com.dominionobservatory/observatory

MCPcommunitylive
v1.0.0com.dominionobservatoryUnknownUpdated 2mo ago

Trust checks for MCP servers: trust scores, tool-drift detection, signed diligence receipts. Free.

Endpoint healthlive
checked 2h ago · 157ms
100% of the last 4 checks reached this endpoint
Works in
ClaudeCursorCopilotChatGPTGemini

Inferred from the transports this listing declares (streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →
2mo agoLast update
Package
Authorcom.dominionobservatory
LicenseUnknown
Version1.0.0
Sourcemcp-registry
Trust Status
B
60/100Good
Listed in Forge index+10/10
Publisher identity verified+0/30
Publisher: this listing has no repository on file, so `forge publish` cannot verify ownership automatically. Use "Claim this listing" above — Forge reviews these by hand.
Domain verification+0/10
Not currently available for this listing type — the domain-verification check only runs for npm-backed packages today, so this row cannot be earned here yet regardless of what's hosted at the domain.
Prompt-injection scan · clean+30/30
Obfuscation / exfil scan · clean+20/20
StatusCommunity-indexed
PublisherUnverified
SignatureUnsigned
Domain
Provenance
DependenciesNot audited
Tool surface15 tools · none privileged
Security scan✓ Cleanvlive · todayHow well does this scan work?
PROMPTtool:check_trust#server_urlLinks to undeclared domain: example.workers.dev
EvalsNone
IndexedJul 14, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

15 tools · none privileged
Observed live from the vendor's endpoint2h ago

Read from a real MCP initialize → tools/list handshake against the declared endpoint. No tool was ever invoked — tools/list is the read-only introspection call the protocol defines for this. It reflects what the server advertised at that moment; a hosted endpoint is not pinned to any version and can change without notice.

  • https://dominionobservatory.com/mcp15 tools · 157ms
check_trustGet the trust score and reliability metrics for any MCP server. Use this BEFORE calling an unknown MCP server to assess if it's reliable. Returns trust_score (0-100), latency stats, uptime, success rate, and how many agents have used it. Scores above 70 indicate reliable servers. Scores below 30 in…

Get the trust score and reliability metrics for any MCP server. Use this BEFORE calling an unknown MCP server to assess if it's reliable. Returns trust_score (0-100), latency stats, uptime, success rate, and how many agents have used it. Scores above 70 indicate reliable servers. Scores below 30 in…

NOTEIn parameter server_url: Links to undeclared domain: example.workers.dev
ParameterTypeDescription
server_url*stringThe URL of the MCP server to check (e.g., https://example.workers.dev/mcp)
clawhub_skill_trustCheck the supply-chain trust of a ClawHub (OpenClaw) skill BEFORE installing or invoking it. After the Feb-2026 ClawHavoc supply-chain attack, third-party skills can carry malware. Returns a PASS/UNCERTAIN/FAIL badge and 0-100 score aggregating ClawHub's published security scan (VirusTotal + model)…

Check the supply-chain trust of a ClawHub (OpenClaw) skill BEFORE installing or invoking it. After the Feb-2026 ClawHavoc supply-chain attack, third-party skills can carry malware. Returns a PASS/UNCERTAIN/FAIL badge and 0-100 score aggregating ClawHub's published security scan (VirusTotal + model)…

ParameterTypeDescription
skill*stringThe ClawHub skill slug, e.g. 'calendar'
verify_before_callRun a signed pre-invocation verification immediately before an agent sends money, credentials, private data, or write access to an MCP server. The first 3 verifications per agent are free. After that, authenticate the MCP HTTP request with Authorization: Bearer do_<api_key> for Stripe metering ($0.…

Run a signed pre-invocation verification immediately before an agent sends money, credentials, private data, or write access to an MCP server. The first 3 verifications per agent are free. After that, authenticate the MCP HTTP request with Authorization: Bearer do_<api_key> for Stripe metering ($0.…

ParameterTypeDescription
server_url*stringThe MCP server URL or tracked server name to verify
agent_idstringStable, non-secret agent identifier used to count the 3 introductory calls. If omitted, Dominion derives a privacy-preserving hash from network metadata.
payment_txstringOptional Base transaction hash proving the x402 USDC payment after a payment_required response
reasonstringOptional reason for verification, e.g. money, credentials, private_data, write_access
paid_trust_verdictGet the PREMIUM behavioral trust verdict for an MCP server, with a signed, citable, tamper-evident attestation receipt. This is a paid x402 service: call WITHOUT payment_tx to receive payment instructions (0.001 USDC on Base), pay, then call again WITH the payment_tx (transaction hash, single-use)…

Get the PREMIUM behavioral trust verdict for an MCP server, with a signed, citable, tamper-evident attestation receipt. This is a paid x402 service: call WITHOUT payment_tx to receive payment instructions (0.001 USDC on Base), pay, then call again WITH the payment_tx (transaction hash, single-use)…

ParameterTypeDescription
server_slug*stringThe MCP server slug/name to get a paid verdict for
payment_txstringBase transaction hash proving 0.001 USDC was sent to the pay_to wallet (omit on the first call to get payment instructions)
verify_attestationCryptographically verify a Dominion signed attestation (JWS) — e.g. a trust-verdict receipt, gateway attestation, or MCP Verified badge. Stateless: checks the Ed25519 signature against Dominion's published public key (no trust in this server required). Use this to confirm a receipt another party ga…

Cryptographically verify a Dominion signed attestation (JWS) — e.g. a trust-verdict receipt, gateway attestation, or MCP Verified badge. Stateless: checks the Ed25519 signature against Dominion's published public key (no trust in this server required). Use this to confirm a receipt another party ga…

ParameterTypeDescription
jws*stringThe Dominion attestation as a JWS compact string (header.payload.signature)
preflight_checkRun a PRE-FLIGHT due-diligence check on an MCP server BEFORE your agent invokes it. Returns a verdict (PASS/UNCERTAIN/FAIL/UNRATED) plus a SIGNED, timestamped diligence receipt you keep as proof you performed a trust check — the standard of care after the ClawHavoc/Miasma supply-chain attacks. Call…

Run a PRE-FLIGHT due-diligence check on an MCP server BEFORE your agent invokes it. Returns a verdict (PASS/UNCERTAIN/FAIL/UNRATED) plus a SIGNED, timestamped diligence receipt you keep as proof you performed a trust check — the standard of care after the ClawHavoc/Miasma supply-chain attacks. Call…

ParameterTypeDescription
target*stringThe MCP server URL/name — or a ClawHub skill slug (with registry:'clawhub') — to vet before invoking
registrystringOptional: set to 'clawhub' to vet an OpenClaw/ClawHub skill instead of an MCP server
report_interactionReport the outcome of calling an MCP server. Call this AFTER you use any MCP server to contribute to the trust network. Your report helps other agents make better decisions. This is free and takes <1ms.

Report the outcome of calling an MCP server. Call this AFTER you use any MCP server to contribute to the trust network. Your report helps other agents make better decisions. This is free and takes <1ms.

ParameterTypeDescription
server_url*stringThe URL of the MCP server you called
success*booleanDid the call succeed? true = worked as expected, false = error or unexpected result
latency_msnumberHow long the call took in milliseconds
tool_namestringWhich tool you called on the server
error_typestringIf failed: timeout, auth_error, invalid_response, server_error, rate_limited, schema_mismatch
error_messagestringIf failed: brief error description
http_statusintegerHTTP status code returned (200, 429, 500, etc.)
get_leaderboardGet the top-rated MCP servers, optionally filtered by category. Use this to discover the most reliable MCP servers in the ecosystem. Categories include: weather, finance, code, data, search, compliance, transport, productivity, communication.

Get the top-rated MCP servers, optionally filtered by category. Use this to discover the most reliable MCP servers in the ecosystem. Categories include: weather, finance, code, data, search, compliance, transport, productivity, communication.

ParameterTypeDescription
categorystringFilter by category (optional). Leave empty for overall leaderboard.
limitintegerNumber of results (default 10, max 50)
get_baselinesGet behavioral baselines for a tool category. Shows what 'normal' looks like — average latency, success rates, typical call patterns. Use this to evaluate whether a specific server's performance is within normal range for its category.

Get behavioral baselines for a tool category. Shows what 'normal' looks like — average latency, success rates, typical call patterns. Use this to evaluate whether a specific server's performance is within normal range for its category.

ParameterTypeDescription
category*stringThe tool category to get baselines for (e.g., weather, finance, code, data)
check_anomalyCheck if observed behavior from an MCP server is anomalous compared to baselines. Use this when a server seems slow, unreliable, or returns unexpected results. Returns whether the behavior deviates significantly from normal patterns.

Check if observed behavior from an MCP server is anomalous compared to baselines. Use this when a server seems slow, unreliable, or returns unexpected results. Returns whether the behavior deviates significantly from normal patterns.

ParameterTypeDescription
server_url*stringThe MCP server URL to check
observed_latency_msnumberThe latency you observed
observed_success_ratenumberSuccess rate you've observed (0.0 to 1.0)
register_serverRegister a new MCP server in the observatory. Server owners can register their servers to start building a trust score. Registration is free.

Register a new MCP server in the observatory. Server owners can register their servers to start building a trust score. Registration is free.

ParameterTypeDescription
server_url*stringThe MCP server URL
name*stringHuman-readable name of the server
descriptionstringWhat the server does
categorystringPrimary category: weather, finance, code, data, search, compliance, transport, productivity, communication, other
github_urlstringGitHub repository URL (optional, improves static score)
get_server_historyGet daily trust score and performance history for a server over the last 30 days. Use this to see trends — is the server improving or degrading?

Get daily trust score and performance history for a server over the last 30 days. Use this to see trends — is the server improving or degrading?

ParameterTypeDescription
server_url*stringThe MCP server URL
observatory_statsGet overall statistics about the Dominion Observatory — total servers tracked, total interactions recorded, coverage by category, and data freshness. Use this to understand the scope of the trust network.

Get overall statistics about the Dominion Observatory — total servers tracked, total interactions recorded, coverage by category, and data freshness. Use this to understand the scope of the trust network.

No input schema was published for this tool.

get_compliance_reportExport a compliance-ready audit trail of all recorded interactions. Formatted for EU AI Act Article 12 and Singapore IMDA Agentic AI Governance Framework. Filter by server, agent, or date range. Essential for enterprises that need to prove their AI agents are behaving correctly.

Export a compliance-ready audit trail of all recorded interactions. Formatted for EU AI Act Article 12 and Singapore IMDA Agentic AI Governance Framework. Filter by server, agent, or date range. Essential for enterprises that need to prove their AI agents are behaving correctly.

ParameterTypeDescription
server_urlstringFilter by server URL (optional)
agent_idstringFilter by agent ID (optional)
start_datestringStart date in YYYY-MM-DD format (optional)
end_datestringEnd date in YYYY-MM-DD format (optional)
get_mica_attestationGenerate an EU AI Act Article 12-style behavioral audit attestation for an MCP server — timestamped, auditable interaction records for record-keeping/traceability. (EU AI Act high-risk obligations were deferred by the Digital Omnibus to 2 Dec 2027 for Annex III and 2 Aug 2028 for Annex I products;…

Generate an EU AI Act Article 12-style behavioral audit attestation for an MCP server — timestamped, auditable interaction records for record-keeping/traceability. (EU AI Act high-risk obligations were deferred by the Digital Omnibus to 2 Dec 2027 for Annex III and 2 Aug 2028 for Annex I products;…

ParameterTypeDescription
server_url*stringThe MCP server URL to generate attestation for

15 of 15 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

Trust checks for MCP servers: trust scores, tool-drift detection, signed diligence receipts. Free.

Keywords
mcp
Alternatives
Comparing tool surfaces…

No dependency coverage

This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.