Dominion Observatory

io.github.vdineshk由 GitHub 帳號 vdineshk 發布v1.1.0更新於 Oct 25, 2026

Runtime behavioral trust scoring for MCP servers. Check reliability before calling unknown tools.

發布方自己的服務:Observatory

已驗證SSE可網頁執行開發者工具安全與監控

概覽

AI 產生的概覽

遠端信任評分服務,讓助理查詢 MCP 伺服器的可靠性、驗證簽章證明,並回報呼叫結果。

可以做什麼
查詢 MCP 伺服器與工具類別的信任分數、基準、異常、排行榜和 30 天歷史,以及觀測站整體統計與互動紀錄的合規稽核匯出。執行預檢與呼叫前驗證並取得簽章盡職憑證,並以密碼學方式驗證 Dominion 證明。在安裝前檢查 ClawHub 技能的供應鏈信任。回報互動結果並在觀測站註冊新伺服器。
適用情境
適合助理即將呼叫不熟悉的 MCP 伺服器或安裝第三方技能、想先取得可靠性訊號時;也適合需要簽章證明已完成盡職調查,或需要代理互動稽核紀錄的營運方。
執行需求
遠端 SSE 端點;免費工具不需本機執行環境、帳號或金鑰。付費驗證與進階裁決需要 Authorization: Bearer do_ 標頭供 Stripe 計費,或提供 Base 上 USDC 的 x402 支付交易雜湊。需能連線該託管服務。
安裝前請注意
部分工具需付費:verify_before_call 每個代理前 3 次免費,之後按次計費;paid_trust_verdict 需 USDC 付款。回報互動與註冊伺服器會把資料傳送給第三方,合規報告會匯出已記錄的互動資料。信任分數是第三方執行期估計,並非保證。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Dominion Observatory,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable,透過 SSE。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式,或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南,先向你展示發布者、端點和登入方式,經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/io.github.vdineshk%2Fdominion-observatory/install.md,並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前,先告訴我它的發布者、端點和登入方式,等我確認。不要把 API 金鑰寫進命令或我會提交的檔案;問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "dominion-observatory": {
      "type": "sse",
      "url": "https://dominion-observatory.sgdata.workers.dev/mcp"
    }
  }
}

README

Dominion Observatory

The behavioral trust layer for the AI agent economy.

Check MCP server reliability before you call. Report outcomes to strengthen the trust network.

🌐 Live: https://dominionobservatory.com 📡 MCP Endpoint: https://dominionobservatory.com/mcp

What is this?

Every AI agent needs to know: "Can I trust this MCP server?" The Dominion Observatory answers that question with real runtime data — not GitHub stars, not static scans, but actual performance metrics from real agent interactions.

  • Before calling an unknown MCP server → check_trust tells you if it's reliable
  • After calling any MCP server → report_interaction contributes to the trust network
  • Every report makes scores better for everyone — this is a collective intelligence system

Tools (14)

ToolDescription
check_trustGet the trust score and reliability metrics for any MCP server. Use this BEFORE calling an unknown MCP server to assess if it's reliable. Returns trust_score (0-100), latency stats, uptime, success rate, and how many agents have used it. Scores above 70 indicate reliable servers. Scores below 30 indicate risky servers.
clawhub_skill_trustCheck the supply-chain trust of a ClawHub (OpenClaw) skill BEFORE installing or invoking it. After the Feb-2026 ClawHavoc supply-chain attack, third-party skills can carry malware. Returns a PASS/UNCERTAIN/FAIL badge and 0-100 score aggregating ClawHub's published security scan (VirusTotal + model), moderation verdict, and provenance. Malicious/suspicious/blocked => FAIL; unscanned => UNCERTAIN.
verify_before_callRun a signed pre-invocation verification immediately before an agent sends money, credentials, private data, or write access to an MCP server. The first 3 verifications per agent are free. After that, authenticate the MCP HTTP request with Authorization: Bearer do_<api_key> for Stripe metering ($0.01/call), or call once without payment to receive x402 instructions and retry with payment_tx. Returns PASS/UNCERTAIN/FAIL/UNRATED, evidence freshness, recommendation, and a signed diligence receipt.
paid_trust_verdictGet the PREMIUM behavioral trust verdict for an MCP server, with a signed, citable, tamper-evident attestation receipt. This is a paid x402 service: call WITHOUT payment_tx to receive payment instructions (0.001 USDC on Base), pay, then call again WITH the payment_tx (transaction hash, single-use) to receive the full verdict + receipt. The free check_trust tool remains available for basic scores.
verify_attestationCryptographically verify a Dominion signed attestation (JWS) — e.g. a trust-verdict receipt, gateway attestation, or MCP Verified badge. Stateless: checks the Ed25519 signature against Dominion's published public key (no trust in this server required). Use this to confirm a receipt another party gave you is authentic and untampered.
preflight_checkRun a PRE-FLIGHT due-diligence check on an MCP server BEFORE your agent invokes it. Returns a verdict (PASS/UNCERTAIN/FAIL/UNRATED) plus a SIGNED, timestamped diligence receipt you keep as proof you performed a trust check — the standard of care after the ClawHavoc/Miasma supply-chain attacks. Call this before connecting to or invoking any unfamiliar MCP server.
report_interactionReport the outcome of calling an MCP server. Call this AFTER you use any MCP server to contribute to the trust network. Your report helps other agents make better decisions. This is free and takes <1ms.
get_leaderboardGet the top-rated MCP servers, optionally filtered by category. Use this to discover the most reliable MCP servers in the ecosystem. Categories include: weather, finance, code, data, search, compliance, transport, productivity, communication.
get_baselinesGet behavioral baselines for a tool category. Shows what 'normal' looks like — average latency, success rates, typical call patterns. Use this to evaluate whether a specific server's performance is within normal range for its category.
check_anomalyCheck if observed behavior from an MCP server is anomalous compared to baselines. Use this when a server seems slow, unreliable, or returns unexpected results. Returns whether the behavior deviates significantly from normal patterns.
register_serverRegister a new MCP server in the observatory. Server owners can register their servers to start building a trust score. Registration is free.
get_server_historyGet daily trust score and performance history for a server over the last 30 days. Use this to see trends — is the server improving or degrading?
observatory_statsGet overall statistics about the Dominion Observatory — total servers tracked, total interactions recorded, coverage by category, and data freshness. Use this to understand the scope of the trust network.
get_compliance_reportExport a compliance-ready audit trail of all recorded interactions. Formatted for EU AI Act Article 12 and Singapore IMDA Agentic AI Governance Framework. Filter by server, agent, or date range. Essential for enterprises that need to prove their AI agents are behaving correctly.

Quick Start

For agents (MCP)

Connect to: https://dominionobservatory.com/mcp

For developers (REST API)

bash
# Check trust scorecurl "https://dominionobservatory.com/api/trust?url=https://example.workers.dev/mcp"
# View leaderboardcurl "https://dominionobservatory.com/api/leaderboard"
# Network statscurl "https://dominionobservatory.com/api/stats"

How Trust Scores Work

Trust scores range from 0-100 and combine two signals:

  • Static score (30%): GitHub presence, documentation quality, authentication support
  • Runtime score (70%): Real success rates, latency, error patterns from agent interactions

Scores above 70 = reliable. Below 30 = risky. The more agents report interactions, the more accurate scores become.

Architecture

  • Runtime: Cloudflare Workers (330+ global edge locations, <1ms cold start)
  • Database: Cloudflare D1 (SQLite at the edge)
  • Protocol: MCP (Model Context Protocol) + REST API
  • Cost: Runs on free tier

Data Collection

Started: April 8, 2026

Every interaction reported to the observatory strengthens the trust network for all agents. The behavioral dataset compounds daily — it cannot be replicated by competitors who start later.

Categories

weather · finance · code · data · search · compliance · transport · productivity · communication

Operator

Built by Dinesh Kumar in Singapore. Part of the Dominion Agent Economy Engine (DAEE).

License

MIT

來源:README.md,提交 afb4ab3

工具

0
SourceWeft 尚未讀取此伺服器的工具。

版本歷史

1
  1. v1.1.0最新Sep 16, 2026

評分

已滿足適用檢查項的 75%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分

    請在儲存庫或註冊中心條目中宣告授權條款。

其他 Dominionobservatory 整合