MolTrust MCP Server

Measured conclusion: Alive, not deep-tested. L2 outcome: not_attempted.

Verifiable agent identity and trust checks; MolCheck verdicts on mandates; Amazon Ads verdicts.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "MolTrust MCP Server": {
      "url": "https://api.moltrust.ch/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (64)

• moltrust_register

  Register a new AI agent on MolTrust. Creates a decentralised identity (DID), issues a W3C Verifiable Credential, and anchors the agent on the Base blockchain. Args: display_name: Agent name (1-64 chars, alphanumeric/dash/underscore/dot/space) platform: Platform identifier (e.g. "openai", "langchain", "custom")

  Parameters:

  • display_name (required) — string
  • platform (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• moltrust_verify

  Verify an AI agent by its DID. Checks whether the DID is registered and returns verification status along with the agent's trust card (reputation, credentials, blockchain anchor). Args: did: Decentralised identifier (e.g. "did:moltrust:a1b2c3d4e5f60718")

  Parameters:

  • did (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• moltrust_reputation

  Get the reputation score for an AI agent. Returns the aggregate trust score (1-5) and total number of ratings. Args: did: Decentralised identifier (e.g. "did:moltrust:a1b2c3d4e5f60718")

  Parameters:

  • did (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• moltrust_rate

  Rate another AI agent (1-5 stars). Submit a trust rating from one agent to another. Args: from_did: Your agent's DID (the rater) to_did: Target agent's DID (the agent being rated) score: Rating from 1 (untrusted) to 5 (highly trusted)

  Parameters:

  • from_did (required) — string
  • to_did (required) — string
  • score (required) — integer

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• moltrust_credential

  Issue or verify a W3C Verifiable Credential. Args: action: Either "issue" or "verify" subject_did: DID of the credential subject (required for "issue") credential_type: Type of credential (default: "AgentTrustCredential", only for "issue") credential: JSON string of the credential to verify (required for "verify")

  Parameters:

  • action (required) — string
  • credential — string
  • subject_did — string
  • credential_type — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• moltrust_credits

  Manage MolTrust credits: check balance, view pricing, transfer credits, or view transaction history. Args: action: One of "balance", "pricing", "transfer", or "transactions" did: Agent DID (required for "balance" and "transactions") to_did: Recipient DID (required for "transfer") amount: Number of credits to transfer (required for "transfer", must be >= 1) reference: Optional reference string for transfers limit: Max transactions to return (default 20, for "transactions") offset: Pagination offset (default 0, for "transactions")

  Parameters:

  • action (required) — string
  • did — string
  • limit — integer
  • amount — integer
  • offset — integer
  • to_did — string
  • reference — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• moltrust_deposit_info

  Get USDC deposit instructions to buy MolTrust credits. Returns the MolTrust wallet address on Base (Ethereum L2), USDC token contract, conversion rate (1 USDC = 100 credits), and step-by-step instructions.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• moltrust_claim_deposit

  Claim MolTrust credits from a USDC deposit on Base. After sending USDC to the MolTrust wallet on Base (L2), submit the transaction hash to receive credits. 1 USDC = 100 credits, verified on-chain. Args: tx_hash: Base blockchain transaction hash (0x...) did: Your agent's DID to credit

  Parameters:

  • tx_hash (required) — string
  • did (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• moltrust_stats

  Get MolTrust network statistics. Returns total registered agents, credentials issued, ratings given, and other network health metrics.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• moltrust_deposit_history

  Get USDC deposit history for an agent. Args: did: The agent's DID

  Parameters:

  • did (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• moltrust_erc8004

  Query the ERC-8004 on-chain agent registry on Base. Resolve MolTrust agents to their on-chain ERC-8004 identity, fetch Agent Cards, or look up on-chain agents by their agentId. Args: action: One of "card", "resolve", or "well-known" did: Agent DID (required for "card", e.g. "did:moltrust:a1b2c3d4e5f60718") agent_id: On-chain ERC-8004 agent ID (required for "resolve", e.g. 21023)

  Parameters:

  • action (required) — string
  • did — string
  • agent_id — integer

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• moltguard_score

  Get an agent trust score for a Base wallet address. Analyzes on-chain activity, ERC-8004 registration, USDC balance, counterparty diversity, and MolTrust credentials to produce a 0-100 score. Args: address: Base (EVM) wallet address (0x...)

  Parameters:

  • address (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• moltguard_detail

  Get a detailed agent trust report for a Base wallet address. Returns full scoring breakdown, wallet history from Blockscout, ERC-8004 registration, MolTrust DID cross-reference, and Sybil indicators. Args: address: Base (EVM) wallet address (0x...)

  Parameters:

  • address (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• moltguard_sybil

  Scan a Base wallet for Sybil indicators. Analyzes wallet age, transaction patterns, counterparty diversity, and funding source to detect potential Sybil wallets. Also traces funding clusters — if the funder sent ETH to many wallets, it indicates a Sybil ring. Args: address: Base (EVM) wallet address (0x...)

  Parameters:

  • address (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• moltguard_market

  Check a Polymarket prediction market for integrity anomalies. Analyzes volume spikes, price-volume divergence, liquidity ratios, and outcome price spreads to detect potential manipulation. Args: market_id: Polymarket market/condition ID

  Parameters:

  • market_id (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• moltguard_feed

  Get the top anomaly feed — markets with highest integrity concerns. Scans the top 20 active Polymarket markets by 24h volume and returns those with anomaly indicators, sorted by anomaly score.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• moltguard_credential_issue

  Issue a W3C Verifiable Credential (AgentTrustCredential) for a wallet. The credential contains the agent's trust score, Sybil score, ERC-8004 registration status, and MolTrust verification status. It is cryptographically signed with Ed25519 (JWS). Args: address: Base (EVM) wallet address (0x...)

  Parameters:

  • address (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• moltguard_credential_verify

  Verify a MoltGuard Verifiable Credential JWS signature. Checks the Ed25519 signature and returns the credential payload if valid. Args: jws: JWS compact serialization string from a MoltGuard credential

  Parameters:

  • jws (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_shopping_info

  Get MT Shopping API information. Returns the MT Shopping service info including version, supported endpoints, BuyerAgentCredential schema, and verification details.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_shopping_verify

  Verify a shopping transaction against a BuyerAgentCredential. Checks the credential signature, spend limits, trust score, and returns a verification receipt with approval status. Args: credential_jws: JWS compact serialization of the BuyerAgentCredential transaction_amount: Transaction amount (e.g. 189.99) transaction_currency: Currency code (e.g. "USDC") merchant_id: Merchant identifier string item_description: Description of the item being purchased

  Parameters:

  • credential_jws (required) — string
  • transaction_amount (required) — number
  • transaction_currency (required) — string
  • merchant_id (required) — string
  • item_description (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_shopping_issue_vc

  Issue a BuyerAgentCredential (W3C Verifiable Credential) for a shopping agent. Creates a cryptographically signed credential that authorizes an AI agent to make purchases on behalf of a human, with enforced spend limits. Args: agent_did: DID of the shopping agent (e.g. "did:moltrust:agent123") human_did: DID of the authorizing human (e.g. "did:moltrust:human456") spend_limit: Maximum spend amount per transaction currency: Currency code (e.g. "USDC", "USD") categories: Comma-separated allowed categories (e.g. "electronics,books") validity_days: Number of days the credential is valid (default 30)

  Parameters:

  • agent_did (required) — string
  • human_did (required) — string
  • spend_limit (required) — number
  • currency (required) — string
  • categories (required) — string
  • validity_days — integer

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_travel_info

  Get MT Travel service information and available endpoints. Returns service description, supported segments, and API endpoints for the MT Travel booking trust protocol.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_travel_verify

  Verify a travel booking against a TravelAgentCredential. Runs a 10-step verification pipeline: VC signature, expiry, agent DID match, segment authorization, spend limit, currency, daily cap, trust score, delegation chain, and traveler binding. Args: agent_did: DID of the booking agent (e.g. "did:base:0x...") vc_json: The TravelAgentCredential as a JSON string merchant: Merchant domain (e.g. "hilton.com") segment: Booking segment: hotel, flight, car_rental, or rail amount: Booking amount currency: Currency code (e.g. "USDC")

  Parameters:

  • agent_did (required) — string
  • vc_json (required) — string
  • merchant (required) — string
  • segment (required) — string
  • amount (required) — number
  • currency (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_travel_issue_vc

  Issue a TravelAgentCredential (W3C Verifiable Credential) for a booking agent. Creates a cryptographically signed credential that authorizes an AI agent to book travel on behalf of a principal (company/human), with enforced segment permissions and spend limits. Args: agent_did: DID of the travel agent (e.g. "did:base:0x...") principal_did: DID of the authorizing entity (e.g. "did:base:acme-corp") segments: Comma-separated allowed segments (e.g. "hotel,flight,car_rental") spend_limit: Maximum spend amount per booking currency: Currency code (e.g. "USDC") traveler_name: Name of the authorized traveler (optional) validity_days: Number of days the credential is valid (default 30)

  Parameters:

  • agent_did (required) — string
  • principal_did (required) — string
  • segments (required) — string
  • spend_limit (required) — number
  • currency (required) — string
  • traveler_name — string
  • validity_days — integer

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_skill_audit

  Audit an AI agent skill (SKILL.md) for security risks. Fetches the SKILL.md from a URL, computes its canonical SHA-256 hash, and runs an 8-point security audit checking for prompt injection, data exfiltration, tool scope violations, and metadata completeness. Score starts at 100 with deductions per finding. Passing score: >= 70. Args: github_url: URL to the skill (GitHub repo or direct HTTPS link to SKILL.md)

  Parameters:

  • github_url (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_skill_verify

  Verify an AI agent skill by its canonical SHA-256 hash. Checks if a VerifiedSkillCredential has been issued for this skill hash. Returns credential details if verified. Args: skill_hash: Canonical skill hash (e.g. "sha256:a1b2c3...")

  Parameters:

  • skill_hash (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_skill_issue_vc

  Issue a VerifiedSkillCredential for an AI agent skill. Fetches SKILL.md, runs security audit, and if score >= 70, issues a W3C Verifiable Credential signed with Ed25519 (JWS compact serialization). Requires x402 payment ($5 USDC) when paywall is active. Args: author_did: DID of the skill author (e.g. "did:base:0x...") repository_url: URL to the skill repository or SKILL.md

  Parameters:

  • author_did (required) — string
  • repository_url (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_prediction_link

  Link a prediction market wallet and sync its track record. Fetches trade history from Polymarket, calculates a prediction score (0-100), and stores the wallet profile. Optionally links it to a MolTrust DID. Args: address: Prediction market wallet address (0x-prefixed, 42 chars) platform: Platform name (default: "polymarket") did: Optional MolTrust DID to link (e.g. "did:moltrust:a1b2c3d4e5f60718")

  Parameters:

  • address (required) — string
  • did — string
  • platform — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_prediction_wallet

  Get prediction market profile and track record for a wallet. Returns the prediction score (0-100), win/loss record, volume, ROI, score breakdown, and recent market events. Args: address: Prediction market wallet address (0x-prefixed, 42 chars)

  Parameters:

  • address (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_prediction_leaderboard

  Get the prediction market leaderboard — top wallets by prediction score. Returns wallets ranked by their composite prediction score, which factors in win rate, ROI, volume, sample size, and recency. Args: limit: Number of entries to return (default 20, max 100)

  Parameters:

  • limit — integer

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_salesguard_verify

  Verify product provenance via MT Salesguard. Checks whether a product ID has a valid ProductProvenanceCredential issued by an authorized brand. Returns brand info, credential hash, Base anchor, and risk level. Args: product_id: Product identifier (e.g. "AIRMAX-90-WHITE-43")

  Parameters:

  • product_id (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_salesguard_reseller

  Verify reseller authorization via MT Salesguard. Checks whether a reseller DID has been authorized by a brand to sell specific products. Returns authorization status, brand info, authorized SKUs, and expiry. Args: reseller_did: Reseller DID (e.g. "did:web:sneakerstore.com")

  Parameters:

  • reseller_did (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_salesguard_register

  Register a brand with MT Salesguard. Creates a new brand identity with a DID and API key. The API key is used to authenticate product registration and reseller authorization requests. Args: name: Brand name (e.g. "Nike", "Adidas") domain: Brand domain (e.g. "nike.com") contact_email: Contact email for the brand (optional)

  Parameters:

  • name (required) — string
  • domain (required) — string
  • contact_email — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_fantasy_commit

  Commit a fantasy lineup with a SHA-256 hash anchored on Base L2. Creates a FantasyLineupCredential (W3C VC) proving the lineup was locked before contest start. The commitment hash is tamper-proof. Args: agent_did: Agent DID (e.g. "did:moltrust:a1b2c3d4e5f67890") contest_id: Unique contest identifier (e.g. "dk-nfl-sun-main-2026w12") platform: Platform name: draftkings, fanduel, yahoo, sleeper, custom sport: Sport type: nfl, nba, mlb, nhl, pga, nascar, soccer, custom contest_start_iso: Contest start time in ISO 8601 (must be in the future) lineup_json: JSON string of lineup object (e.g. '{"QB":"Mahomes","RB1":"Henry"}') projected_score: Agent's projected score for this lineup confidence: Confidence level 0.0 to 1.0 entry_fee_usd: Contest entry fee in USD contest_type: Contest type (e.g. "classic", "showdown")

  Parameters:

  • agent_did (required) — string
  • contest_id (required) — string
  • platform (required) — string
  • sport (required) — string
  • contest_start_iso (required) — string
  • lineup_json (required) — string
  • confidence — number
  • contest_type — string
  • entry_fee_usd — number
  • projected_score — number

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_fantasy_verify

  Verify a fantasy lineup commitment. Public endpoint, no auth required. Returns the full lineup, timing proof (minutes before contest), on-chain verification status, and the FantasyLineupCredential. Args: commitment_hash: The 64-char SHA-256 commitment hash

  Parameters:

  • commitment_hash (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_fantasy_history

  Get fantasy lineup history and stats for an agent. Returns ITM rate, ROI, projection accuracy, and recent lineups for the specified agent DID. Args: did: Agent DID (e.g. "did:moltrust:a1b2c3d4e5f67890")

  Parameters:

  • did (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_create_interaction_proof

  Create an interaction proof before issuing a SkillEndorsementCredential. Returns evidence_hash and base_tx_hash anchored on Base L2. Required before calling mt_endorse_agent. Valid for 72 hours. Args: api_key: MolTrust API key of the agent creating the proof agent_a: DID of the first agent in the interaction agent_b: DID of the second agent in the interaction interaction_type: Type of interaction (e.g. skill_verification, purchase, prediction) outcome: Outcome of the interaction: success or failure

  Parameters:

  • api_key (required) — string
  • agent_a (required) — string
  • agent_b (required) — string
  • outcome — string
  • interaction_type — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_endorse_agent

  Issue a W3C SkillEndorsementCredential for another agent. Requires a valid evidence_hash from mt_create_interaction_proof (max 72h old). Self-endorsement is rejected. Contributes to the endorsed agent's Trust Score. Args: endorser_api_key: MolTrust API key of the endorsing agent endorsed_did: DID of the agent to endorse skill: Skill being endorsed (python, javascript, security, prediction, trading, data_analysis, api_integration, smart_contracts, nlp, computer_vision, general) evidence_hash: SHA-256 hash from mt_create_interaction_proof (sha256:...) evidence_timestamp: ISO 8601 timestamp from mt_create_interaction_proof vertical: MolTrust vertical (skill, shopping, travel, prediction, salesguard, sports, core)

  Parameters:

  • endorser_api_key (required) — string
  • endorsed_did (required) — string
  • skill (required) — string
  • evidence_hash (required) — string
  • evidence_timestamp (required) — string
  • vertical (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_get_trust_score

  Get the Swarm Intelligence Trust Score for an agent (Phase 2). Score combines direct endorsements, propagated trust from endorsers, cross-vertical credential bonus, and interaction proof activity. Returns null/withheld if fewer than 3 independent endorsers (non-seed). Seed agents get their base score directly. Args: did: DID of the agent to score (e.g. "did:moltrust:a1b2c3d4e5f67890")

  Parameters:

  • did (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_get_swarm_graph

  Get the trust propagation graph for an agent (2 hops). Returns nodes (agents with scores) and edges (endorsements) showing who endorses this agent and who endorses them. Args: did: DID of the agent to get graph for

  Parameters:

  • did (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_get_swarm_stats

  Get global Swarm Intelligence statistics. Returns total agents, endorsements, seed agents, average trust score, propagation depth, and top trusted agents.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_register_seed

  Register a trusted seed agent in the Swarm Intelligence network (admin only). Seed agents bootstrap the trust network with a base score. Requires the ADMIN_KEY for authorization. Args: did: DID of the agent to register as seed label: Human-readable label for the seed agent base_score: Base trust score (0-100, default 80) admin_key: Admin key for authorization

  Parameters:

  • did (required) — string
  • label (required) — string
  • admin_key — string
  • base_score — number

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_get_badge

  Get the Verified by MolTrust badge status for an agent. Returns badge tier, trust score, grade, issue/expiry dates, and embeddable SVG URL. Args: did: The DID of the agent to check

  Parameters:

  • did (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_issue_badge

  Issue a Verified by MolTrust badge for an agent. Tiers: 'verified' (score 40+, $5), 'trusted' (score 60+, $20). Badge is valid for 1 year and auto-revokes if trust score drops. Args: did: The DID of the agent to issue a badge for tier: Badge tier — 'verified' or 'trusted'

  Parameters:

  • did (required) — string
  • tier — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_check_badge

  Quick check: is this agent badge-verified by MolTrust? Returns a simple yes/no with tier and expiry info. Args: did: The DID of the agent to check

  Parameters:

  • did (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_issue_music_credential

  Issue a VerifiedMusicCredential for an AI-generated music track. Creates a W3C Verifiable Credential proving the provenance of an AI-generated music track — which tool created it, whether a human was involved, and what rights apply. Anchored on Base L2. EU AI Act Article 50(2) compliant. Args: agent_did: DID of the agent/creator (e.g. "did:moltrust:abc123") tool: AI tool used (e.g. "Suno API v3.2", "Udio", "Magenta") human_oversight: "true", "false", or "partial" rights: Rights declaration (e.g. "CC-BY", "All Rights Reserved", "Agent-Wallet") track_title: Title of the track track_description: Optional description genre: Optional genre (e.g. "ambient", "jazz", "classical") isrc: Optional ISRC code (ISO 3901)

  Parameters:

  • agent_did (required) — string
  • tool (required) — string
  • human_oversight (required) — string
  • rights (required) — string
  • track_title (required) — string
  • isrc — string
  • genre — string
  • track_description — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_verify_music_credential

  Verify a VerifiedMusicCredential by its ID. Checks whether a music credential is valid (not revoked), returns provenance summary including tool, human oversight, rights, and on-chain anchor status. Args: credential_id: UUID of the music credential

  Parameters:

  • credential_id (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mt_get_track_provenance

  Get full provenance details for a music credential. Returns the complete VerifiedMusicCredential including track metadata, provenance hash, EU AI Act compliance status, and on-chain anchor information. Args: credential_id: UUID of the music credential

  Parameters:

  • credential_id (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• molcheck_verdict

  Verdict + per-check breakdown for an agent against its committed mandate. Read-only. Recomputable from public chain data + the public mandate. Args: agent: agent address, did:moltrust / did:web, or ERC-8004 reference (public)

  Parameters:

  • agent (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• moltproof_verdict

  Deprecated alias of molcheck_verdict; use that name. Verdict + per-check breakdown for an agent against its committed mandate. Read-only. Recomputable from public chain data + the public mandate. Args: agent: agent address, did:moltrust / did:web, or ERC-8004 reference (public)

  Parameters:

  • agent (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• molcheck_mandate

  The committed AAE mandate for an agent (venues, position cap, validity). Read-only. Args: agent: public agent identifier (address / DID / ERC-8004 ref)

  Parameters:

  • agent (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• moltproof_mandate

  Deprecated alias of molcheck_mandate; use that name. The committed AAE mandate for an agent (venues, position cap, validity). Read-only. Args: agent: public agent identifier (address / DID / ERC-8004 ref)

  Parameters:

  • agent (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• molcheck_evidence

  Verdict plus the decoded transactions that breached the mandate. Read-only. Args: agent: public agent identifier (address / DID / ERC-8004 ref)

  Parameters:

  • agent (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• moltproof_evidence

  Deprecated alias of molcheck_evidence; use that name. Verdict plus the decoded transactions that breached the mandate. Read-only. Args: agent: public agent identifier (address / DID / ERC-8004 ref)

  Parameters:

  • agent (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• molcheck_registry

  Agents with committed mandates and their current verdict. Read-only. Ranks NO_MANDATE / NEEDS_REVIEW lower.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• moltproof_registry

  Deprecated alias of molcheck_registry; use that name. Agents with committed mandates and their current verdict. Read-only. Ranks NO_MANDATE / NEEDS_REVIEW lower.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• molcheck_verify

  Recompute a verdict from public inputs and check its signature. Offline and read-only: no DID/mandate/context is fetched here. Args: agent: public agent identifier mandate: the public AAE Verifiable Credential actions: public, already-decoded on-chain actions signature: optional prior MolCheck signature to check

  Parameters:

  • agent (required) — string
  • mandate (required) — object
  • actions (required) — array
  • signature

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• moltproof_verify

  Deprecated alias of molcheck_verify; use that name. Recompute a verdict from public inputs and check its signature. Offline and read-only: no DID/mandate/context is fetched here. Args: agent: public agent identifier mandate: the public AAE Verifiable Credential actions: public, already-decoded on-chain actions signature: optional prior MolCheck signature to check

  Parameters:

  • agent (required) — string
  • mandate (required) — object
  • actions (required) — array
  • signature

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• ads_onboard

  How an agent starts with MolTrust Ads: verdicts (allow / hold / forbid) on Amazon Ads MCP tool calls before they run. Plans, key sign-up, SDK, endpoints. No input, no account needed.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• ads_mandate_template

  Build an ads profile and its AAE mandate for one or more Amazon Ads accounts. Pure: nothing is stored. Returns `profile` (pass it to ads_check) and `mandate` (what /enforce/check evaluates). Args: account_ids: advertiserAccountId / profileId values the agent may act on brands: brands the agent may touch daily_budget_cap_usd: largest daily campaign budget; above it: forbid hold_threshold_usd: above it a person named in `approvers` must approve total_daily_budget_cap_usd: sum of daily budgets on the account after a change period_budget_cap_usd: largest lifetime or monthly budget max_bid_usd: largest bid max_bid_change_percent: largest bid change per step, in percent valid_from: RFC 3339 UTC second valid_until: RFC 3339 UTC second; after it every call is forbidden tools: allowed tool names (default: all documented in ads_onboard) mandate_id: your identifier for this mandate principal_did: the agency's DID principal_public_key: the agency's Ed25519 public key, hex approvers: [{"did", "public_key", "role"}] who may approve a hold

  Parameters:

  • account_ids (required) — array
  • brands (required) — array
  • tools
  • approvers
  • mandate_id — string
  • valid_from — string
  • max_bid_usd — number
  • valid_until — string
  • principal_did — string
  • hold_threshold_usd — number
  • daily_budget_cap_usd — number
  • principal_public_key — string
  • period_budget_cap_usd — number
  • max_bid_change_percent — number
  • total_daily_budget_cap_usd — number

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• ads_check

  Allow / hold / forbid for one intended Amazon Ads MCP tool call, before it runs. Needs your MolTrust API key as the X-API-Key header of the MCP connection (free key: POST https://api.moltrust.ch/auth/signup). Counts against your plan like any check. Never send Amazon credentials: they are refused. Args: profile: the `profile` object from ads_mandate_template tool: the Amazon Ads MCP tool name, e.g. campaign_management-update_campaign_budget arguments: the tool arguments exactly as your agent would send them context: your view of the account — campaigns {id: {brand, daily_budget(cents)}}, targets {id: {brand, bid(cents)}}, ad_groups, account_daily_total(cents). Values the check cannot derive count as unknown and end in forbid.

  Parameters:

  • profile (required) — object
  • tool (required) — string
  • arguments (required) — object
  • context

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• canary_issue

  Issue a leak canary for one counterparty: a credential to hand to that counterparty. If anyone else presents it at the MolTrust verifier, you get a signed leak event that names the counterparty. Costs what a credential costs. Needs your MolTrust API key as the X-API-Key header of the MCP connection. Args: counterparty_did: DID of the agent you hand the credential to; it must be a registered, unrevoked MolTrust agent mode: "bound" (the counterparty may present it) or "decoy" (any presentation but yours is a leak, the counterparty's included); both are issued to the counterparty's DID on_leak: "hold" puts the counterparty on hold in your mandates (POST /canary/enforce-hook), "none" only records the event credential_type: the credential type, as in POST /credentials/issue

  Parameters:

  • counterparty_did (required) — string
  • mode — string
  • on_leak — string
  • credential_type — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• canary_list

  Your leak canaries, newest first: counterparty, mode, reaction on leak and the number of events so far. Paginated with limit/offset; `next_offset` is null on the last page. Needs your MolTrust API key as X-API-Key on the MCP connection.

  Parameters:

  • limit — integer
  • offset — integer

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• canary_events

  Your leak events, newest first, each signed by MolTrust and carrying AER material that `moltrust-verify` recomputes offline (trust list: GET /canary/trust-list). Optionally for one canary. Needs your MolTrust API key as X-API-Key on the MCP connection. Args: canary_id: only events of this canary (from canary_issue or canary_list) limit: page size, at most 200 offset: where the page starts

  Parameters:

  • limit — integer
  • offset — integer
  • canary_id

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

Publisher website Repository

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.