Mmcp.market

ECZ-ID Trust MCP server

by ecocitizenz.com·com.ecocitizenz/trust-mcp·v0.2.0

Read-only ECZ-ID Business Passport state lookup via the public ECZ-ID Resolver. Reports state only.

C60/100grade C
What users say
No reviews yet
Be the first
Safety scan
C60/100

full report

Adoption
New

Little public usage data yet

Reviews

Write one

Nobody has reviewed ECZ-ID Trust MCP yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

ECZ-ID Trust MCP tools (7, 1 write)

write = sends, deletes, buys or posts
  • create_request_to_resolvewrite actionFree

    AUTHENTICATED: create a neutral, shareable request for independently re-checkable ECZ-ID evidence. Requires a Microsoft Entra bearer token with the RequestToResolve.Create scope (or app role). It never verifies a target, never sends messages, and absence of evidence is never rendered as unsafe.

  • explain_statusFree

    Deterministically render the exact ECZ-ID status using the claims-safe renderer (VERIFIED is an ECZ-ID state, not a Microsoft certification). Absence of evidence renders the approved neutral wording — never "unsafe". No LLM.

  • find_productFree

    Given narrow context flags, return ONE best next ECZ-ID product action (free/community routes win where correct; neutral context routes to free public verification).

  • get_current_stateFree

    Return the narrow current Resolver-derived state for an ECZ-ID (state, checked_at, Resolver link). No risk/safety/compliance inference.

  • get_install_instructionsFree

    Return deterministic official install/discovery routes for an ECZ-ID product or surface (canonical URLs only; planned Microsoft surfaces carry no URLs).

  • get_resolver_linkFree

    Return the deterministic public Resolver proof/re-check URL for an ECZ-ID. No network call.

  • resolve_identityFree

    Resolve an ECZ-ID through the public ECZ-ID Resolver and return the exact canonical state with checked_at, Resolver proof link, re-check action and the local-policy caveat. Never asserts safety, approval or compliance.

Public scan report

scanner v0.1.9 · 2026-09-21 · same rubric, same numbers if you re-run it

1 high1 low
  • Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 1670ms20/20
  • Tool poisoning7 tool descriptions checked15/15
  • Auth qualityopen endpoint exposes 1 write-action tools with no auth3/15
  • Maintenanceno repository listed3/15
  • Maintainer identityverified namespace with website, no repo4/10

Findings (2)

  • highWrite-action tools reachable without authenticationauth.open-write
  • lowNo source repository listedmaint.no-repo
Overall 60/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Install directly

claude mcp add --transport http trust-mcp https://trust-mcp.ecocitizenz.com/mcp
Add to Cursor

ECZ-ID Trust MCP: common questions

Is ECZ-ID Trust MCP server safe?
With care: it is graded C, so read the findings first (60/100). Read the ECZ-ID Trust MCP safety report
How do I install ECZ-ID Trust MCP?
It runs remotely at trust-mcp.ecocitizenz.com. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.
Does ECZ-ID Trust MCP need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is ECZ-ID Trust MCP maintained?
The latest release is v0.2.0.
Is ECZ-ID Trust MCP up?
100% of our last 20 checks got an answer. We check remote servers about four times a day.

More from ecocitizenz.com