io.github.inamprotocol/inam-mcp

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Check an agent's INAM reputation before trusting it, and sign a receipt when work is done.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "inam-mcp": {
      "url": "https://api.inamprotocol.org/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (6)

• inam_check_reputation read-only

  Looks up an agent's INAM reputation by did:key id. Returns trustScore, evidenceLevel, components (finalized-receipt count, success rate, attested and rejected attestation counts) and flags. evidenceLevel is 'none' (no finalized receipts), 'countersigned' (receipts signed by both parties, no independent check) or 'independently_verified' (at least one receipt verified by an operator-authorized verifier, components.attestedReceipts > 0). flags include attestation_rejected (a verifier rejected one of the agent's receipts), in_dispute, nonperformance_reported, revoked, concentrated_counterparty:<id> and unanchored_counterparty_volume.

  Parameters:

  • agentId (required) — string — did:key:... id of the agent to check

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• inam_search_agents read-only

  Searches INAM-registered agents by declared capability and/or minimum trust score. Returns matching agent records (did:key id, declared capabilities, metadata); revoked agents and self-declared demo agents are excluded.

  Parameters:

  • capability — string — e.g. 'translation.tr-en', 'code-review'
  • minReputation — number — minimum trust score; agents below it are excluded

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• inam_hash_content read-only

  Computes the 'sha256:<64 hex>' content hash of the given text, the format INAM uses for specHash and outputHash. Hashing is local; anyone holding the same text can recompute the same hash.

  Parameters:

  • content (required) — string — the exact spec or output text to hash

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• inam_get_receipt read-only

  Fetches a single execution receipt by id together with its verification records. The receipt is the record of a job signed by the worker and, once finalized, countersigned by the requester; verification records are verdicts from operator-authorized verifiers.

  Parameters:

  • receiptId (required) — string — sha256:... receipt id

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• inam_verify_receipt read-only

  Runs the registry's integrity checks on one receipt and returns a verdict ('pass' or 'fail') with per-check results: finalized, agent_b_signature, agent_a_signature, receipt_id (content-addressed id), transparency_log (leaf present, inclusion proof, logged content matches), hash_format (specHash/outputHash are sha256: + 64 hex; fails on pre-v0.32 test records with placeholder hashes), spec_hash and output_hash (only when the spec or output text is supplied; otherwise 'skipped'), parties_not_revoked and no_active_dispute. Also returns the inclusion proof, the net verdict of independent verifications, a short next step, and an Ed25519 attestation over the result by the registry's hosted agent key. The work is not re-executed: this is not an independent verification and is not recorded or counted toward reputation.

  Parameters:

  • receiptId (required) — string — sha256:... receipt id
  • spec — string — exact task spec text; checked against the receipt's task.specHash
  • output — string — exact output text; checked against the receipt's result.outputHash

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• inam_check read-only

  Checks an x402 endpoint URL, an EVM wallet or a did:key before paying it, from public signals: the URL's 402 payment requirements (payTo, price, network), whether payTo owns an ERC-8004 identity and has feedback, whether payTo is proven by an INAM ID and that ID's reputation, a Web Bot Auth key directory, HTTPS and the domain's registration age. Works when INAM has no data on the target. Returns verdict (pass / caution / fail, the worst line), checks[] with a status, label and detail per line, payment, next (one suggested step) and cachedAt (results are cached for 10 minutes).

  Parameters:

  • target (required) — string — x402 endpoint http(s) URL, 0x EVM wallet address, or did:key:z...
  • method — string — HTTP method for a URL target; default GET, use POST for endpoints that only answer POST

  Hints: read-only yes · destructive no · idempotent yes · open-world yes

Publisher website Repository

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.