com.dominionobservatory/observatory

MCPcommunityattivo
v1.0.0com.dominionobservatoryUnknownAggiornato 2 mesi fa

Trust checks for MCP servers: trust scores, tool-drift detection, signed diligence receipts. Free.

Stato dell’endpointattivo
verificato 3 h fa · 157 ms
100 % degli ultimi 4 controlli hanno raggiunto questo endpoint
Funziona in
ClaudeCursorCopilotChatGPTGemini

Dedotto dai trasporti dichiarati da questo annuncio (streamable-http). Un client che non compare qui non è escluso — semplicemente Forge non è in grado di confermarlo.

Indicizzato automaticamente da fonti pubbliche. Non ancora verificato dal suo sviluppatore su Forge.Rivendica questo annuncio →
2 mesi faUltimo aggiornamento
Pacchetto
Autorecom.dominionobservatory
LicenzaUnknown
Versione1.0.0
Fontemcp-registry
Stato di fiducia
B
60/100Buono
Presente nell’indice di Forge+10/10
Identità del publisher verificata+0/30
Publisher: per questo annuncio non risulta alcun repository, quindi `forge publish` non può verificare la proprietà automaticamente. Usa «Rivendica questo annuncio» qui sopra — Forge li esamina a mano.
Verifica del dominio+0/10
Al momento non disponibile per questo tipo di annuncio — oggi il controllo del dominio viene eseguito solo per i pacchetti su npm, quindi questa riga non può ancora essere ottenuta qui, indipendentemente da cosa sia ospitato sul dominio.
Analisi prompt injection · pulita+30/30
Analisi offuscamento / esfiltrazione · pulita+20/20
StatoIndicizzato dalla community
PublisherNon verificato
FirmaNon firmato
Dominio
Provenienza
DipendenzeNon verificate
Superficie di strumenti15 strumenti · nessuno privilegiato
Analisi di sicurezza✓ Pulitovlive · oggiQuanto è efficace questa analisi?
PROMPTtool:check_trust#server_urlLinks to undeclared domain: example.workers.dev
ValutazioniNessuna
Indicizzato14 lug 2026

La verifica conferma l’identità del publisher (la proprietà del repo), non la sicurezza del codice. L’analisi di sicurezza copre i CVE noti e gli script di installazione sospetti.

Strumenti

15 strumenti · nessuno privilegiato
Osservato in tempo reale dall’endpoint del fornitore3h ago

Letto da un vero handshake MCP initialize → tools/list verso l’endpoint dichiarato. Nessuno strumento è stato invocato — tools/list è la chiamata di introspezione in sola lettura che il protocollo prevede a questo scopo. Riflette ciò che il server annunciava in quel momento; un endpoint ospitato non è vincolato ad alcuna versione e può cambiare senza preavviso.

  • https://dominionobservatory.com/mcp15 strumenti · 157 ms
check_trustGet the trust score and reliability metrics for any MCP server. Use this BEFORE calling an unknown MCP server to assess if it's reliable. Returns trust_score (0-100), latency stats, uptime, success rate, and how many agents have used it. Scores above 70 indicate reliable servers. Scores below 30 in…

Get the trust score and reliability metrics for any MCP server. Use this BEFORE calling an unknown MCP server to assess if it's reliable. Returns trust_score (0-100), latency stats, uptime, success rate, and how many agents have used it. Scores above 70 indicate reliable servers. Scores below 30 in…

NOTANel parametro server_url: Links to undeclared domain: example.workers.dev
ParametroTipoDescrizione
server_url*stringThe URL of the MCP server to check (e.g., https://example.workers.dev/mcp)
clawhub_skill_trustCheck the supply-chain trust of a ClawHub (OpenClaw) skill BEFORE installing or invoking it. After the Feb-2026 ClawHavoc supply-chain attack, third-party skills can carry malware. Returns a PASS/UNCERTAIN/FAIL badge and 0-100 score aggregating ClawHub's published security scan (VirusTotal + model)…

Check the supply-chain trust of a ClawHub (OpenClaw) skill BEFORE installing or invoking it. After the Feb-2026 ClawHavoc supply-chain attack, third-party skills can carry malware. Returns a PASS/UNCERTAIN/FAIL badge and 0-100 score aggregating ClawHub's published security scan (VirusTotal + model)…

ParametroTipoDescrizione
skill*stringThe ClawHub skill slug, e.g. 'calendar'
verify_before_callRun a signed pre-invocation verification immediately before an agent sends money, credentials, private data, or write access to an MCP server. The first 3 verifications per agent are free. After that, authenticate the MCP HTTP request with Authorization: Bearer do_<api_key> for Stripe metering ($0.…

Run a signed pre-invocation verification immediately before an agent sends money, credentials, private data, or write access to an MCP server. The first 3 verifications per agent are free. After that, authenticate the MCP HTTP request with Authorization: Bearer do_<api_key> for Stripe metering ($0.…

ParametroTipoDescrizione
server_url*stringThe MCP server URL or tracked server name to verify
agent_idstringStable, non-secret agent identifier used to count the 3 introductory calls. If omitted, Dominion derives a privacy-preserving hash from network metadata.
payment_txstringOptional Base transaction hash proving the x402 USDC payment after a payment_required response
reasonstringOptional reason for verification, e.g. money, credentials, private_data, write_access
paid_trust_verdictGet the PREMIUM behavioral trust verdict for an MCP server, with a signed, citable, tamper-evident attestation receipt. This is a paid x402 service: call WITHOUT payment_tx to receive payment instructions (0.001 USDC on Base), pay, then call again WITH the payment_tx (transaction hash, single-use)…

Get the PREMIUM behavioral trust verdict for an MCP server, with a signed, citable, tamper-evident attestation receipt. This is a paid x402 service: call WITHOUT payment_tx to receive payment instructions (0.001 USDC on Base), pay, then call again WITH the payment_tx (transaction hash, single-use)…

ParametroTipoDescrizione
server_slug*stringThe MCP server slug/name to get a paid verdict for
payment_txstringBase transaction hash proving 0.001 USDC was sent to the pay_to wallet (omit on the first call to get payment instructions)
verify_attestationCryptographically verify a Dominion signed attestation (JWS) — e.g. a trust-verdict receipt, gateway attestation, or MCP Verified badge. Stateless: checks the Ed25519 signature against Dominion's published public key (no trust in this server required). Use this to confirm a receipt another party ga…

Cryptographically verify a Dominion signed attestation (JWS) — e.g. a trust-verdict receipt, gateway attestation, or MCP Verified badge. Stateless: checks the Ed25519 signature against Dominion's published public key (no trust in this server required). Use this to confirm a receipt another party ga…

ParametroTipoDescrizione
jws*stringThe Dominion attestation as a JWS compact string (header.payload.signature)
preflight_checkRun a PRE-FLIGHT due-diligence check on an MCP server BEFORE your agent invokes it. Returns a verdict (PASS/UNCERTAIN/FAIL/UNRATED) plus a SIGNED, timestamped diligence receipt you keep as proof you performed a trust check — the standard of care after the ClawHavoc/Miasma supply-chain attacks. Call…

Run a PRE-FLIGHT due-diligence check on an MCP server BEFORE your agent invokes it. Returns a verdict (PASS/UNCERTAIN/FAIL/UNRATED) plus a SIGNED, timestamped diligence receipt you keep as proof you performed a trust check — the standard of care after the ClawHavoc/Miasma supply-chain attacks. Call…

ParametroTipoDescrizione
target*stringThe MCP server URL/name — or a ClawHub skill slug (with registry:'clawhub') — to vet before invoking
registrystringOptional: set to 'clawhub' to vet an OpenClaw/ClawHub skill instead of an MCP server
report_interactionReport the outcome of calling an MCP server. Call this AFTER you use any MCP server to contribute to the trust network. Your report helps other agents make better decisions. This is free and takes <1ms.

Report the outcome of calling an MCP server. Call this AFTER you use any MCP server to contribute to the trust network. Your report helps other agents make better decisions. This is free and takes <1ms.

ParametroTipoDescrizione
server_url*stringThe URL of the MCP server you called
success*booleanDid the call succeed? true = worked as expected, false = error or unexpected result
latency_msnumberHow long the call took in milliseconds
tool_namestringWhich tool you called on the server
error_typestringIf failed: timeout, auth_error, invalid_response, server_error, rate_limited, schema_mismatch
error_messagestringIf failed: brief error description
http_statusintegerHTTP status code returned (200, 429, 500, etc.)
get_leaderboardGet the top-rated MCP servers, optionally filtered by category. Use this to discover the most reliable MCP servers in the ecosystem. Categories include: weather, finance, code, data, search, compliance, transport, productivity, communication.

Get the top-rated MCP servers, optionally filtered by category. Use this to discover the most reliable MCP servers in the ecosystem. Categories include: weather, finance, code, data, search, compliance, transport, productivity, communication.

ParametroTipoDescrizione
categorystringFilter by category (optional). Leave empty for overall leaderboard.
limitintegerNumber of results (default 10, max 50)
get_baselinesGet behavioral baselines for a tool category. Shows what 'normal' looks like — average latency, success rates, typical call patterns. Use this to evaluate whether a specific server's performance is within normal range for its category.

Get behavioral baselines for a tool category. Shows what 'normal' looks like — average latency, success rates, typical call patterns. Use this to evaluate whether a specific server's performance is within normal range for its category.

ParametroTipoDescrizione
category*stringThe tool category to get baselines for (e.g., weather, finance, code, data)
check_anomalyCheck if observed behavior from an MCP server is anomalous compared to baselines. Use this when a server seems slow, unreliable, or returns unexpected results. Returns whether the behavior deviates significantly from normal patterns.

Check if observed behavior from an MCP server is anomalous compared to baselines. Use this when a server seems slow, unreliable, or returns unexpected results. Returns whether the behavior deviates significantly from normal patterns.

ParametroTipoDescrizione
server_url*stringThe MCP server URL to check
observed_latency_msnumberThe latency you observed
observed_success_ratenumberSuccess rate you've observed (0.0 to 1.0)
register_serverRegister a new MCP server in the observatory. Server owners can register their servers to start building a trust score. Registration is free.

Register a new MCP server in the observatory. Server owners can register their servers to start building a trust score. Registration is free.

ParametroTipoDescrizione
server_url*stringThe MCP server URL
name*stringHuman-readable name of the server
descriptionstringWhat the server does
categorystringPrimary category: weather, finance, code, data, search, compliance, transport, productivity, communication, other
github_urlstringGitHub repository URL (optional, improves static score)
get_server_historyGet daily trust score and performance history for a server over the last 30 days. Use this to see trends — is the server improving or degrading?

Get daily trust score and performance history for a server over the last 30 days. Use this to see trends — is the server improving or degrading?

ParametroTipoDescrizione
server_url*stringThe MCP server URL
observatory_statsGet overall statistics about the Dominion Observatory — total servers tracked, total interactions recorded, coverage by category, and data freshness. Use this to understand the scope of the trust network.

Get overall statistics about the Dominion Observatory — total servers tracked, total interactions recorded, coverage by category, and data freshness. Use this to understand the scope of the trust network.

Per questo strumento non è stato pubblicato alcuno schema di input.

get_compliance_reportExport a compliance-ready audit trail of all recorded interactions. Formatted for EU AI Act Article 12 and Singapore IMDA Agentic AI Governance Framework. Filter by server, agent, or date range. Essential for enterprises that need to prove their AI agents are behaving correctly.

Export a compliance-ready audit trail of all recorded interactions. Formatted for EU AI Act Article 12 and Singapore IMDA Agentic AI Governance Framework. Filter by server, agent, or date range. Essential for enterprises that need to prove their AI agents are behaving correctly.

ParametroTipoDescrizione
server_urlstringFilter by server URL (optional)
agent_idstringFilter by agent ID (optional)
start_datestringStart date in YYYY-MM-DD format (optional)
end_datestringEnd date in YYYY-MM-DD format (optional)
get_mica_attestationGenerate an EU AI Act Article 12-style behavioral audit attestation for an MCP server — timestamped, auditable interaction records for record-keeping/traceability. (EU AI Act high-risk obligations were deferred by the Digital Omnibus to 2 Dec 2027 for Annex III and 2 Aug 2028 for Annex I products;…

Generate an EU AI Act Article 12-style behavioral audit attestation for an MCP server — timestamped, auditable interaction records for record-keeping/traceability. (EU AI Act high-risk obligations were deferred by the Digital Omnibus to 2 Dec 2027 for Annex III and 2 Aug 2028 for Annex I products;…

ParametroTipoDescrizione
server_url*stringThe MCP server URL to generate attestation for

15 strumenti su 15 hanno pubblicato una descrizione.

I nomi e le descrizioni degli strumenti sono scritti dal publisher e mostrati alla lettera come testo inerte. Sono le stringhe che un client MCP passa a un modello, quindi Forge vi cerca schemi di prompt injection — ogni rilievo compare insieme all’analisi di sicurezza qui sopra. «Privilegiato» è una corrispondenza di parola chiave sul nome dello strumento, non una verifica di ciò che fa: un nome innocuo può comunque fare qualsiasi cosa.

Descrizione

Trust checks for MCP servers: trust scores, tool-drift detection, signed diligence receipts. Free.

Parole chiave
mcp
Alternative
Confronto delle superfici di strumenti…

Nessuna copertura delle dipendenze

Questa voce non pubblica alcun pacchetto npm, quindi Forge non ha un albero delle dipendenze per essa. È una lacuna di copertura, non l'affermazione che non abbia dipendenze.