com.obeliskgate/trust-tools

Est-ce que com.obeliskgate/trust-tools est sûr ?

Au dernier audit MCP Hub, le serveur MCP « com.obeliskgate/trust-tools » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 8 outils

• explain_rating≈ 178 tokens

  Explain what an Obelisk Rating number means: its trust band, how the public scan scores, and what typically moves a score. Deterministic by default; pass narrate:true for an additional one-line model-written narrative (cached, public-scope, never required). Pure function of the number — no data is read.

  Paramètres, retour & exemple (2)

  Paramètres

  • rating · number · requis
    A 0-100 Obelisk Rating, e.g. from scan_trust or get_org_rating.
  • narrate · boolean · optionnel
    S283 — also return `narrative`, a one-sentence model-written reading of the band (deterministic fields are always present).

  Exemple d'appel

  {"name": "explain_rating", "arguments": {"rating": 1}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• gate_status≈ 57 tokens

  Read the Gate's public liveness facts: issuer, served code revision, OIDC availability, and supported protocols. No posture internals.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "gate_status", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_agent_proof≈ 98 tokens

  Read an Obelisk agent's public proof vector by opaque proof id. Returns independent claims with freshness and scope; never a scalar trust score or a claim of non-humanness.

  Paramètres, retour & exemple (1)

  Paramètres

  • proof_id · string · requis
    The opaque id from an /agent/<proof_id> link.

  Exemple d'appel

  {"name": "get_agent_proof", "arguments": {"proof_id": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_org_rating≈ 76 tokens

  Read the public Obelisk Rating (0-100 score, trust band, and trend) for a registered organization by its slug.

  Paramètres, retour & exemple (1)

  Paramètres

  • org · string · requis
    The organization slug, e.g. acme.

  Exemple d'appel

  {"name": "get_org_rating", "arguments": {"org": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• scan_trust≈ 86 tokens

  Run Obelisk's public trust scan on an https URL — TLS and security-header posture, scored as an Obelisk Rating. Read-only, SSRF-guarded.

  Paramètres, retour & exemple (1)

  Paramètres

  • url · string · requis
    The https URL to scan, e.g. https://example.com

  Exemple d'appel

  {"name": "scan_trust", "arguments": {"url": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• transparency_head≈ 116 tokens

  Read the current signed transparency head of Obelisk's tamper-evident receipt ledger. Save headAnchorHash with anchorCount and compare later: the count must never go down, and the head at a saved count must not change. No consistency proofs are published, so this cannot show a later head extends a saved one. Same data as /.well-known/obelisk-transparency.json.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "transparency_head", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• verify_agent_run_proof≈ 336 tokens

  Verify an Obelisk run proof. Pass run_proof_token, the token Obelisk signs at POST /api/agent-proof/run: the tool checks Obelisk's signature against its published keys, that the named agent is active now with the same key that answered the run challenge, and which delegation hops matched the owner's registry when the token was signed. A bare run_proof envelope is only checked for internal consistency and is never reported as verified, because anyone can build one. Reports the envelope's commitment scheme: a legacy v1 envelope, whose hashes are unsalted, carries the warning unsalted-v1. Does not reveal or infer raw task data.

  Paramètres, retour & exemple (4)

  Paramètres

  • run_proof · object · optionnel
    An obelisk-agent-run-proof-v2 envelope (a legacy v1 envelope is accepted and flagged unsalted-v1). Alone it is checked for consistency only; next to run_proof_token it must equal the signed copy.
  • run_proof_token · string · optionnel
    The run_proof_token returned by POST /api/agent-proof/run. The only input that can verify.
  • expected_agent_id · string · optionnel
    Optional expected agt_ subject.
  • expected_audience · string · optionnel
    Optional: require the run token's audience to equal this value.

  Exemple d'appel

  {"name": "verify_agent_run_proof", "arguments": {"run_proof": {}, "run_proof_token": "texte", "expected_agent_id": "texte", "expected_audience": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• verify_token≈ 100 tokens

  Verify that a JSON Web Token was minted by this Obelisk Gate (ES256, correct issuer) and report its type, subject, assurance, and principal. Never returns secrets.

  Paramètres, retour & exemple (1)

  Paramètres

  • token · string · requis
    A compact-serialized JWT issued by Obelisk (id_token or access token).

  Exemple d'appel

  {"name": "verify_token", "arguments": {"token": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://obeliskgate.com/mcp