eu.riskrouter/evidence-log

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Tamper-evident evidence log: signed heads, proofs, and recording salted digests of your records.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "evidence-log": {
      "url": "https://api.riskrouter.eu/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (8)

• get_evidence_head read-only

  The current signed head of the evidence log: tree size, Merkle root and signature. Save it: any later head must be consistent with it.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• get_inclusion_proof read-only

  Proof that the entry at leaf_index is in the tree, optionally at a given tree_size. Checkable offline with the public verifier.

  Parameters:

  • leaf_index (required) — integer — Position of the entry in the log.
  • tree_size — integer — Optional: the tree size to prove against.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• get_consistency_proof read-only

  Proof that the tree at size first is a prefix of the tree at size second (or now): the log never rewrote history.

  Parameters:

  • first (required) — integer — A tree size you hold a head for.
  • second — integer — Optional: a later tree size.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• get_checkpoint read-only

  The log's signed checkpoint in the C2SP format witnesses cosign (origin, size, root).

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• get_ledger_attestation read-only

  The signed head hash of the hash-chained audit ledger of recorded quotes.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• get_usage read-only

  How much is recorded, and by how many keys that are not ours. Counts only, nothing about anyone.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• record_evidence

  Record the SHA-256 of a decision record you keep yourself, so it can later be shown to be unchanged. Send the digest and a short kind, never the record. Needs your RiskRouter key in the Authorization header of the MCP connection. Entries are permanent.

  Parameters:

  • record_digest (required) — string — SHA-256 of your salted record, lowercase hex. Never the record itself.
  • kind (required) — string — A short tag such as ai.decision.
  • chain_seq — integer — Optional, with chain_tag: this record's position in its chain, from 1.
  • chain_tag — string — Optional: the completeness chain this record belongs to (64 hex characters derived from a secret you keep).

  Hints: read-only no · destructive no · idempotent no · open-world no

• get_chain read-only

  The log's signed statement of one completeness chain as of the current head: its length and, for each position, the leaf, the time and the digest. A position nobody showed you is a record left out.

  Parameters:

  • chain_tag (required) — string — The chain's 64-hex tag.
  • to — integer — Optional: the last position to list.
  • from — integer — Optional: the first position to list.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

Publisher website

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.