Intesta — trust registry lookup

io.intesta由 intesta.io 發布v0.2.0更新於 Oct 24, 2026

One-call trust check for any domain (A0-A4, verdict, signed) + fact passports; same tools as remote

發布方自己的服務：Intesta

已驗證STDIO僅桌面網頁搜尋與抓取安全與監控

概覽

AI 產生的概覽

唯讀的 Intesta 信任登錄表 MCP 代理，讓助理在採取行動前查詢網域的信任等級、判定結果與已驗證事實。

可以做什麼
  • 一次呼叫檢查網域信任：是否收錄、A0-A4 等級、attested 標記、指定政策下的判定、證據、到期時間與簽章
  • 取得實體的完整事實護照，含證明狀態、證據類別、是否過期、護照雜湊與簽章
  • 針對某實體提問，僅依該實體已記錄的事實作答並附簽章
  • 依名稱、網域或產業搜尋實體，並列出登錄表內容
  • 說明 A0-A4 信任階梯的含義，以及如何以代理身分使用此登錄表
適用情境
適合助理在決定是否付款、分享資料或遵循某網域／交易對象的指示時，需要一份有簽章、基於證據的信任訊號而非憑空猜測。也適合查詢某實體究竟有哪些已被證明的事實。
執行需求
以 Python 套件形式透過 uvx 在本機執行（需 Python 工具鏈）。公開登錄表讀取不需 API 金鑰；選用的 INTESTA_API_KEY 僅供計量或私有用途。需要連線至 Intesta API 的網路存取。另提供工具相同的遠端 streamable-http 端點。
安裝前請注意
所有工具皆為唯讀，但查詢內容會向 Intesta 服務揭露你查了哪些網域。判定結果是登錄表的證據對照公開政策所得，並非保證，也不構成財務建議；未收錄網域會回傳 unknown 而非 failed，auto_collected 事實未經查證。若需依賴簽章，請對照公開金鑰驗證。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Intesta — trust registry lookup，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

intesta-mcp

An MCP server that lets an AI agent check who it is dealing with before it acts.

Intesta is a trust registry. Every entity has a trust level on the A0→A4 ladder (A0 claimed · A1 domain-control · A2 payment-verified · A3/A4 higher) and a set of facts, each marked confirmed (independently verified) or auto_collected (scraped from public sources, not verified). This package is a thin proxy over the public HTTP API and exposes the same tool names and shapes as the remote server https://intesta.io/mcp — one contract on every surface (since 0.2.0).

Its ethos is Intesta's own: refuse, don't guess. A level is only ever what was proven; an auto_collected fact is not a verified one. The server reports exactly what the registry says and never upgrades either.

Tools

ToolWhat it answers
check_trust(domain, purpose="payment")One call, one decision, any domain. known, level A0..A4, attested (true only at A1+), verdict (sufficient / insufficient / unknown) under a named policy profile (payment/v1 needs A2, data_share/v1 and follow_instructions/v1 need A1), what_is_proven, proof, expires_at, next_step, signature. Unlisted domain → unknown, never "failed".
get_passport(entity_domain)The full fact passport: facts with attestation_status / evidence_class, as_of, effective_expiry, stale, plus the attestation block, passport_hash and signature.
ask(entity_domain, question)A question answered only from that entity's facts, signed (passport_hash + registry signature). A refusal means the passport has no such fact.
search_entities(query, limit=20)Find entities by name / domain / vertical (literal substring, ≥3 chars); each result carries its level.
list_entities()The registry (first 500 + total).
get_trust_ladder()What each of A0..A4 means and how to use the registry as an agent.

Deprecated 0.1.x aliases (search_registry, get_facts, ask_entity, trust_ladder) still work for one release and are removed in 0.3.0.

All tools are read-only and need no API key — public registry reads work out of the box. An optional INTESTA_API_KEY (ik_…) is only needed for metered or private use.

Errors (unknown entity, invalid question or query, API failure) are returned as MCP error results (isError: true), never as data-shaped successes.

Install

jsonc
// Claude Desktop / any MCP client — mcp config{  "mcpServers": {    "intesta": { "command": "uvx", "args": ["intesta-mcp"] }  }}

Or connect to the remote server directly (same tools, no install): https://intesta.io/mcp (streamable-http).

Example

check_trust("acme-invoicing.com")→ {"known": false, "level": null, "attested": false, "status": "not_checked",   "verdict": "unknown", "policy_profile": "payment/v1",   "next_step": "Not in the Intesta registry: nothing is proven either way. Treat as unverified. ...",   "signature": {...}}
check_trust("darkpanther.eu", purpose="data_share")→ {"known": true, "level": "A1", "attested": true, "verdict": "sufficient",   "what_is_proven": "...", "proof": {"method": "well_known", "verified_at": "..."},   "expires_at": "2026-10-03T...", "signature": {...}}

A verdict is the registry's proof measured against a published profile — never a guarantee, never financial advice. Verify the signature against https://intesta.io/.well-known/intesta-key (see https://intesta.io/llms.txt).

Development

pip install -e ".[test]"pytest

License: MIT. Publisher: DC ESCRYPT SL — https://intesta.io

來源：README.md，提交 2bf290f

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包，因此其工具未知。

版本歷史

1
  1. v0.2.0最新Sep 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手；SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list，或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分

其他 Intesta 整合

Intesta

io.intesta官方發布者

一個遠端信任登錄表，讓助理查詢信任判定（A0–A4）並取得已簽章的代理事實憑證。

Streamable HTTP可網頁執行
安全與監控6 個工具Oct 24, 2026