com.dominionobservatory/observatory

MCPcommunautéen ligne
v1.0.0com.dominionobservatoryUnknownMis à jour il y a 2 mois

Trust checks for MCP servers: trust scores, tool-drift detection, signed diligence receipts. Free.

État de l’endpointen ligne
vérifié il y a 3 h · 157 ms
100 % des dernières 4 vérifications ont atteint cet endpoint
Fonctionne dans
ClaudeCursorCopilotChatGPTGemini

Déduit des transports déclarés par cette annonce (streamable-http). Un client absent de cette liste n’est pas écarté pour autant — c’est simplement quelque chose que Forge ne peut pas confirmer.

Indexé automatiquement depuis des sources publiques. Pas encore vérifié par son développeur sur Forge.Revendiquer cette annonce →
il y a 2 moisDernière mise à jour
Paquet
Auteurcom.dominionobservatory
LicenceUnknown
Version1.0.0
Sourcemcp-registry
Statut de confiance
B
60/100Bon
Listé dans l’index Forge+10/10
Identité de l’éditeur vérifiée+0/30
Éditeur : aucune référence de dépôt n’est enregistrée pour cette annonce, `forge publish` ne peut donc pas vérifier la propriété automatiquement. Utilisez « Revendiquer cette annonce » ci-dessus — Forge les examine à la main.
Vérification de domaine+0/10
Actuellement indisponible pour ce type d’annonce — la vérification de domaine ne s’exécute aujourd’hui que pour les paquets adossés à npm, cette ligne ne peut donc pas encore être obtenue ici, quel que soit le contenu hébergé sur le domaine.
Analyse d’injection de prompt · propre+30/30
Analyse d’obfuscation / exfiltration · propre+20/20
StatutIndexé par la communauté
ÉditeurNon vérifié
SignatureNon signé
Domaine
Provenance
DépendancesNon audité
Surface d’outils15 outils · aucun privilégié
Analyse de sécurité✓ Proprevlive · aujourd’huiQuelle est l’efficacité de cette analyse ?
PROMPTtool:check_trust#server_urlLinks to undeclared domain: example.workers.dev
ÉvaluationsAucune
Indexé14 juil. 2026

La vérification confirme l’identité de l’éditeur (la propriété du dépôt), pas la sûreté du code. L’analyse de sécurité couvre les CVE connues et les scripts d’installation suspects.

Outils

15 outils · aucun privilégié
Observé en direct depuis l’endpoint du fournisseur3h ago

Lu depuis un véritable échange MCP initialize → tools/list contre l’endpoint déclaré. Aucun outil n’a été invoqué — tools/list est l’appel d’introspection en lecture seule que le protocole prévoit pour cela. Cela reflète ce que le serveur annonçait à cet instant ; un endpoint hébergé n’est figé sur aucune version et peut changer sans préavis.

  • https://dominionobservatory.com/mcp15 outils · 157 ms
check_trustGet the trust score and reliability metrics for any MCP server. Use this BEFORE calling an unknown MCP server to assess if it's reliable. Returns trust_score (0-100), latency stats, uptime, success rate, and how many agents have used it. Scores above 70 indicate reliable servers. Scores below 30 in…

Get the trust score and reliability metrics for any MCP server. Use this BEFORE calling an unknown MCP server to assess if it's reliable. Returns trust_score (0-100), latency stats, uptime, success rate, and how many agents have used it. Scores above 70 indicate reliable servers. Scores below 30 in…

NOTEDans le paramètre server_url : Links to undeclared domain: example.workers.dev
ParamètreTypeDescription
server_url*stringThe URL of the MCP server to check (e.g., https://example.workers.dev/mcp)
clawhub_skill_trustCheck the supply-chain trust of a ClawHub (OpenClaw) skill BEFORE installing or invoking it. After the Feb-2026 ClawHavoc supply-chain attack, third-party skills can carry malware. Returns a PASS/UNCERTAIN/FAIL badge and 0-100 score aggregating ClawHub's published security scan (VirusTotal + model)…

Check the supply-chain trust of a ClawHub (OpenClaw) skill BEFORE installing or invoking it. After the Feb-2026 ClawHavoc supply-chain attack, third-party skills can carry malware. Returns a PASS/UNCERTAIN/FAIL badge and 0-100 score aggregating ClawHub's published security scan (VirusTotal + model)…

ParamètreTypeDescription
skill*stringThe ClawHub skill slug, e.g. 'calendar'
verify_before_callRun a signed pre-invocation verification immediately before an agent sends money, credentials, private data, or write access to an MCP server. The first 3 verifications per agent are free. After that, authenticate the MCP HTTP request with Authorization: Bearer do_<api_key> for Stripe metering ($0.…

Run a signed pre-invocation verification immediately before an agent sends money, credentials, private data, or write access to an MCP server. The first 3 verifications per agent are free. After that, authenticate the MCP HTTP request with Authorization: Bearer do_<api_key> for Stripe metering ($0.…

ParamètreTypeDescription
server_url*stringThe MCP server URL or tracked server name to verify
agent_idstringStable, non-secret agent identifier used to count the 3 introductory calls. If omitted, Dominion derives a privacy-preserving hash from network metadata.
payment_txstringOptional Base transaction hash proving the x402 USDC payment after a payment_required response
reasonstringOptional reason for verification, e.g. money, credentials, private_data, write_access
paid_trust_verdictGet the PREMIUM behavioral trust verdict for an MCP server, with a signed, citable, tamper-evident attestation receipt. This is a paid x402 service: call WITHOUT payment_tx to receive payment instructions (0.001 USDC on Base), pay, then call again WITH the payment_tx (transaction hash, single-use)…

Get the PREMIUM behavioral trust verdict for an MCP server, with a signed, citable, tamper-evident attestation receipt. This is a paid x402 service: call WITHOUT payment_tx to receive payment instructions (0.001 USDC on Base), pay, then call again WITH the payment_tx (transaction hash, single-use)…

ParamètreTypeDescription
server_slug*stringThe MCP server slug/name to get a paid verdict for
payment_txstringBase transaction hash proving 0.001 USDC was sent to the pay_to wallet (omit on the first call to get payment instructions)
verify_attestationCryptographically verify a Dominion signed attestation (JWS) — e.g. a trust-verdict receipt, gateway attestation, or MCP Verified badge. Stateless: checks the Ed25519 signature against Dominion's published public key (no trust in this server required). Use this to confirm a receipt another party ga…

Cryptographically verify a Dominion signed attestation (JWS) — e.g. a trust-verdict receipt, gateway attestation, or MCP Verified badge. Stateless: checks the Ed25519 signature against Dominion's published public key (no trust in this server required). Use this to confirm a receipt another party ga…

ParamètreTypeDescription
jws*stringThe Dominion attestation as a JWS compact string (header.payload.signature)
preflight_checkRun a PRE-FLIGHT due-diligence check on an MCP server BEFORE your agent invokes it. Returns a verdict (PASS/UNCERTAIN/FAIL/UNRATED) plus a SIGNED, timestamped diligence receipt you keep as proof you performed a trust check — the standard of care after the ClawHavoc/Miasma supply-chain attacks. Call…

Run a PRE-FLIGHT due-diligence check on an MCP server BEFORE your agent invokes it. Returns a verdict (PASS/UNCERTAIN/FAIL/UNRATED) plus a SIGNED, timestamped diligence receipt you keep as proof you performed a trust check — the standard of care after the ClawHavoc/Miasma supply-chain attacks. Call…

ParamètreTypeDescription
target*stringThe MCP server URL/name — or a ClawHub skill slug (with registry:'clawhub') — to vet before invoking
registrystringOptional: set to 'clawhub' to vet an OpenClaw/ClawHub skill instead of an MCP server
report_interactionReport the outcome of calling an MCP server. Call this AFTER you use any MCP server to contribute to the trust network. Your report helps other agents make better decisions. This is free and takes <1ms.

Report the outcome of calling an MCP server. Call this AFTER you use any MCP server to contribute to the trust network. Your report helps other agents make better decisions. This is free and takes <1ms.

ParamètreTypeDescription
server_url*stringThe URL of the MCP server you called
success*booleanDid the call succeed? true = worked as expected, false = error or unexpected result
latency_msnumberHow long the call took in milliseconds
tool_namestringWhich tool you called on the server
error_typestringIf failed: timeout, auth_error, invalid_response, server_error, rate_limited, schema_mismatch
error_messagestringIf failed: brief error description
http_statusintegerHTTP status code returned (200, 429, 500, etc.)
get_leaderboardGet the top-rated MCP servers, optionally filtered by category. Use this to discover the most reliable MCP servers in the ecosystem. Categories include: weather, finance, code, data, search, compliance, transport, productivity, communication.

Get the top-rated MCP servers, optionally filtered by category. Use this to discover the most reliable MCP servers in the ecosystem. Categories include: weather, finance, code, data, search, compliance, transport, productivity, communication.

ParamètreTypeDescription
categorystringFilter by category (optional). Leave empty for overall leaderboard.
limitintegerNumber of results (default 10, max 50)
get_baselinesGet behavioral baselines for a tool category. Shows what 'normal' looks like — average latency, success rates, typical call patterns. Use this to evaluate whether a specific server's performance is within normal range for its category.

Get behavioral baselines for a tool category. Shows what 'normal' looks like — average latency, success rates, typical call patterns. Use this to evaluate whether a specific server's performance is within normal range for its category.

ParamètreTypeDescription
category*stringThe tool category to get baselines for (e.g., weather, finance, code, data)
check_anomalyCheck if observed behavior from an MCP server is anomalous compared to baselines. Use this when a server seems slow, unreliable, or returns unexpected results. Returns whether the behavior deviates significantly from normal patterns.

Check if observed behavior from an MCP server is anomalous compared to baselines. Use this when a server seems slow, unreliable, or returns unexpected results. Returns whether the behavior deviates significantly from normal patterns.

ParamètreTypeDescription
server_url*stringThe MCP server URL to check
observed_latency_msnumberThe latency you observed
observed_success_ratenumberSuccess rate you've observed (0.0 to 1.0)
register_serverRegister a new MCP server in the observatory. Server owners can register their servers to start building a trust score. Registration is free.

Register a new MCP server in the observatory. Server owners can register their servers to start building a trust score. Registration is free.

ParamètreTypeDescription
server_url*stringThe MCP server URL
name*stringHuman-readable name of the server
descriptionstringWhat the server does
categorystringPrimary category: weather, finance, code, data, search, compliance, transport, productivity, communication, other
github_urlstringGitHub repository URL (optional, improves static score)
get_server_historyGet daily trust score and performance history for a server over the last 30 days. Use this to see trends — is the server improving or degrading?

Get daily trust score and performance history for a server over the last 30 days. Use this to see trends — is the server improving or degrading?

ParamètreTypeDescription
server_url*stringThe MCP server URL
observatory_statsGet overall statistics about the Dominion Observatory — total servers tracked, total interactions recorded, coverage by category, and data freshness. Use this to understand the scope of the trust network.

Get overall statistics about the Dominion Observatory — total servers tracked, total interactions recorded, coverage by category, and data freshness. Use this to understand the scope of the trust network.

Aucun schéma d’entrée n’a été publié pour cet outil.

get_compliance_reportExport a compliance-ready audit trail of all recorded interactions. Formatted for EU AI Act Article 12 and Singapore IMDA Agentic AI Governance Framework. Filter by server, agent, or date range. Essential for enterprises that need to prove their AI agents are behaving correctly.

Export a compliance-ready audit trail of all recorded interactions. Formatted for EU AI Act Article 12 and Singapore IMDA Agentic AI Governance Framework. Filter by server, agent, or date range. Essential for enterprises that need to prove their AI agents are behaving correctly.

ParamètreTypeDescription
server_urlstringFilter by server URL (optional)
agent_idstringFilter by agent ID (optional)
start_datestringStart date in YYYY-MM-DD format (optional)
end_datestringEnd date in YYYY-MM-DD format (optional)
get_mica_attestationGenerate an EU AI Act Article 12-style behavioral audit attestation for an MCP server — timestamped, auditable interaction records for record-keeping/traceability. (EU AI Act high-risk obligations were deferred by the Digital Omnibus to 2 Dec 2027 for Annex III and 2 Aug 2028 for Annex I products;…

Generate an EU AI Act Article 12-style behavioral audit attestation for an MCP server — timestamped, auditable interaction records for record-keeping/traceability. (EU AI Act high-risk obligations were deferred by the Digital Omnibus to 2 Dec 2027 for Annex III and 2 Aug 2028 for Annex I products;…

ParamètreTypeDescription
server_url*stringThe MCP server URL to generate attestation for

15 outils sur 15 ont publié une description.

Les noms et descriptions d’outils sont écrits par l’éditeur et affichés tels quels, comme du texte inerte. Ce sont les chaînes qu’un client MCP transmet à un modèle, alors Forge y recherche des motifs d’injection de prompt — tout constat apparaît avec l’analyse de sécurité ci-dessus. « Privilégié » est une correspondance de mot-clé sur le nom de l’outil, pas un audit de ce qu’il fait : un nom anodin peut tout de même tout faire.

À propos

Trust checks for MCP servers: trust scores, tool-drift detection, signed diligence receipts. Free.

Mots-clés
mcp
Alternatives
Comparaison des surfaces d’outils…

Aucune couverture des dépendances

Cette entrée ne publie aucun paquet npm : Forge n'a donc pas d'arbre de dépendances pour elle. C'est une lacune de couverture — pas une affirmation qu'elle n'a aucune dépendance.