us.srv.vehcdj664efetfrsolne5umanq/quoteproof-mcp

What it mainly works on, as our AI model read its tool descriptions: accounts and data in outside web services.

1 of 15 tools are described as changing something (creating, editing, deleting, sending or running).

• attestpage_verify_quotereads or searches

  “Checks a quote on its live page: exact, fuzzy or none, offsets and a signed receipt.”

  Publisher declares: read-only no · destructive no · idempotent no · open-world yes

  5 inputs, 2 required

  • urlstringrequired“http(s) URL of the page to check (max 2,048 characters).”
  • quotestringrequired“Text to look for on the page, or with match "passages" the claim to find support for (max 1,000 characters after normalisation).”
  • matchstring“exact; fuzzy (default), which also accepts small differences; or passages, for a paraphrased claim: the 3 passages that share most of its words, scored, as evi…”
  • case_sensitiveboolean“Default false; must be false with match "passages".”
  • thresholdnumber“Fuzzy similarity needed, default 0.9.”
• attestpage_verify_citationsreads or searches

  “Checks up to 10 quote and URL pairs on live pages: exact, fuzzy or none, one receipt.”

  Publisher declares: read-only no · destructive no · idempotent no · open-world yes

  4 inputs, 1 required

  • citationsarrayrequired“1 to 10 citations.”
  • matchstring“For every citation: exact; fuzzy (default), which also accepts small differences; or passages, for a paraphrased claim: the 3 passages that share most of its w…”
  • case_sensitiveboolean“Default false; must be false with match "passages".”
  • thresholdnumber“Fuzzy similarity needed, default 0.9.”
• attestpage_fetchreads or searches

  “Returns a web page as clean text, with title, hashes and a signed receipt.”

  Publisher declares: read-only no · destructive no · idempotent no · open-world yes

  3 inputs

  • urlstring“http(s) URL to fetch (max 2,048 characters).”
  • urlsarray“Instead of url: 1 to 10 distinct http(s) URLs in one call, priced per URL (the route price × the count).”
  • return_textboolean“Return up to 20,000 characters of clean text (per page).”
• attestpage_recheckreads or searches

  “Reports if a page changed since a receipt: unchanged, changed, gone, unreadable.”

  Publisher declares: read-only no · destructive no · idempotent no · open-world yes

  7 inputs

  • receiptstring“Compact JWS receipt from an earlier /v1/fetch, /v1/verify/quote, /v1/verify/quotes or /v1/recheck call of this service (paid or trial; not a sample).”
  • urlstring“Only without receipt: the http(s) URL to re-check (max 2,048 characters).”
  • content_sha256string“Only with url: the page.content_sha256 from our own fetch (64 hex).”
  • return_textboolean“Also return up to 20,000 characters of the new clean text.”
  • historyarray“Optional: up to 10 earlier receipts of this service for the same url, oldest first (fetch, verify/quote or recheck; paid or trial).”
  • quotestring“Only with a verify/quote receipt in exact or fuzzy mode: the quote exactly as it was sent to verify/quote.”
  • quotesarray“Only with a verify/quotes receipt in exact or fuzzy mode: all of its quotes, exactly as sent to verify/quotes, in the same order.”
• attestpage_check_linksreads or searches

  “Checks up to 10 URLs: ok, broken, moved or unknown for each, with final URL and title.”

  Publisher declares: read-only no · destructive no · idempotent no · open-world yes

  1 input, 1 required

  • urlsarrayrequired“1 to 10 items, each an http(s) URL string or { "url", "expected_text" }.”
• attestpage_check_packagesreads or searches

  “Checks up to 10 npm, PyPI or crates names: listed, version, licence, OSV.dev advisories.”

  Publisher declares: read-only no · destructive no · idempotent no · open-world yes

  1 input, 1 required

  • packagesarrayrequired“1 to 10 packages to look up.”
• attestpage_attestcreates or changes datadescribed as changing data

  “Signs a timestamped receipt for a file's sha256, proving it existed unchanged then.”

  Publisher declares: read-only no · destructive no · idempotent no · open-world no

  3 inputs, 1 required

  • sha256stringrequired“SHA-256 (hex) of the thing being attested.”
  • notestring“Optional note; only its SHA-256 goes in the receipt.”
  • idempotency_keystring“Optional, x402 payments only (keys are scoped to the paying address; trial and L402 calls get 400).”
• attestpage_scan_replyreads or searches

  “Scans a bot's draft reply before sending: pass, caution or block, with findings on links, lookalike hosts, injection and prices.”

  Publisher declares: read-only no · destructive no · idempotent no · open-world no

  3 inputs, 1 required

  • textstringrequired“The draft reply your bot is about to send (1 to 10,000 characters).”
  • source_textstring“Optional: the text the bot was given to answer from (max 40,000 characters).”
  • allowed_urlsarray“Optional: up to 50 URLs or bare hosts the bot may link to.”
• attestpage_verify_documentreads or searches

  “Checks one part of a document's quotes on live pages.”

  Publisher declares: read-only no · destructive no · idempotent no · open-world yes

  8 inputs, 1 required

  • documentstringrequired“The answer or report as written, 1 character to 60000 bytes (UTF-8), and the whole request body is capped at 256 KB.”
  • formatstring“markdown (default), text (only bare URLs and [n] references are links) or html (<a href> links, <blockquote> and <q> quotes; other tags are dropped).”
  • matchstring“For every pair: exact; fuzzy (default), which also accepts small differences; or passages, for a paraphrased claim: the 3 passages that share most of its words…”
  • case_sensitiveboolean“Default false; must be false with match "passages".”
  • thresholdnumber“Fuzzy similarity needed, default 0.9.”
  • min_wordsinteger“A quoted span with fewer words is skipped as too_short (default 4).”
  • part_sizeinteger“Pairs per part, default 10.”
  • partinteger“0-based part to check, default 0; call POST /v1/verify/document/preview first to see how many parts there are.”
• attestpage_verify_quotesreads or searches

  “Checks up to 20 quotes on one page: exact, fuzzy or none, offsets, signed receipt.”

  Publisher declares: read-only no · destructive no · idempotent no · open-world yes

  5 inputs, 2 required

  • urlstringrequired“http(s) URL of the page to check (max 2,048 characters).”
  • quotesarrayrequired“1 to 20 quotes to look for on that page, or with match "passages" claims to find support for (each max 1,000 characters after normalisation).”
  • matchstring“For every quote: exact; fuzzy (default), which also accepts small differences; or passages, for a paraphrased claim: the 3 passages that share most of its word…”
  • case_sensitiveboolean“Default false; must be false with match "passages".”
  • thresholdnumber“Fuzzy similarity needed, default 0.9.”
• attestpage_verify_text_quotereads or searches

  “Checks a quote word for word against text you hold: exact, fuzzy or none, offsets.”

  Publisher declares: read-only no · destructive no · idempotent no · open-world no

  7 inputs, 2 required

  • textstringrequired“The source text you already hold, as sent (max 50,000 characters, and the whole request body is capped at 256 KB of UTF-8, so 50,000 characters of 4-byte text …”
  • quotestringrequired“Text to look for in the source, or with match "passages" the claim to find support for (max 1,000 characters after normalisation).”
  • startinteger“Optional, with end: the declared start offset of the quote in text, raw code points, 0-based.”
  • endinteger“Optional, with start: the declared end offset, raw code points, exclusive.”
  • matchstring“exact; fuzzy (default), which also accepts small differences; or passages, for a paraphrased claim: the 3 passages of the text that share most of its words, sc…”
  • case_sensitiveboolean“Default false; must be false with match "passages".”
  • thresholdnumber“Fuzzy similarity needed, default 0.9.”
• attestpage_access_checkreads or searches

  “Judges one page URL against its site's robots.txt for GPTBot, ClaudeBot, PerplexityBot, Google-Extended and CCBot: allowed or not, with the deciding line, the per-crawler reason and Crawl-delay; plus…”

  Publisher declares: read-only no · destructive no · idempotent no · open-world yes

  1 input, 1 required

  • urlstringrequired“The http(s) page URL to judge (max 2,048 characters).”

Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. Read 2026-10-23.

The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.