Crovia — verifiable silence (TACET) and Crovia Seal

Measured conclusion: Alive, not deep-tested. L2 outcome: not_attempted.

Signed, Bitcoin-anchored observations of AI training-data disclosure; verifies silence proofs, seals

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "Crovia — verifiable silence (TACET) and Crovia Seal": {
      "url": "https://croviatrust.com/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (8)

• crovia_status read-only

  Live totals at this moment: epochs closed, epochs anchored in Bitcoin, models on the map, snapshot counts, signed silence proofs, and a pointer to the longest verifiable silence. No parameters. This is not a weekly Silence Report, not one model's record, and not a proof bundle. Reads published files only.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world no

• lookup_model read-only

  One model's observation: latest verdict, negative snapshots, anchored epochs, silence proof pointer, archive silence, badge and record URL. Required model is a Hugging Face id, org/name, for example Qwen/Qwen3-32B. An empty model is an error. An exact id is used; otherwise one case-insensitive substring match is accepted, and several matches return candidates instead of a verdict. This is not a catalog page, not the weekly report, and not the seal bytes. Reads published files only.

  Parameters:

  • model (required) — string — Hugging Face model id, org/name. Required. Empty is an error. Example: Qwen/Qwen3-32B.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world no

• search_models read-only

  A page of observed model ids whose id contains query, compared case-insensitively, in catalog order, not a ranking. query omitted or empty matches the whole catalog and still returns at most limit rows. limit follows the historical rule: a missing, empty, zero or other falsy value is 25; any value int() accepts is then clamped into 1..100 (500 becomes 100, a negative becomes 1); a value int() cannot parse is an error and nothing is searched. returned and its compatibility alias count are the rows in this page. matched is how many ids match before the limit. catalog_total and its compatibility alias total_records are every record in the catalog, matching or not. limit is the limit actually applied. count is not the match count, and total_records is not the match count. This is not a verdict and not a proof. Reads published files only.

  Parameters:

  • limit — integer — Page size. Omitted, empty, 0 or any other falsy value means 25. A value int() accepts is clamped into 1..100: 500 is fetched as 100 and a negative as 1. There is no schema minimum or maximum, because those would reject the values the server clamps. A value int() cannot parse is an error and nothing is searched.
  • query — string — Substring of the model id. Omit it, or pass an empty string, to match the whole catalog. The page is still capped by limit.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world no

• get_silence_proof read-only

  The published silence proof for one model: silence_days, observed window, epochs, seal id, URL, and how to verify it. model omitted or empty returns the proof index, not a bundle. include_bundle defaults to false; true attaches the crovia.seal.v1 bundle for that one model and does nothing on the index. This is not the live totals and not the weekly report. Reads published files only.

  Parameters:

  • model — string — Hugging Face model id. Omit it, or pass an empty string, to receive the proof index instead of one proof.
  • include_bundle — boolean — Default false. True includes the seal bundle for the one model. Ignored when model is omitted or empty.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world no

• verify_seal read-only

  Check a crovia.seal.v1 object or a wrapped TACET silence proof: signature, canonical bytes, bindings, and per-epoch non-inclusion paths. Pass seal as a JSON object or a JSON string, or url as an https://croviatrust.com/ address. With neither, the call is an error. Supplying url fetches that URL over the network. check_anchors defaults to false; true also checks the drand round bytes and the Bitcoin anchors over the network. A seal object with check_anchors false or omitted is checked from that object alone. This tool can reach the network, so it is not a closed-world call.

  Parameters:

  • url — string — https://croviatrust.com/ URL of a JSON seal. Any other host is rejected. Fetching it uses the network.
  • seal — ['object', 'string'] — The seal or wrapped proof, as a JSON object or a JSON string. Omit it when url is set.
  • check_anchors — boolean — Default false. True checks the drand round and the Bitcoin anchors over the network. False does not.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world yes

• silence_report read-only

  One published weekly Silence Report, or the latest report index. week is an ISO week YYYY-Www, for example 2026-W38. Omit week, or pass an empty string, to receive the latest index rather than one week's facts. A week that is not YYYY-Www is an error. A week with no published file is an error and names the index. This is not the live status and not one model's proof. Reads published files only.

  Parameters:

  • week — string — ISO week YYYY-Www, for example 2026-W38. Omit it, or pass an empty string, for the latest report index.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world no

• explain read-only

  The definition of one Crovia term. Allowed terms: tacet, silence, lacuna, seal, epoch, pnx, predicate, canon. Omit term, or pass an empty or blank string, to receive every definition. Any other value is an error listing those allowed terms, and it does not return the definitions. Use crovia_vs_causari, not explain, to tell the two products apart.

  Parameters:

  • term — string — One of tacet, silence, lacuna, seal, epoch, pnx, predicate, canon. Omit it, or pass an empty string, for every definition. An unknown term is an error.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world no

• crovia_vs_causari read-only

  Which product is which. Crovia observes training-data disclosure. Causari is the code-provenance tool. No parameters. Use this, not explain and not crovia_status, when the question is the difference between the two. Reads no catalog.

  Hints: read-only yes · destructive not declared · idempotent not declared · open-world no

Publisher website Repository

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.