Dokimo Mcp

io.github.ypratap11由 GitHub 帳號 ypratap11 發布v0.1.0更新於 Nov 2, 2026

Verify AI-agent revenue: recompute a Merkle proof and check it against an on-chain anchor.

已驗證Streamable HTTP可網頁執行金融安全與監控

概覽

AI 產生的概覽

Dokimo MCP 讓助理在本機重算 Merkle 根,並將證據包的承諾與 Base 鏈上錨定進行核對。

可以做什麼
  • 依葉片與證明路徑在本機重算 dokimo-merkle-v1 根,不發出網路請求
  • 透過 Dokimo 公開的 A2A 端點,將證據包中的單筆紀錄與 Base 鏈上錨定進行核對
  • 取得 Dokimo 公開的 A2A agent card,了解其可驗證的內容
適用情境
當助理需要確認某個 AI 代理的收入或付款數字是否有防竄改、鏈上錨定的承諾支撐,或在採信某個聲稱數值前獨立重算 Merkle 根時適用。
執行需求
遠端端點為 dokimo.augaster.com;README 另提供本機 Python 套件(pip install dokimo-mcp),以 stdio 執行,或透過 MCP_TRANSPORT=http 與 PORT 以 HTTP 模式執行。未宣告帳號、API 金鑰或標頭。驗證與 agent card 工具需要網路,本機重算不需要。
安裝前請注意
驗證工具會把證據包傳送到 Dokimo 公開的 A2A 端點,套件內容會離開本機;README 建議傳送前先徵得同意。回傳的結論是 Dokimo 自己的答覆且未簽章,不應視為獨立證明。它只核對單筆紀錄,也不評價業務數字本身好壞。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Dokimo Mcp,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Web executable,透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式,或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南,先向你展示發布者、端點和登入方式,經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/io.github.ypratap11%2Fdokimo-mcp/install.md,並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前,先告訴我它的發布者、端點和登入方式,等我確認。不要把 API 金鑰寫進命令或我會提交的檔案;問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。

{
  "mcpServers": {
    "dokimo": {
      "type": "http",
      "url": "https://dokimo.augaster.com/mcp"
    }
  }
}

README

dokimo-mcp

Give an AI agent the ability to verify another agent's revenue claims.

An MCP server exposing Dokimo's evidence checks as tools any MCP client (Claude Desktop, IDE agents, custom agents) can call. It's the "agent that audits agents" — as tools.

Live, clickable version of what these tools do: https://dokimo.augaster.com/agent-audits-agents.html

This is a thin, self-contained client: it calls Dokimo's public endpoints and implements the public dokimo-merkle-v1 hashing scheme. It contains no proprietary code. MIT-licensed.

Tools

ToolWhat it doesNetwork?
recompute_merkle_root(leaf, proof_path)Local recompute — hash a leaf under dokimo-merkle-v1 and replay the proof path to a root, in this process, with no network call. Compare it to a package's claimed root yourself. It does not check the on-chain anchor.none
verify_evidence_package(package)Dokimo's check of one record, via its public A2A endpoint: recompute and check the anchored commitment (root + rule version, plus the close summary for v2 closes) against the on-chain anchor on Base. Returns verified: true only if both hold. The verdict is Dokimo's answer and is not signed — to avoid relying on it, recompute locally and read the anchor yourself (e.g. /verify.html).Dokimo A2A
dokimo_agent_card()Fetch Dokimo's public A2A agent card — what it can verify.Dokimo

Verification model: there is no path to verified: true without (1) the caller's (leaf, proof_path) recomputing to the claimed root, and (2) the commitment of (root, rule_version_commitment) — and, for a dokimo-anchor-v2 close, its summary — being anchored on-chain. Tamper one byte → recompute fails. Swap the rule version → the commitment changes → not anchored. A package without summary and binding is checked as legacy v1, which verifies only closes anchored before the v2 cutover.

Honest scope: for one record, checks that its proof reaches the root and that the commitment is anchored on-chain. It does not recompute the close's figures from all its records (that needs the full package, e.g. in /verify.html), and it says nothing about whether a business number is "good." Non-custodial; reads public on-chain state only.

Install & run

bash
pip install dokimo-mcpdokimo-mcp                 # runs over stdio# or, from a clone:pip install .python -m dokimo_mcp

Add to an MCP client

Claude Desktop — add to claude_desktop_config.json:

json
{  "mcpServers": {    "dokimo": {      "command": "dokimo-mcp"    }  }}

If dokimo-mcp isn't on PATH, use the module form:

json
{  "mcpServers": {    "dokimo": {      "command": "python",      "args": ["-m", "dokimo_mcp"]    }  }}

Then ask the agent: "Use Dokimo to verify this evidence package" (paste one), or "recompute this Merkle root and tell me if it matches."

Agent skill

skills/dokimo-verify/SKILL.md tells an agent when and how to use these tools: check the package shape, recompute locally first, ask before sending anything to Dokimo, and report the result for one record without overstating it. Drop the dokimo-verify folder into your agent's skills directory (e.g. ~/.claude/skills/ for Claude Code). It is also listed, free, on Agensi.

Try it

The live demo page embeds a real, anchored evidence package. Fetch it and verify:

python
import re, json, urllib.requestimport dokimo_mcp as dhtml = urllib.request.urlopen(urllib.request.Request(    "https://dokimo.augaster.com/agent-audits-agents.html",    headers={"User-Agent": d._UA})).read().decode()pkg = json.loads(re.search(r"const PKG\s*=\s*(\{.*?\})\s*;", html, re.S).group(1))print(d.verify_evidence_package(pkg)["verified"])   # True# tamper one unit -> Falsepkg["leaf"] = pkg["leaf"].replace("1001190933933115", "1001190933933116")print(d.verify_evidence_package(pkg)["verified"])   # False

Hosted / HTTP mode

The default transport is stdio (local use). Set MCP_TRANSPORT=http to serve MCP Streamable HTTP at /mcp on $PORT (default 8081) with CORS — the shape hosted platforms like Smithery require. The included Dockerfile + smithery.yaml (runtime: container) are set up for exactly this, so Smithery can build and host it from this repo.

bash
MCP_TRANSPORT=http PORT=8081 dokimo-mcp     # or: docker run -p 8081:8081 <image>

What is Dokimo?

Verifiable revenue infrastructure for autonomous commerce — audit-ready, independently reproducible books for AI-agent machine payments (x402 / AP2 / Stripe), with each figure tamper-evidently committed and anchored on-chain. https://dokimo.augaster.com

License

MIT — see LICENSE.

來源:README.md,提交 25683a1

工具

3

recompute_merkle_root

Recompute Merkle root (local)

Recompute a dokimo-merkle-v1 root locally — no network call, no anchor check. Hash ``leaf`` in the leaf domain (H(0x00 ‖ leaf)) and replay ``proof_path`` — a list of ``[sibling_hash, side]`` where side is "L" or "R" — hashing internal nodes as H(0x01 ‖ left ‖ right). Compare the returned root to the ``root`` in an evidence package yourself; if it differs, the package was tampered with. Returns ``{recomputed_root, merkle_scheme, steps}``.

輸入參數leaf必填proof_path必填

verify_evidence_package

Verify evidence package (on-chain)

Ask Dokimo to check one record of an evidence package against the on-chain anchor. Sends the package to Dokimo's public A2A endpoint, which recomputes the Merkle proof AND checks the anchored commitment (root + rule version, plus the close summary for v2) against the anchor on Base. The verdict is Dokimo's answer and is not signed. ``package`` must contain: ``leaf`` (str), ``root`` (str), ``proof_path`` (list of [sibling_hash, "L"|"R"]), and ``rule_version_commitment`` (str); for a v2 close also ``summary`` and ``binding``; ``close_id`` is optional/echoed. Returns the verdict: ``{verified, checks:{recompute, onchain_anchor, rule_version_bound}, ...}``. ``verified`` is true only if the proof recomputes AND the commitment is anchored on-chain. It covers this one record only.

輸入參數package必填

dokimo_agent_card

Fetch Dokimo agent card

Fetch Dokimo's public A2A agent card — the discovery document describing what it can verify (skills, endpoints, supported A2A versions).

無需輸入參數。

版本歷史

1
  1. v0.1.0最新Sep 16, 2026

評分

已滿足適用檢查項的 100%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具必需15 分
  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分