MCP.Market

Witnessd MCP server

by witnessd.vip·vip.witnessd/witnessd·v0.1.1
No reviews yet

Neutral third-party witness: independently fetch, hash, timestamp, archive any URL or API response.

B78/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B78/100

full report

Adoption
Growing

0 stars56 downloads/wk

Reviews

Write one

Nobody has reviewed Witnessd yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Witnessd tools (3)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • get_certificate

    Fetch the (free) signed certificate for a witnessd snapshot id, including the Merkle inclusion proof and Base anchor transaction once batched. Anyone can verify it independently.

  • retrieve_snapshot

    Retrieve the archived response body (base64) plus certificate for a witnessd snapshot id. Paid endpoint; works for any snapshot id, including ones witnessed by other parties — this is how you obtain evidence of what an endpoint said at a past moment.

  • witness_url

    Have witnessd — a neutral third party — independently fetch a URL or API endpoint right now, hash and timestamp the response, archive it, and return a signed certificate. The snapshot is Merkle-anchored on Base within the hour. Use before/after transacting with a counterparty to create dispute evidence of what their endpoint said.

Public scan report

scanner v0.1.10 · 2026-11-03 · same rubric, same numbers if you re-run it

no findings
  • Code scan3 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 8 days ago15/15
  • Maintainer identitynamespace and repository owner differ; GitHub account older than a year5/10
Overall 78/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Witnessd compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
78/100
higher than 57% of 48,255 servers
Tools
3
the typical server has 7
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
56
more than 46% of 12,191 servers with a package

What its tools let an agent do: 3 read

Install Witnessd in Claude Code, Cursor or VS Code

Runs npx -y witnessd-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add witnessd -- npx -y witnessd-mcp
Add to Cursor

What the publisher says

From the Witnessd repository's README, as published. We do not edit it. Read it on GitHub

witnessd-mcp

MCP server for witnessd — a neutral third-party witness for the machine-readable web.

Give your agent the ability to create tamper-evident evidence: witnessd independently fetches any public URL or API endpoint, hashes and timestamps the response, archives it, and issues a signed certificate. Snapshot hashes are Merkle-batched hourly and anchored on Base, so certificates verify forever — by anyone, without trusting the operator.

Use it before transacting with a counterparty ("witness their published price/terms"), before acting on third-party data ("witness what the API returned"), or whenever a dispute might later hinge on what a URL said at a moment in time.

Tools

Install

npx -y witnessd-mcp

Claude Desktop / Cursor config:

{
  "mcpServers": {
    "witnessd": {
      "command": "npx",
      "args": ["-y", "witnessd-mcp"],
      "env": {
        "EVM_PRIVATE_KEY": "0x…"
      }
    }
  }
}

Payment — two options

Set one of these environment variables:

  • EVMPRIVATEKEY — a wallet key holding USDC on Base. The server auto-pays each call via x402 (the buyer only signs; no ETH needed for gas). Use a small dedicated wallet, never your main one.
  • WITNESSDAPIKEY — a prepaid credit key (buy a $1 pack via POST https://witnessd.vip/api/credits, x402-payable).

Optional: WITNESSD_URL to point at a different witnessd instance (default https://witnessd.vip).

Verify without trusting us

Certificates are self-verifying: leaf_hash = sha256(canonical-json(manifest)), Ed25519-signed, Merkle-proven into an hourly batch root anchored on Base (calldata 0x + wtns1 + root). Standalone checker: witnessd.vip/verify.js.

Privacy & scope

Certificates (hashes, timestamps, proofs) are public; archived content is delivered only to paying requesters and never republished. witnessd only witnesses what any stranger can see — no logins, no private networks, bodies ≤10 MB. Machine-readable service docs: llms.txt · openapi.json · /.well-known/x402.

MIT license.

Nothing above is checked by us. What we check is on the safety report.

Witnessd: common questions

Is Witnessd MCP server safe?
Mostly: it is graded B (78/100). Read the Witnessd safety report
How do I install Witnessd?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Witnessd need an API key?
Yes. The registry entry asks for EVM_PRIVATE_KEY, WITNESSD_API_KEY.
Is Witnessd maintained?
The last commit was 8 days ago (2026-10-27). The latest release is v0.1.1.
How does Witnessd compare with other MCP servers?
safety score 78/100 (higher than 57% of 48,255 servers); tools 3 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.