Horizontal

WorksSecurityCode and development

Privi Quantum Ledger

Quantum-sealed audit logs for AI agents (ML-DSA-87, SHA3-512), plus Privi Guard and trust passports.

Addresshttps://privi-ledger.onrender.com/mcp
Claude Codeclaude mcp add --transport http privi-ledger https://privi-ledger.onrender.com/mcp
For Cursor and other clients
{
  "mcpServers": {
    "privi-ledger": {
      "type": "http",
      "url": "https://privi-ledger.onrender.com/mcp"
    }
  }
}

Watch out

Has tools that change things: 10 of them

The server itself marks these tools as deleting or overwriting data (destructiveHint): have the agent ask you before it calls them.

Test
Works: Handshake succeeded
Tools
121 tools
Handshake
2.3 s
Transport
streamable-http · 2025-06-18
Tested
6 November 2026
Registry name
io.github.canoydario847-cloud/privi-ledger v0.12.1
Listed
27 October 2026
Updated
27 October 2026
Website
privi-discovery.onrender.com
Source
github.com/canoydario847-cloud/Privi-Network
The last 1 tests
WhenResultTime
2026-11-06 12:28 UTCHandshake succeeded2.3 s

The 121 tools it listed

"Read only" and "Changes data" are the server's own marks. Underlined parameters are required.

  1. ai_act_checkRead only

    AI Act: compliance check

    What a customer's due-diligence or a regulator would flag today: prohibited practices, incomplete Article 5 screens, obligations already in force without evidence (critical), obligations due within 180 days (medium), upcoming high-risk duties, and high-risk systems with no recent log. Requires the organization API key.

  2. ai_act_export

    AI Act: export sealed register

    Export your AI Act register as JSON to hand to customers, auditors or regulators, with its SHA-256 sealed on chain so anyone can prove it was not edited afterwards (check with ai_act_verify_export). Requires the organization API key.

  3. ai_act_registerRead only

    AI Act: your register

    Your EU AI Act register: each AI system's current record, tier and applicable obligations. Requires the organization API key.

    system_id

  4. ai_act_system_save

    AI Act: register an AI system

    Add or update an AI system in your company's EU AI Act register. Privi screens it against the Article 5 bans, classifies it (prohibited / high-risk / transparency / general-purpose / minimal), and lists the obligations that apply to your role with their dates. Every change is versioned and written to your tamper-evident 'ai-act' log. Requires the organization API key.

    system actor merge

  5. ai_act_verify_exportRead only

    AI Act: verify a register

    Check that an AI Act register a supplier or partner sent you is exactly what they exported from Privi, and return its on-chain seal. Free; no key needed.

    register_json

  6. approval_cancelChanges data

    Approvals: cancel

    Withdraw an approval request (or revoke an approval not yet used). Your key cannot approve, only cancel. Requires the organization API key.

    approval_id

  7. approval_listRead only

    Approvals: list yours

    Your organization's approval requests, newest first. Requires the organization API key.

    status

  8. approval_policy_set

    Approvals: set a live-approval threshold

    Make mandate_spend pause for a human on large payments: any payment over the threshold creates an approval request that the mandate's principal must sign with their wallet before the agent can spend. Requires the organization API key.

    stream_id approve_over_usdc

  9. approval_request

    Approvals: ask a human

    Ask a human to approve (or deny) an action. Returns approve_url for them: they read the request and sign with their wallet (free, no transaction). Your agent then calls approval_wait, or watches your live channel for approval.approved. Only the named wallet can decide; your API key can only cancel. Requires the organization API key.

    stream_id action mandate_id approver_wallet amount_usdc payee reference reason ttl_s

  10. approval_statusRead only

    Approvals: check one

    Status of an approval request: pending, approved, denied, expired or cancelled, with the human's wallet signature once they decide. Free.

    approval_id

  11. approval_waitRead only

    Approvals: wait for the human

    Block until the human decides (or timeout_s passes). Returns the current status; if still pending, call again. Free.

    approval_id timeout_s

  12. fortress_keysRead only

    Fortress keys

    Privi's public signing keys: Ed25519 and ML-DSA-87 (NIST FIPS 204, CNSA 2.0 post-quantum). Pin these to verify Privi signatures offline. Free.

  13. fortress_tpi_execute

    Execute an authorized action

    Consume a two-person authorization right before performing the action. Single use; refused unless authorized. Requires the organization API key.

    request_id

  14. fortress_tpi_listRead only

    List two-person requests

    Your organization's two-person requests. Requires the organization API key.

  15. fortress_tpi_policy

    Set a two-person policy

    Define a Two-Person Integrity policy: which officers can approve, and how many distinct approvals an action needs. Requires the organization API key.

    name officer_wallets required

  16. fortress_tpi_request

    Request two-person approval

    Ask officers to authorize a sensitive action under a two-person policy. Returns approve_url for the officers; each signs with their wallet. Do not act until fortress_tpi_status shows 'authorized', then call fortress_tpi_execute. Requires the organization API key.

    policy stream_id summary details hours

  17. fortress_tpi_statusRead only

    Two-person status

    Status of a two-person request (pending, authorized, vetoed, expired, executed) and who approved. Free.

    request_id

  18. gateway_create

    Gateway: protect and meter an MCP server

    Put your MCP server behind Privi. You get an HTTP URL and a WebSocket URL that forward to it unchanged (x402 payments keep working) while Privi rate-limits callers, optionally requires a Privi Passport, meters every tool call and writes each call to your tamper-evident log. The kill switch stops the gateway instantly. Upstream must be public HTTPS. Requires the organization API key.

    name upstream_url min_score rate_per_min guard

  19. gateway_deleteChanges data

    Gateway: delete

    Turn a gateway off. Its URLs stop working at once; history stays in your log. Requires the organization API key.

    gw_id

  20. gateway_infoRead only

    Gateway: info

    Public description of a gateway: where it forwards, whether callers need a Passport, its rate limit and its call counts. Free.

    gw_id

  21. gateway_listRead only

    Gateway: your gateways

    Your organization's gateways. Requires the organization API key.

  22. gateway_set_guard

    Gateway: Guard mode

    Turn Privi Guard on for every tool result that passes through your gateway: tag adds the verdict and a receipt id in result._meta['privi/guard']; block also replaces injected results with an error before your agents see them. Each result is one Guard check (free allowance, then credits). Requires the organization API key.

    gw_id mode

  23. gateway_statsRead only

    Gateway: usage

    Calls, errors, denials and x402 payment prompts per tool and per day for one of your gateways, plus your monthly quota. Requires the organization API key.

    gw_id

  24. gov_ai_inventoryRead only

    AI use case inventory

    Your agency's AI use case inventory: the current version of each record. Requires the organization API key.

    use_case_id

  25. gov_ai_inventory_checkRead only

    Check inventory readiness

    Flags what an OMB M-25-21 review would flag before you submit: missing required fields, PII without a Privacy Impact Assessment, and high-impact AI in pilot or deployment missing any minimum risk practice (testing, impact assessment, independent review, monitoring, operator training, fail-safe, appeals, public feedback) or without a recently active activity log as monitoring evidence. Requires the organization API key.

  26. gov_ai_inventory_export

    Export public inventory

    Machine-readable CSV of your publicly releasable AI use cases (for publishing at agency.gov/ai), with its SHA-256 sealed on chain (Base, until the Privi chain mainnet) so the published file can be proven unaltered. Requires the organization API key.

    include_withheld

  27. gov_ai_usecase_save

    Save an AI use case

    Add or update an entry in your agency's AI use case inventory (OMB M-25-21). Every change creates a new version and is written to your tamper-evident 'ai-inventory' log. Requires the organization API key.

    use_case actor merge

  28. gov_ai_verify_exportRead only

    Verify a published inventory

    Check that a published AI inventory file is exactly what the agency exported from Privi Ledger, and return its on-chain seal. Free; no key needed.

    csv_text

  29. gov_pqc_classifyRead only

    Classify an algorithm

    Classify cryptographic algorithms as quantum-vulnerable (RSA, ECDH, ECDSA, EdDSA, DH, DSA, MQV), post-quantum (ML-KEM, ML-DSA, SLH-DSA), hybrid, symmetric/hash, or unknown. Free.

    algorithms

  30. gov_pqc_export

    Export sealed CBOM and plan

    Export the full cryptographic inventory (CBOM) and migration plan as one JSON document for OMB, the CIO or auditors, with its SHA-256 sealed on chain (Base, until the Privi chain mainnet). Requires the organization API key.

  31. gov_pqc_inventoryRead only

    Crypto inventory

    Current cryptographic inventory of your systems. Requires the organization API key.

    system_id

  32. gov_pqc_planRead only

    Post-quantum migration plan

    Prioritized post-quantum migration plan: every quantum-vulnerable asset ranked (High Value Assets, high-impact systems and long-lived sensitive data first; key establishment before signatures), with its deadline (key establishment Dec 31 2030, signatures Dec 31 2031), recommended NIST replacement, progress metrics, and findings (missed deadlines, TLS below 1.3, no target dates, unrecognized algorithms). Requires the organization API key.

  33. gov_pqc_system_save

    Save a system's crypto inventory

    Record the cryptographic inventory (CBOM) of one system for post-quantum migration. Every change creates a new version and is written to the agency's tamper-evident 'pqc-inventory' log. Scanners and agents can submit results directly. Requires the organization API key.

    system actor

  34. gov_pqc_verify_exportRead only

    Verify a CBOM export

    Check that a CBOM and migration-plan document is exactly what was exported from Privi Ledger and return its on-chain seal. Free; no key needed.

    document

  35. guard_balanceRead only

    Guard: balance

    Your free checks left this month and your prepaid credits. Needs the organization key.

  36. guard_buy_credits

    Guard: buy check credits

    Buy prepaid Privi Guard checks in USDC on Base via x402. Credits never expire and are used after the free monthly allowance. Needs the organization key.

    pack

  37. guard_checkRead only

    Guard: check text before acting on it or sending it

    Check content for prompt injection (inbound) or leaked secrets and personal data (outbound) before an agent acts on it or sends it. Returns allow / warn / block, the findings, a redacted copy for outbound secrets, and an Ed25519-signed receipt anchored on-chain, which proves the check happened. Privi does not store the text. Free for 1,000 checks a month with an organization key; otherwise 1 cent per check in USDC via x402.

    text direction source

  38. guard_check_manyRead only

    Guard: check many texts at once

    Check up to 50 texts in one call (for example every tool result in a step). Each item is billed as its own check against your free allowance or credits and gets its own receipt. Needs an organization key.

    items

  39. guard_pricingRead only

    Guard: pricing and how it works

    What Privi Guard checks, what it costs, and how receipts work. Free.

  40. guard_receiptRead only

    Guard: verify a receipt

    Verify a Privi Guard receipt: the signed body, signature validity and its Merkle proof into the anchored transparency log. Free; anyone holding the id can verify it.

    check_id

  41. kya_bind_wallet

    KYA: bind a wallet

    Step 2: bind the wallet to your organization's Privi Passport so its transactions pass KYA checks. With a wallet signature the binding is *proven*; without one it is only *declared* (most checkers require proven). Requires the organization API key.

    address challenge_id signature stream_id label

  42. kya_challenge

    KYA: challenge for a wallet

    Step 1 of binding a wallet to your Privi Passport: get a message to sign with that wallet (EIP-191 personal_sign). Valid 30 minutes. Requires the organization API key.

    address

  43. kya_checkRead only

    KYA: check a wallet

    Know-Your-Agent for blockchains: is this wallet operated by an audited AI agent, and how trustworthy is it right now? Resolves the address to its organization and live Privi Passport and returns allow/deny with reasons, plus a Privi-signed attestation (valid 60 min) you can cache. For chains, DeFi protocols, exchanges, stablecoin issuers and x402 facilitators. Free; send your organization key to log the check as evidence.

    address min_score min_grade require_signed purpose

  44. kya_unbind_walletChanges data

    KYA: unbind a wallet

    Remove a wallet from your Passport (rotated or compromised key). KYA checks deny it immediately. Requires the organization API key.

    address

  45. kya_walletsRead only

    KYA: your wallets

    Wallets bound to your organization and how each was proven. Requires the organization API key.

  46. ledger_audit_streamRead only

    Audit a stream

    Check whether an agent's action log is intact: entry count, time span, action and failure counts, head hash, and where tampering broke the chain if it did. Does not reveal the actions themselves. Paid per call via x402.

    org_id stream_id

  47. ledger_check_receiptRead only

    Check a receipt

    Confirm that an action receipt exists in the ledger and when it was recorded. Reveals no action contents. Free.

    entry_hash

  48. ledger_compliance_report

    Compliance report

    Audit-ready report of your AI agents' activity for a period (SOC 2 evidence, security questionnaires, AI-regulation record keeping): actions by type, failures, human approvals, log integrity, on-chain status, and findings. The report's hash is anchored on the Privi blockchain so it cannot be edited later without detection. Requires the organization API key.

    since until streams

  49. ledger_consistency_proofRead only

    Consistency proof

    Proof that Privi's log only grew between two signed tree heads: nothing recorded earlier was edited, removed or reordered (RFC 9162). Free.

    first second

  50. ledger_evidence_bundleRead only

    Evidence bundle

    Export a self-contained evidence package for auditors, courts or air-gapped systems: every entry, the hash chain, an RFC 9162 inclusion proof, the signed tree head, on-chain checkpoint and Privi's keys, signed with Ed25519 and ML-DSA-87. Verify offline with verify_bundle.py (GET /tools/verify_bundle.py). Requires the organization API key.

    stream_id

  51. ledger_handshake_accept

    Accept a handshake

    Accept a handshake addressed to your organization: records the same terms in your log, confirms it in the other company's log, and seals the matched pair on chain (Base). Requires your organization API key. Read the terms first with ledger_handshake_inbox.

    handshake_id stream_id actor

  52. ledger_handshake_inboxRead only

    Handshake inbox

    Handshakes sent to and from your organization, newest first, with their terms and status. Requires your organization API key.

  53. ledger_handshake_offer

    Offer a handshake

    Start a Privi Handshake: a two-sided record of a dealing with another company's agent (payment, data transfer, delivery, agreement). Recorded in your log now; when the other company accepts, both logs hold matching entries and the pair is sealed on chain (Base). Requires your organization API key; the other company must also use Privi Ledger.

    counterparty_org_id stream_id actor action_type summary resource details expires_hours

  54. ledger_handshake_reject

    Reject a handshake

    Reject a handshake addressed to your organization; the other company's log records the rejection. Requires your organization API key.

    handshake_id reason

  55. ledger_handshake_verifyRead only

    Verify a handshake

    Public check of a handshake: both companies, status, whether both matching log entries still exist, and the on-chain seal. Never reveals the terms. Free; useful for disputes and audits.

    handshake_id

  56. ledger_inclusion_proofRead only

    Inclusion proof

    Merkle audit path proving an entry is in Privi's append-only transparency log (RFC 9162). Verifiable offline against the signed tree head. Reveals no entry contents. Free.

    entry_hash tree_size

  57. ledger_list_streamsRead only

    List streams

    List your organization's streams with entry counts. Requires the organization API key.

  58. ledger_planRead only

    Plan and usage

    Your plan, entries used this month, the limit, and when a Pro plan renews. Requires your organization API key.

  59. ledger_pricingRead only

    Ledger pricing

    List Privi Ledger tools, what each costs, and how to get an organization key.

  60. ledger_read_streamRead only

    Read a stream

    Read your organization's entries in a stream, oldest first, with an integrity check of the whole stream. Requires the organization API key.

    stream_id after_seq limit

  61. ledger_record_action

    Record an agent action

    Append an action to the organization's tamper-evident log. Returns the entry with its entry_hash receipt. Requires the organization API key.

    stream_id actor action_type summary resource outcome details

  62. ledger_report_pdfRead only

    Compliance report PDF

    A finished PDF of a sealed compliance report, for auditors and customers. Returned as base64 (pdf_base64) and as an embedded PDF resource; also downloadable at /reports/<report_id>.pdf with the organization key. Requires the organization API key.

    report_id

  63. ledger_signup

    Sign up

    Create a Privi Ledger organization on the free plan and get its API key (shown once; store it). Free plan: up to the monthly entry limit, all tools included. Upgrade any time with ledger_upgrade_pro. No key needed to sign up.

    organization_name

  64. ledger_tree_headRead only

    Signed tree head

    The latest signed tree head of Privi's transparency log: an RFC 9162 Merkle root over every entry ever recorded, signed with Ed25519 and ML-DSA-87, and periodically anchored on chain (Base). Free.

  65. ledger_upgrade_pro

    Upgrade to Pro

    Buy 30 days of Privi Ledger Pro (unlimited entries) for your organization, paid in USDC on Base via x402. Each call adds 30 days. Requires your organization API key.

  66. ledger_verify_reportRead only

    Verify a report

    Check that a compliance report is unaltered: recomputes its hash, confirms Privi Ledger issued it, and checks the anchor on chain (Base, until the Privi chain mainnet). Free; no key needed.

    report

  67. live_infoRead only

    Privi Live: how to connect

    Real-time Privi: WebSocket and server-sent-event streams (trust changes, your own audit tail, approvals), a kill switch, human approvals, a metered MCP gateway and paid agent-to-agent rooms. Returns the endpoints, channels, frames and what each plan gets. Free; no key needed.

  68. live_killChanges data

    Kill switch: stop an agent

    Stop an agent at once: mandate_spend, your gateways and your room messages are refused until live_resume. Takes effect on the next call, and is pushed to your live channel immediately. Audit logging keeps working. Requires the organization API key.

    stream_id reason

  69. live_resumeChanges data

    Kill switch: resume an agent

    Lift a kill switch set with live_kill. Requires the organization API key.

    stream_id

  70. live_statusRead only

    Live status

    Your kill switches, live-approval thresholds, pending approvals, gateways, rooms and usage this month. Requires the organization API key.

  71. mandate_checkRead only

    Check a payment against a mandate

    For merchants, payment facilitators and counterparties: did a human authorize this AI agent to pay you this amount? Verifies the human's wallet signature, status, expiry, per-payment cap, remaining budget and payee list, and returns allow/deny with reasons plus a Privi-signed attestation. Free; no key needed.

    mandate_id amount_usdc payee

  72. mandate_create

    Create a spending mandate

    Draft a Privi Mandate: the human's signed permission for your agent to spend, with a budget, per-payment cap, allowed payees and expiry. Returns sign_url: send it to the human, who reads the plain-English terms and signs once with their wallet (free, no transaction). Nothing can be spent until they sign. Requires the organization API key.

    stream_id principal_wallet max_total_usdc purpose max_per_payment_usdc payees days agent_wallet

  73. mandate_getRead only

    Get a mandate

    Public view of a mandate: terms, status, the human's signature, spent and remaining budget, and recent spends. Free.

    mandate_id

  74. mandate_listRead only

    List your mandates

    Your organization's mandates with status and remaining budget. Requires the organization API key.

  75. mandate_revokeChanges data

    Revoke a mandate

    Stop an agent from spending under a mandate (the human can also revoke from the sign_url page). Requires the organization API key.

    mandate_id reason

  76. mandate_spend

    Spend under a mandate

    Call before each payment: checks the mandate and, if allowed, deducts the amount from the budget and records the payment in the agent's tamper-evident log. Refused payments are logged as blocked. Refused at once if the kill switch is on. Over the organization's live-approval threshold it returns approval_required with an approve_url for the human; call again with approval_id once they approve. Requires the organization API key.

    mandate_id amount_usdc payee reference approval_id

  77. mcp_server_checkRead only

    Check an MCP server before connecting

    Free safety check for any remote MCP server, before an agent connects to it or after it was approved. Privi reads the server's tool list (it never calls a tool) and returns a verdict: ok, caution, danger (tool poisoning: hidden instructions, concealment from the user, requests for keys or private files, tool shadowing, invisible characters), changed (tools differ from expected_tools_hash), unverified (tools behind auth) or unreachable. Also returns the tools_hash to pin, a grade A-F and a link to the server's public history. Every first observation and change is recorded in Privi's on-chain-anchored transparency log. No key needed.

    url expected_tools_hash

  78. passport_gateRead only

    Gate on a Privi Passport

    One-call allow/deny decision before transacting with another AI agent: verifies its Privi Passport and applies your minimums, returning the reasons. If you send your organization API key the decision is recorded in your own tamper-evident log as due-diligence evidence. Free.

    passport_id min_score min_grade require_anchored purpose

  79. passport_issue

    Issue a Privi Passport

    Issue a Privi Passport: a signed, on-chain-anchored trust credential for your agent or organization, scored 0-1000 (grade A-E) from verified history, integrity, anchoring, reliability, human oversight, compliance reports and confirmed handshakes. Show it to counterparties; they verify it free with passport_verify / passport_gate. Valid 30 days. Free on Pro/enterprise; free-plan organizations pay per passport via x402. Requires the organization API key.

    stream_id

  80. passport_listRead only

    List your passports

    Your organization's issued passports with score, grade, expiry and revocation. Requires the organization API key.

  81. passport_revokeChanges data

    Revoke a passport

    Revoke one of your passports (e.g. an agent was retired or compromised). Verifiers see it immediately. Requires the organization API key.

    passport_id reason

  82. passport_verifyRead only

    Verify a Privi Passport

    Check an AI agent's Privi Passport before trusting it: Privi signature, content unaltered, not expired or revoked, anchor on chain (Base), and a live re-score of the agent right now (so tampering after issue is caught). Free; no key needed.

    passport_id passport

  83. privi_payment_optionsRead only

    Privi: payment methods

    See existing USDC/x402 service billing and separately gated valueless PRVI_TEST development mode.

  84. privi_test_payment_quote

    Privi: create a valueless test-payment quote

    Off-chain PRVI_TEST quote. Requires organization key and explicit test mode. Never takes money.

    sku

  85. privi_test_payment_simulate

    Privi: simulate a valueless test payment

    Consume a test quote once. Receipt is NOT payment, on-chain proof or entitlement.

    quote_id acknowledgement

  86. privi_token_marketRead only

    PRIVI token market

    PRIVI on Base: price, how much PRIVI and USDC the Privi swap desk holds (so whether a swap can fill), any Uniswap v3 / Aerodrome pools, and optionally a swap quote. Every paid Privi tool also accepts PRIVI. Free.

    side amount

  87. qledger_blockRead only

    Quantum Ledger block

    One quantum-sealed block with its signatures, settlement on chain and a validity check. Free.

    height

  88. qledger_entry_proofRead only

    Quantum proof for an entry

    Prove an entry (by its receipt hash) is sealed in a quantum block: the block, its post-quantum signatures, its on-chain settlement and the Merkle inclusion proof. Reveals no entry contents. Free.

    entry_hash

  89. qledger_seal

    Seal a quantum block now

    Seal your newest entries into a quantum block now instead of waiting for the next scheduled block (every few minutes). Does nothing if no entries are waiting. Requires the organization API key.

  90. qledger_statusRead only

    Quantum Ledger status

    Privi Quantum Ledger: latest quantum-sealed block (SHA3-512, ML-DSA-87 + Ed25519), entries waiting for the next block, the Privi Foundation chain it is fused with, and signing keys. Free.

  91. qledger_verify_chainRead only

    Verify the Quantum Ledger

    Verify the whole Quantum Ledger: SHA3-512 block hashes, hash links, both signatures on every block, and for recent blocks the log roots, entry roots and RFC 9162 consistency proofs. Free; anyone can run it.

    deep_last

  92. room_closeChanges data

    Rooms: close and seal

    Close a room and seal its transcript: the hash is signed (Ed25519 + ML-DSA-87), anchored on chain (Base) and written to both organizations' logs. Either party can close. Requires the organization API key.

    room_id

  93. room_infoRead only

    Rooms: info

    Public facts about a room: parties, price, message count, head hash and its seal once closed. No message text. Free.

    room_id

  94. room_listRead only

    Rooms: list yours

    Rooms your organization owns or joined. Requires the organization API key.

  95. room_open

    Rooms: open a live room

    Open a live, hash-chained conversation room for two organizations' agents. Both connect over WebSocket (ws_url), authenticate with their API keys and talk in real time; closing the room seals the transcript on the Privi chain. Optionally charge per message, paid under the guest's human-signed Mandate. Requires the organization API key.

    title counterparty_org_id price_per_message_usdc payee max_messages hours

  96. room_transcriptRead only

    Rooms: transcript

    Every message in a room you are part of, with the chain check. Requires the organization API key.

    room_id

  97. room_verifyRead only

    Rooms: verify a sealed transcript

    Check a closed room's seal (signature, on-chain anchor) and, if you pass the transcript, that it is complete and unaltered. Free; no key needed.

    room_id messages

  98. scan_changesRead only

    Privi Scan: recent tool changes

    The latest MCP servers whose tool definitions changed after they were first observed (possible rug pulls), newest first. Subscribe to the Live channel 'scan' for these as they happen. Free.

    limit

  99. scan_claim_start

    Claim your MCP server's listing

    Start proving you operate an MCP server listed in Privi Scan. Returns a token to publish at https://<your host>/.well-known/privi-scan.txt. Verified owners get an owner-verified badge, unlimited rescans, change alerts and control over the listing. Needs the org key (create_org is free).

    server

  100. scan_claim_verify

    Finish claiming your MCP server

    Check the token at /.well-known/privi-scan.txt and mark your organization as the verified owner.

    server

  101. scan_owner_listing

    Show or hide your server's listing

    Verified owners only: hide the server from the directory (opt-out) or show it again. History already in the transparency log cannot be removed.

    server listed

  102. scan_rescanRead only

    Rescan an MCP server now

    Probe the server immediately instead of waiting for the next crawl (every ~6 hours). For the verified owner or Pro organizations.

    server

  103. scan_searchRead only

    Search the MCP trust registry

    Search Privi Scan, the public directory of remote MCP servers from the official MCP Registry, each with a safety grade, verdict, tool count and change history. Use it to find a trustworthy server for a job. Free.

    query grade sort limit offset

  104. scan_serverRead only

    Privi Scan: one server in full

    Full report for one MCP server: every tool definition with its hash, all findings with evidence, the change history (what was added, removed or modified, and when) and the transparency-log proof. Free.

    server_id include_history

  105. scan_statsRead only

    Privi Scan: totals

    How many MCP servers Privi Scan tracks, by status and grade, tools indexed, changes recorded and how to verify the evidence. Free.

  106. scan_unwatch

    Stop watching an MCP server

    Remove a server from your watchlist. Needs the org key.

    server

  107. scan_watch

    Watch an MCP server (pin its tools)

    Pin the server's current tools as approved and get a real-time event on your private Live 'org' channel the moment they change, a risk appears or the server goes down. Free plan: 3 servers; Pro: 500. Needs the org key.

    server repin

  108. scan_watchlistRead only

    Your watched MCP servers

    Your watched servers with their pinned tools_hash and whether each has drifted since you pinned it. Needs the org key.

  109. seal_content

    Content Seal: seal files or text

    Seal content your company publishes (documents, images, video, press releases, invoices, AI output) with who made it and whether AI was involved. Each seal is anchored on chain; anyone can check a file for free at the returned verify_url or with seal_verify. Counts toward your plan's monthly entries. Requires the organization API key.

    items

  110. seal_listRead only

    Content Seal: your seals

    Your most recent content seals. Requires the organization API key.

    limit

  111. seal_revokeChanges data

    Content Seal: revoke a seal

    Withdraw one of your seals (e.g. sealed by mistake). Checks then show it as revoked. Requires the organization API key.

    seal_id reason

  112. seal_verifyRead only

    Content Seal: check a file

    Is this exact file or text sealed, by whom, since when, and did they declare AI involvement? Any change to the content (one pixel, one character) means no match. Free; no key needed.

    sha256 text

  113. supplier_cert_revokeChanges data

    Supplier Proof: revoke a certificate

    Revoke a certificate you issued (as the buyer). Verification shows it as revoked at once. Requires the organization API key.

    cert_id reason

  114. supplier_cert_verifyRead only

    Supplier Proof: verify a certificate

    Check a Privi supplier certificate: untampered, not revoked, not expired, which buyer approved which supplier, and (optionally) whether a document is one it covers. Free; no key needed.

    cert_id document_sha256

  115. supplier_certsRead only

    Supplier Proof: your certificates

    Certificates you issued (as buyer) or hold (as supplier). Requires the organization API key.

  116. supplier_proof_decide

    Supplier Proof: approve or reject

    Approve a supplier's proof (issues a certificate naming both companies and the evidence fingerprints, sealed on chain, with a public verify page and badge) or reject it with a reason. Requires the organization API key.

    sub_id approve reason

  117. supplier_proof_inboxRead only

    Supplier Proof: inbox

    Supplier submissions waiting for your decision (as the buyer). Requires the organization API key.

    status

  118. supplier_proof_submit

    Supplier Proof: submit proof to a buyer

    Answer a buyer's supplier requirement with fingerprints of your evidence documents. The buyer reviews and, if approved, Privi issues a certificate sealed on chain. Requires your organization API key (sign up free with ledger_signup).

    req_id evidence

  119. supplier_requirement_create

    Supplier Proof: require proof from suppliers

    Publish a requirement your suppliers must meet. Share the returned invite_url with them: they answer it from their own Privi organization (free sign-up) and you approve or reject in supplier_proof_inbox. Requires the organization API key.

    title items valid_days

  120. supplier_requirement_getRead only

    Supplier Proof: view a requirement

    See what a buyer requires of its suppliers. Free; no key needed.

    req_id

  121. trust_eventsRead only

    Trust feed: recent events

    The latest trust-change events: passports issued, revoked or re-scored, wallets bound or unbound, mandates activated or revoked, transparency-log heads anchored. Without a Pro key the feed is delayed (see live_info); use the WebSocket or SSE stream for real time. Free.

    address passport_id limit

Is this yours?

Claim it to hear the moment it breaks, correct this page and add your own ways to use it.

A test is the handshake and the tool list: no tool was called. Names and descriptions are as listed by whoever registered the server; we haven't checked them.

Back to Tested MCP Servers