ECZ-ID Trust MCP

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Read-only ECZ-ID Business Passport state lookup via the public ECZ-ID Resolver. Reports state only.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "ECZ-ID Trust MCP": {
      "url": "https://trust-mcp.ecocitizenz.com/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (7)

• resolve_identity

  Resolve an ECZ-ID through the public ECZ-ID Resolver and return the exact canonical state with checked_at, Resolver proof link, re-check action and the local-policy caveat. Never asserts safety, approval or compliance.

  Parameters:

  • ecz_id (required) — string — ECZ-ID identifier. Parent, e.g. ECZ-GB-RBS1NW; or child Passport, e.g. ECZ-GB-RBS1NW::MCP_PASSPORT-ABC123

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_current_state

  Return the narrow current Resolver-derived state for an ECZ-ID (state, checked_at, Resolver link). No risk/safety/compliance inference.

  Parameters:

  • ecz_id (required) — string — ECZ-ID identifier. Parent, e.g. ECZ-GB-RBS1NW; or child Passport, e.g. ECZ-GB-RBS1NW::MCP_PASSPORT-ABC123

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_resolver_link

  Return the deterministic public Resolver proof/re-check URL for an ECZ-ID. No network call.

  Parameters:

  • ecz_id (required) — string — ECZ-ID identifier. Parent, e.g. ECZ-GB-RBS1NW; or child Passport, e.g. ECZ-GB-RBS1NW::MCP_PASSPORT-ABC123

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• explain_status

  Deterministically render the exact ECZ-ID status using the claims-safe renderer (VERIFIED is an ECZ-ID state, not a Microsoft certification). Absence of evidence renders the approved neutral wording — never "unsafe". No LLM.

  Parameters:

  • ecz_id (required) — string — ECZ-ID identifier. Parent, e.g. ECZ-GB-RBS1NW; or child Passport, e.g. ECZ-GB-RBS1NW::MCP_PASSPORT-ABC123

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• find_product

  Given narrow context flags, return ONE best next ECZ-ID product action (free/community routes win where correct; neutral context routes to free public verification).

  Parameters:

  • mcp_concern — boolean
  • agent_concern — boolean
  • multi_tenant_estate — boolean
  • org_wide_governance — boolean
  • deeper_evidence_required — boolean
  • developer_local_workflow — boolean
  • business_identity_missing — boolean
  • software_supply_chain_evidence — boolean
  • implementation_assessment_needed — boolean

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• get_install_instructions

  Return deterministic official install/discovery routes for an ECZ-ID product or surface (canonical URLs only; planned Microsoft surfaces carry no URLs).

  Parameters:

  • product (required) — string — Product slug: mcp-trust | agent-trust | developer-trust | resolver | developer-gateway | trustops | mcp-services | msp

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• create_request_to_resolve

  AUTHENTICATED: create a neutral, shareable request for independently re-checkable ECZ-ID evidence. Requires a Microsoft Entra bearer token with the RequestToResolve.Create scope (or app role). It never verifies a target, never sends messages, and absence of evidence is never rendered as unsafe.

  Parameters:

  • target_type (required) — string
  • target_descriptor (required) — string
  • requested_evidence_category (required) — string
  • consent_mode (required) — string
  • resolver_ref — string
  • idempotency_key — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

Publisher website

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.