Invinoveritas

babyblueviper1/invinoveritas-mcp

This is a capital-aware trading governance layer and agent residence that runs on Lightning payments. The standout tool is /review, which gives you a pre-trade verdict (approve, approve_with_concerns, reject) based on position size, drawdown, and regime durability. It's the same gate the team's live Bitcoin bot uses. Beyond that you get /reason for paid inference, /execute for sandboxed Python, /memory for persistent state, /browse for web actions, and a marketplace where agents buy services from each other in sats. The /residence/act bundle wraps reasoning, governance, and memory into one call. You'd reach for this if you're building autonomous trading agents that need to avoid account-killing trades and carry wallet identity across sessions.

tools: 10
transport: HTTP
last updated: Sep 26, 2026

View on GitHub

Install

From registry metadata

$ npx add-mcp https://api.babyblueviper.com/mcp/verify --name invinoveritas

Run in your terminal. add-mcp asks which agents to add it to (Claude Code, Codex, Cursor and more). Add -g to install it for every project.

Review the command, arguments and environment values before installing. MCP servers run with your local permissions.

Other ways

Claude Code

$ claude mcp add --transport http invinoveritas https://api.babyblueviper.com/mcp/verify

Run in your terminal. Add --scope user to make it available in every project.

Tools

Verified live · 10 tools

Verified live against the running server on Nov 6, 2026.

reviewIndependent verdict on a proposed action before it is taken: a code diff, shell command, deployment plan, configuration change, another agent's output, or a proposed transaction. Returns approve / approve_with_concerns / reject with a confidence score, issues ranked by severit...20 params

Independent verdict on a proposed action before it is taken: a code diff, shell command, deployment plan, configuration change, another agent's output, or a proposed transaction. Returns approve / approve_with_concerns / reject with a confidence score, issues ranked by severit...

Parameters* required

action_bindingobject

Optional: the exact real-world action this verdict authorizes — tool identity, materialized (not templated) arguments, and the id of the agent that will execute it, e.g. {'tool': 'place_order', 'ag...

artifact*string

The artifact to review: unified diff / patch, shell command, plan, config, analysis, agent output, or raw text

artifact_typestring

Type of artifact. 'code_diff' or 'patch' triggers deep code review. 'plan' for architecture/strategy. 'trade' triggers the capital-scale-aware risk-manager review of a proposed entry/exit. 'onchain...one of code_diff · patch · shell_command · plan · config_change · analysisdefault: general

concernsstring

Specific things to check (e.g. 'production safety', 'edge cases in trading logic', 'regulatory risk')

confidentiality_tierstring

Which privacy/evidentiary tradeoff this verdict should use, only meaningful with sign=true. 'hash_only' (default): the proof carries only artifact_hash, raw content never disclosed — strongest priv...one of hash_only · partial_disclosure · full_disclosuredefault: hash_only

contextstring

What you are trying to accomplish, why now, success criteria

disclosed_summarystring

Only used when confidentiality_tier='partial_disclosure'. A real, human-readable description of the reviewed artifact/decision you're choosing to make public — bound raw into decision_ref. Ignored...

evidencearray

Optional, with policy: [{id, provenance (requester_supplied|independent), kind, content}] for the substantive conditions.

external_evidencearray

Optional (v17, 2026-09-10): third-party evidence this judgment relied on — e.g. a tool-reliability registry's own historical PASS/FAIL record, worked out live with arian-gogani/nobulex-registry#1....

factsobject

Optional, with policy: the structured request fields the deterministic rules read (e.g. recipient, amount_atomic, chain, token).

intended_audiencestring

Optional: declare who/what this verdict is intended for (your own DID, endpoint URL, or gateway identifier). Bound into decision_ref so it can't be silently stripped or altered once issued. NOT ind...

intended_verifierstring

Optional: a CAIP-10 string naming the specific on-chain verifier/gate this verdict is meant to be checked against, e.g. 'eip155:8453:0x8004A169FB4a3325136EB29fA0ceB6D2e539a432'. Bound into decision...

mediator_attestationobject

Optional (v22): your mediator proves control of its own key. {key_url (https, mediator's own domain), public_key_ed25519_b64, requested_at (unix s, +-600 s), nonce (8-128 ASCII), signature_ed25519_...

policyobject

Optional (2026-10-13): policy-governed review. {schema: 'invinoveritas.review_policy.v1', deterministic: [{id, field, op (eq|ne|in|not_in|lte|lt|gte|gt), value}], substantive: [{id, requirement, ac...

related_claimsobject

Optional (policy v20): a structured claim about related_proof_event -- a non-empty subset of {artifact_hash, verdict, verified_at, policy_version, decision_ref}. Compared by exact equality against...

related_proof_eventobject

Optional: if the artifact being reviewed IS another party's already-signed verdict proof (a verdict-of-verdict re-review), pass that proof's full signed event ({id, pubkey, created_at, kind, tags,...

request_capture_refstring

Optional: a requester-controlled commitment (a hash/id you generated and can independently prove existed at request-time) that this artifact was submitted for review — the captured-admission-v0 rev...

severity_thresholdstring

Minimum severity to reportone of blocker · high · medium · alldefault: all

signboolean

Return the verdict as a portable signed proof (binds verdict, artifact hash and invinoveritas's public key, plus a content-addressed decision_ref). Anyone can check it later with verify_proof.default: false

verdict_relayobject

Optional (verdict-relay/v2): also return a BIP-340 signature an ERC-8414 InvinoveritasVerdictAuthoritySigned contract verifies on-chain (garyyang-finchip/task-token-standard#2). {chain_id, authorit...

verify_proofChecks a signed invinoveritas proof without trusting whoever handed it over: recomputes the event id, checks the Schnorr signature, and confirms the signing key is invinoveritas's published key. Optionally pass expect_artifact_hash (sha256 of the content you received) to confi...6 params

Checks a signed invinoveritas proof without trusting whoever handed it over: recomputes the event id, checks the Schnorr signature, and confirms the signing key is invinoveritas's published key. Optionally pass expect_artifact_hash (sha256 of the content you received) to confi...

Parameters* required

eventobject

The signed proof event {id,pubkey,created_at,kind,tags,content,sig} the counterparty handed you (from a /prove or /review sign=true response).

event_idstring

Alternatively, the Nostr event id alone (from a /review sign=true, /prove, or /witness proof) — fetches the durably-stored full event, independent of relay retention, and verifies it.

expect_artifact_hashstring

Optional sha256 hex of the output you received — asserts the proof is ABOUT that exact artifact.

expect_intended_verifierstring

Optional (added 2026-08-16) — asserts the proof's declared intended_verifier matches you, the consumption-identity check alongside expect_artifact_hash's content-identity check. A match confirms th...

proof_idstring

Alternatively, a stored attestation proof_id to fetch + verify.

verifier_signaturestring

Optional (added 2026-08-16) — an EIP-191 personal_sign signature over 'invinoveritas-verify-proof:<event_id>', signed by the key controlling the address in expect_intended_verifier (eip155 CAIP-10...

payment_receiptSigned receipt for one verdict-governed payment: endpoint, network, asset, max amount, payer, facilitator verdict, settlement id, denial reason, and retry state. retry_state is read from the token's authorizationState, so retrying with the same nonce cannot double-pay. Pass th...8 params

Signed receipt for one verdict-governed payment: endpoint, network, asset, max amount, payer, facilitator verdict, settlement id, denial reason, and retry state. retry_state is read from the token's authorizationState, so retrying with the same nonce cannot double-pay. Pass th...

Parameters* required

args*object

The payment args that verdict bound. Their hash must match the verdict's action_binding_args_hash.

authorization_signaturestring

Optional: the payer's 65-byte EIP-3009 signature (hex). The receipt verifies it recovers to the payer over the bound amount, payee, validity window and the verdict's nonce, under the token's on-cha...

event*object

The signed /review verdict (Nostr event) that governed the payment.

max_verdict_age_secondsinteger

Optional max age of the verdict in seconds (1..86400). Default 120.

output_hashstring

Optional sha256 of the delivered result. With it, a settled payment reads paid_output_recorded; without it, paid_no_output_recorded (a possible ghost result: do not pay again for the same job).

resource_urlstring

Optional https URL of the resource the payment was for, when the verdict bound no endpoint.

terms_hashstring

Optional sha256 (64 hex, optionally sha256:) of the terms the payment was for. A terms hash bound in the verdict's args takes precedence; a supplied one is labelled not bound.

tx_hashstring

Optional 0x + 64 hex settlement transaction. settlement_id is set only when this tx is the payment the verdict bound.

verify_mediaCheck whether a video, audio or image file is byte-for-byte a file a publisher registered with invinoveritas. Pass the file's SHA-256 (compute it locally; the file is not sent). A match returns the registration: per-claim evidential states from its C2PA Content Credentials (si...1 params

Check whether a video, audio or image file is byte-for-byte a file a publisher registered with invinoveritas. Pass the file's SHA-256 (compute it locally; the file is not sent). A match returns the registration: per-claim evidential states from its C2PA Content Credentials (si...

Parameters* required

sha256*string

SHA-256 of the exact file bytes, 64 hex characters.

witnessTimestamps and signs a third party's exact claim, unmodified and unjudged: 'we received this text, attributed to source X, at time T', not 'we agree with it'. The source is recorded as self-declared. The resulting proof checks with verify_proof. Docs: https://api.babyblueviper...2 params

Timestamps and signs a third party's exact claim, unmodified and unjudged: 'we received this text, attributed to source X, at time T', not 'we agree with it'. The source is recorded as self-declared. The resulting proof checks with verify_proof. Docs: https://api.babyblueviper...

Parameters* required

body*string

The exact claim to anchor, byte-for-byte (max 16000 chars)

source*string

Who this claim is attributed to (self-declared, NOT verified by us)

validateStatistical reality-check of a backtest from its realized returns (or trade rows), not the strategy itself. Returns likely_real / borderline / overfit_or_noise using the Deflated Sharpe Ratio (adjusted for the number of variants tried), a sign-flip permutation test, and out-of...8 params

Statistical reality-check of a backtest from its realized returns (or trade rows), not the strategy itself. Returns likely_real / borderline / overfit_or_noise using the Deflated Sharpe Ratio (adjusted for the number of variants tried), a sign-flip permutation test, and out-of...

Parameters* required

agent_idstring

Optional caller agent ID

k_foldsinteger

default: 5

n_permsinteger

default: 2000

n_trialsinteger

How many strategy variants/params you tried before selecting this one. Be honest — more trials = bigger Deflated-Sharpe haircut.default: 1

periods_per_yearnumber

Optional, for annualized-Sharpe display only.

returnsarray

Per-trade (or per-period) realized returns.

tradesarray

Alternative to 'returns': rows with a return field (ret/pnl/net_bps) and optional 'coin'/'ts'/'entry'/'exit' fields.

trial_sharpesarray

Optional: Sharpes of all variants tried → exact DSR variance.

ledgerReads invinoveritas's public track record of signed verdicts, including ones that turned out wrong. Each entry is a signed Nostr event whose id and signature can be recomputed against invinoveritas's published key; entries are append-only and Bitcoin-timestamped, so they can't...1 params

Reads invinoveritas's public track record of signed verdicts, including ones that turned out wrong. Each entry is a signed Nostr event whose id and signature can be recomputed against invinoveritas's published key; entries are append-only and Bitcoin-timestamped, so they can't...

Parameters* required

entrystring

Optional entry number (e.g. '1'); omit for the full index.

ledger_submitPublishes one of your own signed review proofs (from review with sign=true) as a public entry on the invinoveritas ledger. Publication is immediate and permanent: the entry is broadcast to Nostr relays and Bitcoin-timestamped. Only genuine invinoveritas-signed proofs are accep...2 params

Publishes one of your own signed review proofs (from review with sign=true) as a public entry on the invinoveritas ledger. Publication is immediate and permanent: the entry is broadcast to Nostr relays and Bitcoin-timestamped. Only genuine invinoveritas-signed proofs are accep...

Parameters* required

event*object

The signed Nostr event from a prior /review(sign=true) call — the exact proof.event object that response returned.

notestring

Optional short context: what this verdict was for, why it's worth featuring.

conformance_certifyPublishes a verifier's current conformance grade from the public registry (conformance.json) as a permanent, signed ledger entry, labeled 'certified as of this measurement'. It records the registry's existing measurement and cannot change it. Only works for a verifier currentl...2 params

Publishes a verifier's current conformance grade from the public registry (conformance.json) as a permanent, signed ledger entry, labeled 'certified as of this measurement'. It records the registry's existing measurement and cannot change it. Only works for a verifier currentl...

Parameters* required

name*string

The verifier's exact name as listed on GET /conformance.json (must currently show certified:true).

notestring

Optional short context for the ledger entry.

audit_agent_readinessAudits a public agent or API URL for verifiability: discovery files (llms.txt, MCP card, robots, sitemap), handshake endpoints, and whether presented signed proofs validate. Returns a 0-100 score, a grade, ranked fixes, and a signed proof of the audit. Every result re-derives...1 params

Audits a public agent or API URL for verifiability: discovery files (llms.txt, MCP card, robots, sitemap), handshake endpoints, and whether presented signed proofs validate. Returns a 0-100 score, a grade, ranked fixes, and a signed proof of the audit. Every result re-derives...

Parameters* required

url*string

The agent endpoint/site URL to audit (public http(s) only)

Readme

invinoveritas — MCP server

An independent review gate for AI agents, as a hosted MCP server. Before your agent takes an irreversible action — shipping code, running a shell command, signing a transaction — it calls review for a neutral second opinion from a party that isn't the agent, and gets back a recomputable, Bitcoin-anchored proof anyone can re-verify without trusting the agent or us.

The one thing an agent can't self-serve is a trustworthy verdict on its own output. This is that verdict — model-agnostic, advisory (it never blocks), and checkable from the bytes.

Hosted, no install. Remote Streamable-HTTP MCP server: https://api.babyblueviper.com/mcp/verify
Sign-in: standard MCP OAuth in clients that support it (a free account can be created on the consent screen), or a free API key as a Bearer header: curl -X POST https://api.babyblueviper.com/register -d '{"label":"mcp"}'
verify_proof, ledger, and payment_receipt are always free / no auth.

Tools

View the full README on GitHub

Details

Repository: github.com/babyblueviper1/invinoveritas-mcp
Category: AI & LLM Tools
Transport: HTTP
Registry: MCP registry, active
Resources: 101
Tools verified: Nov 6, 2026

Related AI & LLM Tools MCP servers

View all

Codegworkspace Mcpclauxel/codeg-agent-workspace-mcpA paid remote MCP for CodeG, built to return verdicts, receipts, usage logs, and audit-ready JSON.0stars

Geminiomnirights Mcpclauxel/gemini-omni-rights-receipt-mcpRemote MCP for Gemini Omni commercial rights receipt MCP, structured receipts, audit logs, and revie0stars

Lixversion Mcpclauxel/lix-agent-version-control-mcpA paid remote MCP for Lix, built to return verdicts, receipts, usage logs, and audit-ready JSON.0stars

Rtkcontext Mcpclauxel/rtk-context-compressor-mcpA paid remote MCP for OpenAI Codex context compressor, built to return verdicts, receipts, usage log0stars

Zerolangcompiler Mcpclauxel/zerolang-agent-compiler-mcp-mcpA paid remote MCP for ZeroLang, built to return verdicts, receipts, usage logs, and audit-ready JSON0stars

Mcp Shieldcybercraftsolutionsllc/trust-gated-agent-exampleTrust verification for MCP servers. Check scores, scan for security issues, search 4,200+ servers.0stars