Orphograph MCP server
io.github.Orphograph/orphograph·v0.1.2Anchor a file's SHA-256 fingerprint to Bitcoin. The file never leaves the device.
0 stars
Reviews
Write oneNobody has reviewed Orphograph yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Orphograph tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.10 · 2026-11-03 · same rubric, same numbers if you re-run it
- –Code scanpackage could not be scannedn/a
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 3 days ago15/15
- Maintainer identityregistry namespace matches repository owner6/10
How Orphograph compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 68/100
- higher than 30% of 48,255 servers
Release history: 2 versions in the registry since 2026-08-12, latest 2026-10-14, typically one every 63 days.
Install Orphograph in Claude Code, Cursor or VS Code
The registry entry has no remote endpoint or installable package.
What the publisher says
From the Orphograph repository's README, as published. We do not edit it. Read it on GitHub
orphograph
Anchor any file to the Bitcoin blockchain in about ten seconds. For photographers, journalists, indie creators, and developers who need to prove a file existed before a given moment — especially before an AI model saw it. Files never leave the browser; only the 32-byte SHA-256 fingerprint is submitted. Free tier (3 anchors/24h), $19 Writer Pack (10 anchors), $9/mo Standing Order (unlimited), $19/mo Creator (capture-time app + API + verifier badge).
Quick demo
Four steps a developer can run from a terminal, no signup, no install beyond curl and shasum.
- Compute the SHA-256 of any file on disk:
shasum -a 256 ~/Pictures/my-photo.jpg
# → 3f8c1b... my-photo.jpg- Submit the hash to the public anchor endpoint:
curl -sS -X POST https://orphograph.com/api/anchor \
-H "Content-Type: application/json" \
-d '{"hash_hex":"<paste the 64-char hex digest>"}'The response is a JSON receipt with a receipt_id and a list of the OpenTimestamps calendars that accepted the submission.
- Pull the receipt back later by ID (or visit /r/):
curl -sS https://orphograph.com/api/verify/<receipt_id>(no orphograph code, MIT, ~100 lines of stdlib Python):
- Verify offline against the original file with the standalone verifier
# Single file with an inclusion proof:
python3 dist/orphograph-verify/verify.py file \
--file ~/Pictures/my-photo.jpg \
--proof receipts/<receipt_id>/proof.json
# Whole folder against its manifest:
python3 dist/orphograph-verify/verify.py folder \
--dir ~/Pictures/evidence \
--manifest receipts/<receipt_id>/manifest.jsonThe verifier re-hashes the file (or walks the folder) locally and confirms the result reproduces the manifest's root. Add --ots .ots to also invoke the OpenTimestamps client and check the chain witness references the same root.
MCP server (Model Context Protocol)
Orphograph ships an MCP server: a single stdlib-only Python file (682 lines, MIT) that implements the Model Context Protocol — JSON-RPC 2.0 over stdio, protocol version 2024-11-05, with the initialize, tools/list, and tools/call methods implemented directly, no SDK — so AI agents and MCP hosts (Claude Code, Claude Desktop, or any MCP client) can anchor and verify files as tool calls.
Listed in the official MCP registry as io.github.Orphograph/orphograph.
MCP tools exposed (full JSON Schemas in mcp/manifest.json):
Quickstart (stdio transport):
Also on PyPI: pip install orphograph-mcp (stdlib-only; same server).
curl -sSL https://orphograph.com/mcp/orphograph_mcp.py -o orphograph_mcp.py
claude mcp add orphograph -- python3 orphograph_mcp.pyShortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Orphograph: common questions
- Is Orphograph MCP server safe?
- With care: it is graded C, so read the findings first (68/100). Read the Orphograph safety report
- Does Orphograph need an API key?
- Yes. The registry entry asks for
ORPHO_API_KEY. - Is Orphograph maintained?
- The last commit was 3 days ago (2026-11-01). The latest release is v0.1.2.