Delta Witness MCP server
io.github.15998194110/delta-witness·v0.7.1Paid Capture and Guard tools for public-source observations before autonomous actions.
0 stars98 downloads/wk
Reviews
Write oneNobody has reviewed Delta Witness yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Delta Witness tools (4)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
delta_captureCapture costs 1 USDC. Requires the buyer's explicit DELTA_MAX_USD_PER_CALL approval of at least 1.00; pays exactly 1 USDC via x402. Preserves a public webpage and returns proof metadata and hashes; raw artifacts remain private.
delta_preflightPublic Preflight costs 5 USDC. Requires the buyer's explicit DELTA_MAX_USD_PER_CALL approval of at least 5.00; pays exactly 5 USDC via x402. Compares public-source hashes/text before a consequential action. Safe means expectations matched, not that the source is true. This is not the 10 USDC Guarded-Action Pilot.
delta_quoteGet the current owner-authorized price before any payment is signed.
delta_verify_proofRead public proof metadata, hashes, and manifest integrity status without exposing private raw artifacts.
Public scan report
scanner v0.1.10 · 2026-10-03 · same rubric, same numbers if you re-run it
- Code scan5 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 1 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Delta Witness compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 92/100
- higher than 95% of 48,255 servers
- Tools
- 4
- the typical server has 7
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 98
- more than 62% of 12,191 servers with a package
What its tools let an agent do: 4 read
Install Delta Witness in Claude Code, Cursor or VS Code
Runs npx -y delta-witness-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add delta-witness -- npx -y delta-witness-mcp
What the publisher says
From the Delta Witness repository's README, as published. We do not edit it. Read it on GitHub
DELTA Witness v0.7
CURRENT OWNER PRICING (2026-09-10): Capture / authenticated Partner Capture / authenticated Partner Preflight / each NEW Watch check = 1 USDC; Public Preflight = 5 USDC; Guarded-Action Pilot = 10 USDC. Read AGENTS.md and docs/pricing-policy-2026-09-10.md before every run. Conflicting old prices, automatic repricing and paid-canary instructions below are superseded. Historical receipts and prepaid obligations are not rewritten.
DELTA Witness is a Trust Layer for Autonomous Actions. It observes public sources, records timestamped hashes, and lets software make deterministic preflight decisions without claiming that a source is truthful.
Production products and current pricing
- Capture: POST /v1/capture preserves what a public page says now — $1.00 USDC.
- Public Preflight: POST /v1/preflight compares a fresh observation with prior proof hashes or explicit text rules — $5.00 USDC.
- Guarded-Action Pilot: POST /v1/guarded-action-pilot provides the higher-value evidence pilot — $10.00 USDC, only promoted for paid use after production verification on Base with the Treasury below.
- Watch: authenticated resellers can prepay a finite number of checks and receive HMAC-signed webhooks — $1.00 USDC per new check.
- Partner gateway: authenticated Partner Capture and Partner Preflight are $1.00 USDC per new billable request under the current owner pricing authority.
Direct Capture, Public Preflight, and Guarded-Action Pilot use x402 v2 with Base mainnet USDC. Settlement completes before Browser Run begins. The treasury is receive-only from the application:
0x1990e21bc219696ff7fbc26527dbaed335ac6367
Never place the treasury private key in Worker, CI, source, or chat.
The current owner-authorized public pricing is $1 Capture / $5 Public Preflight / $10 Guarded-Action Pilot; authenticated Partner Capture, Partner Preflight, and each new Watch check are $1. Historical settled/idempotent deliveries and already-prepaid obligations retain their original paid identity; they are not double-charged or retroactively repriced.
Buyer quickstarts
- Browser automation → DELTA paid evidence checkpoint — platform-neutral 1 USDC Capture pattern for browser scrapers, monitors, form flows, and multi-step agents; buy a checkpoint only when a public source state becomes consequential.
- Amazon Bedrock AgentCore payments → DELTA x402 — use the existing 1 USDC Capture as the narrowest paid checkpoint for procurement terms, price/availability, monitoring evidence, or audit records; raise the buyer-side payment limit only when explicitly choosing a higher-priced DELTA product.
- BrowserAct monitoring → DELTA evidence — keep BrowserAct as the collection layer, then buy 1 USDC Capture only when a public price, availability, supplier term, article, or other source state becomes materially consequential.
Safety and economics
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Delta Witness: common questions
- Is Delta Witness MCP server safe?
- Yes, by our scan: it is graded A (92/100). Read the Delta Witness safety report
- How do I install Delta Witness?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Delta Witness need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Delta Witness maintained?
- The last commit was 33 days ago (2026-10-02). The latest release is v0.7.1.
- How does Delta Witness compare with other MCP servers?
- safety score 92/100 (higher than 95% of 48,255 servers); tools 4 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.