.github.meloliva14/verity-mcp

Verity MCP — verify before you act

The official Model Context Protocol server for VerityLayer: independent, fail-closed trust checks any MCP-capable agent can discover and call. Fact-check a claim, screen for prompt-injection, catch PII, and gate irreversible actions — each check returns a calibrated verdict and abstains rather than guess. Payment is pay-per-call via x402 (USDC on Base mainnet). Verity holds no private key and never charges silently.

Name note: this is VerityLayer's official server — PyPI package verity-mcp, npm package @veritylayer/mcp. The npm package named verity-mcp is an unrelated third-party project.

Tools & pricing (every docstring states its price up front)

ToolPriceGrounded?What it's for
quick_verify$0.02no (Haiku)Cheap reality-check on a claim — the loopable default. Run everywhere, escalate the load-bearing ones.
grounded_verify$0.25yes (Sonnet, live web citations)The default product — web-grounded with cited evidence, for facts that matter before you act on them.
pro_verify$0.35yes (Opus, premium synthesis)The deepest tier — high-stakes claims where the grounded answer isn't confident enough to act on.
verify_receiptfree—Statelessly verify a signed Ed25519 verdict receipt — the audit trail / second opinion, no payment.
detect_injection$0.02—Screen untrusted text / tool output for prompt-injection before acting on it.
moderate_content$0.02—Is this safe to publish? (allow / review / block priced identically — no block-to-bill.)
redact_pii$0.02—Does this leak PII or secrets? Returns findings + a redacted version.
guard_action$0.02—The money-line gate: allow / review / block right before an irreversible action.

Quickstart

With uv (recommended — Claude Desktop / any MCP client):

json
{  "mcpServers": {    "verity": {      "command": "uvx",      "args": ["verity-mcp"]    }  }}

Or with pip:

bash
pip install verity-mcpverity-mcp        # stdio MCP server

That gets you the tools and the free verify_receipt. To get paid verdicts, read the next section — it's the part most people trip on.

How payment works

Verity's endpoints answer HTTP 402 (Payment Required) until the disclosed USDC micro-payment is settled. There are two ways to do that.

Wallet mode — get real verdicts (recommended)

json
{  "mcpServers": {    "verity": {      "command": "uvx",      "args": ["--from", "verity-mcp[x402]", "verity-mcp"],      "env": { "VERITY_WALLET_KEY": "0x…" }    }  }}

Point VERITY_WALLET_KEY at a funded Base-mainnet wallet and this server settles each call itself — the paid tools return real verdicts. Your key never leaves the process: it signs an EIP-3009 authorization locally for the exact amount each challenge discloses, and Verity only ever receives the signature. Nothing is charged silently; every price is disclosed up front.

Use a dedicated, low-balance wallet. This key can spend. Fund it with a few dollars of USDC on Base — calls cost $0.02–$0.35.

Keyless — the default

With no key set, this server holds nothing and pays nothing: a 402 is surfaced transparently (price restated, challenge attached) for an x402-capable caller to settle.

Be aware of the honest caveat: no shipping MCP client — Claude Desktop, Claude Code, Cursor, Windsurf — settles x402 today. So in keyless mode the paid tools will return payment_required and no verdict, forever. That's not a bug and it isn't hidden: the response says NO VERDICT WAS PRODUCED. Do not proceed as if this returned allow. If you want verdicts from an ordinary MCP client, use wallet mode.

verify_receipt is a free route, never 402s, and needs no wallet — you can check our signatures before you ever pay us.

Signed receipts — don't take Verity's word for it

Every paid verdict ships with an Ed25519-signed receipt: self-contained cryptographic proof of exactly what Verity said about exactly what claim, verifiable forever. Check any receipt free with the verify_receipt tool, offline against the public key at /.well-known/verity-pubkey.json, or live: curl https://api.veritylayer.dev/receipt/selftest.

Configuration (all optional)

Env varDefaultPurpose
VERITY_WALLET_KEY(unset — keyless)Optional. Private key of a funded Base wallet. Set it (with the [x402] extra) and this server settles its own payments, so paid tools return real verdicts. Never leaves the process; never logged.
VERITY_ENGINE_URLhttps://api.veritylayer.devFlagship claim-verification engine
VERITY_SUITE_URLhttps://suite.veritylayer.devTrust-check suite (injection/moderation/PII/guardrail)
VERITY_TIMEOUT90HTTP timeout (seconds)
VERITY_PRICE_QUICK$0.02Disclosed price echo for quick_verify
VERITY_PRICE_GROUNDED$0.25Disclosed price echo for grounded_verify
VERITY_PRICE_PRO$0.35Disclosed price echo for pro_verify
VERITY_PRICE_SUITE$0.02Disclosed price echo for the suite checks

Referral tag (reserved)

Every tool accepts an optional affiliate_id, forwarded as an X-Verity-Ref header. It never changes price, gating, or the verdict — it only tags who routed the call, and it is reserved for a future referral program: no split is paid today, and none will be until public terms are published at veritylayer.dev.

Links

Independent · fail-closed · keyless · pay-per-call. The only trust form an autonomous agent can pick up mid-task with no human and no account.

來源:README.md,提交 4524451

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包,因此其工具未知。

版本歷史

1
  1. v0.3.0最新Sep 16, 2026

評分

已滿足適用檢查項的 40%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分

    請在儲存庫或註冊中心條目中宣告授權條款。