Witnessd

vip.witnessd由 witnessd.vip 發布v0.1.1更新於 Oct 24, 2026

Neutral third-party witness: independently fetch, hash, timestamp, archive any URL or API response.

已驗證STDIO僅桌面網頁搜尋與抓取安全與監控

概覽

AI 產生的概覽

讓助理把公開網址或 API 回應交由獨立第三方抓取、雜湊、加時間戳並封存，回傳簽章憑證。

可以做什麼
Witnessd 是一個中立的第三方見證服務。其 witness_url 工具會獨立抓取公開網址或 API 端點，對回應進行雜湊與時間戳並封存，回傳快照 id 與簽章憑證。get_certificate 可用任一快照 id 取回清單、Ed25519 簽章、Merkle 證明與 Base 錨定交易；retrieve_snapshot 則回傳封存的回應內容與憑證。快照雜湊每小時做 Merkle 批次並錨定於 Base，因此憑證無須信任營運方即可驗證。
適用情境
適合日後爭議可能取決於某個網址或 API 在某個時刻回傳了什麼的情況：在交易前見證對手方公布的價格或條款，或在依據第三方 API 資料行動前記錄其回傳內容。也可讓第三方憑快照 id 取得封存證據。
執行需求
透過 npm 套件 witnessd-mcp 以 stdio 在本機執行（npx -y witnessd-mcp），僅限桌面端，無網頁版。需要連線至 witnessd 服務的網路（預設 WITNESSD_URL 覆寫），以及一組付款憑證：EVM_PRIVATE_KEY（持有 Base 上 USDC 的錢包私鑰）或 WITNESSD_API_KEY（預付額度金鑰）。未宣告帳號登入。
安裝前請注意
按次計費：witness_url 每次 0.02 美元，retrieve_snapshot 每次 0.05 美元；設定 EVM_PRIVATE_KEY 後會透過 x402 在 Base 上以 USDC 自動付款，請使用小額專用錢包，切勿使用主錢包。EVM_PRIVATE_KEY 與 WITNESSD_API_KEY 都是機密。憑證（雜湊、時間戳、證明）是公開的，封存內容只交付給付費請求方。見證範圍限於任何人可見的公開頁面，內容不超過 10 MB。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Witnessd，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

witnessd-mcp

MCP server for witnessd — a neutral third-party witness for the machine-readable web.

Give your agent the ability to create tamper-evident evidence: witnessd independently fetches any public URL or API endpoint, hashes and timestamps the response, archives it, and issues a signed certificate. Snapshot hashes are Merkle-batched hourly and anchored on Base, so certificates verify forever — by anyone, without trusting the operator.

Use it before transacting with a counterparty ("witness their published price/terms"), before acting on third-party data ("witness what the API returned"), or whenever a dispute might later hinge on what a URL said at a moment in time.

Quick install

You useRun this
Claude Code (skill + MCP server in one step)/plugin install witnessd --marketplace jschunter/witnessd-mcp
Any agent with Agent Skills (Cursor, Codex, Copilot, Gemini CLI and others)npx skills add jschunter/witnessd-mcp
Any MCP client, MCP server onlynpx -y witnessd-mcp (config below)

The skill (plugin/skills/witnessd/SKILL.md) teaches an agent when a neutral witness is worth two cents: before paying an unfamiliar seller, before acting on third-party data, or when asked to prove what a page said. It also sets spending rules: at most 5 paid calls per task without approval, a one-line report of each call, and no paid retries in a loop. The MCP server gives the agent the tools.

On older Claude Code versions, run /plugin marketplace add jschunter/witnessd-mcp and then /plugin install witnessd@witnessd.

Tools

ToolPriceWhat it does
witness_url$0.02Independent fetch + hash + timestamp + archive of a URL right now; returns snapshot id + signed certificate
get_certificatefreeCertificate for any snapshot id: manifest, Ed25519 signature, Merkle proof, Base anchor transaction
retrieve_snapshot$0.05The archived response body + certificate — works for any snapshot id, any payer (this is how third parties obtain evidence)

Install

bash
npx -y witnessd-mcp

Claude Desktop / Cursor config:

json
{  "mcpServers": {    "witnessd": {      "command": "npx",      "args": ["-y", "witnessd-mcp"],      "env": {        "EVM_PRIVATE_KEY": "0x…"      }    }  }}

Payment — two options

Set one of these environment variables:

  • EVM_PRIVATE_KEY — a wallet key holding USDC on Base. The server auto-pays each call via x402 (the buyer only signs; no ETH needed for gas). Use a small dedicated wallet, never your main one.
  • WITNESSD_API_KEY — a prepaid credit key (buy a $1 pack via POST https://witnessd.vip/api/credits, x402-payable).

Optional: WITNESSD_URL to point at a different witnessd instance (default https://witnessd.vip).

Verify without trusting us

Certificates are self-verifying: leaf_hash = sha256(canonical-json(manifest)), Ed25519-signed, Merkle-proven into an hourly batch root anchored on Base (calldata 0x + wtns1 + root). Standalone checker: witnessd.vip/verify.js.

Privacy & scope

Certificates (hashes, timestamps, proofs) are public; archived content is delivered only to paying requesters and never republished. witnessd only witnesses what any stranger can see — no logins, no private networks, bodies ≤10 MB. Machine-readable service docs: llms.txt · openapi.json · /.well-known/x402.

MIT license.

來源：README.md，提交 69eabdc

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包，因此其工具未知。

版本歷史

1
  1. v0.1.1最新Sep 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手；SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list，或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分