ECZ-ID Trust MCP server
Read-only ECZ-ID Business Passport state lookup via the public ECZ-ID Resolver. Reports state only.
Little public usage data yet
Reviews
Write oneNobody has reviewed ECZ-ID Trust MCP yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
ECZ-ID Trust MCP tools (7, 1 write)
write = sends, deletes, buys or postscreate_request_to_resolvewrite actionFreeAUTHENTICATED: create a neutral, shareable request for independently re-checkable ECZ-ID evidence. Requires a Microsoft Entra bearer token with the RequestToResolve.Create scope (or app role). It never verifies a target, never sends messages, and absence of evidence is never rendered as unsafe.
explain_statusFreeDeterministically render the exact ECZ-ID status using the claims-safe renderer (VERIFIED is an ECZ-ID state, not a Microsoft certification). Absence of evidence renders the approved neutral wording — never "unsafe". No LLM.
find_productFreeGiven narrow context flags, return ONE best next ECZ-ID product action (free/community routes win where correct; neutral context routes to free public verification).
get_current_stateFreeReturn the narrow current Resolver-derived state for an ECZ-ID (state, checked_at, Resolver link). No risk/safety/compliance inference.
get_install_instructionsFreeReturn deterministic official install/discovery routes for an ECZ-ID product or surface (canonical URLs only; planned Microsoft surfaces carry no URLs).
get_resolver_linkFreeReturn the deterministic public Resolver proof/re-check URL for an ECZ-ID. No network call.
resolve_identityFreeResolve an ECZ-ID through the public ECZ-ID Resolver and return the exact canonical state with checked_at, Resolver proof link, re-check action and the local-policy caveat. Never asserts safety, approval or compliance.
Public scan report
scanner v0.1.9 · 2026-09-21 · same rubric, same numbers if you re-run it
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 1670ms20/20
- Tool poisoning7 tool descriptions checked15/15
- Auth qualityopen endpoint exposes 1 write-action tools with no auth3/15
- Maintenanceno repository listed3/15
- Maintainer identityverified namespace with website, no repo4/10
Findings (2)
- highWrite-action tools reachable without authentication
auth.open-write - lowNo source repository listed
maint.no-repo
Install directly
claude mcp add --transport http trust-mcp https://trust-mcp.ecocitizenz.com/mcp
ECZ-ID Trust MCP: common questions
- Is ECZ-ID Trust MCP server safe?
- With care: it is graded C, so read the findings first (60/100). Read the ECZ-ID Trust MCP safety report
- How do I install ECZ-ID Trust MCP?
- It runs remotely at trust-mcp.ecocitizenz.com. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does ECZ-ID Trust MCP need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is ECZ-ID Trust MCP maintained?
- The latest release is v0.2.0.
- Is ECZ-ID Trust MCP up?
- 100% of our last 20 checks got an answer. We check remote servers about four times a day.