GAIP Trust & Assurance Agent

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Now part of GAIP Witness: verifies GAIP receipts; evidence packs and incident bundles.

Measured statistics

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "GAIP Trust & Assurance Agent": {
      "url": "https://www.gaipagents.com/mcp/agents/trust-assurance",
      "transport": "streamable-http"
    }
  }
}

Measured tools (6)

• inspect_counterparty_evidence read-only

  Use this when asked what evidence exists about an agent before delegating to it. Pass its `counterparty_id` and any `observations`. Returns task-specific evidence coverage, conflicts, gaps and GAIP's own earlier checks of it, with a receipt. Never a trust score or recommendation. Free, read-only, no account; inputs must be public and non-personal.

  Parameters:

  • synthetic — boolean — Optional: true marks a test call.
  • episode_id — string — Optional: your own id to group related calls.
  • task_class — string — Task you want evidence for. Optional.
  • max_age_days — integer — Optional freshness window (default 30): GAIP history records older than this are STALE and do not count toward evidence_sufficiency.
  • observations — array — Optional: observations about it, each {source, observed_at, evidence_digest, lifecycle_state, claim}.
  • counterparty_id — string — Name or URL of the agent or service.
  • continuity_handle — object — Optional: the continuity_handle from an earlier GAIP result; links this call to your earlier ones.
  • data_classification — string — PUBLIC (default) or NON_PERSONAL_PUBLIC. Never send personal data.
  • independent_operator_id — string — Optional: your operator id (recorded as a claim, not verified).

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• gaip_receipt_export read-only

  Use this when you need a GAIP receipt in another format. Pass `receipt_id` and `format`: x402 (attestation style), erc8004 (validation-response shape) or vc (W3C-VC-like JSON-LD). Ed25519-signed when the runtime key is available; hash chain and Merkle proof; no on-chain write. Free, read-only, no account; inputs must be public and non-personal.

  Parameters:

  • receipt_id (required) — string — The receipt_id exactly as an earlier GAIP result returned it. Have none? Call with any id: the refusal lists example_receipt_ids from GAIP's own public records.
  • format (required) — string — x402, erc8004 or vc.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• verify_gaip_receipt read-only

  Use this when you hold a GAIP receipt_id and want to confirm it ("is this receipt genuine?"). Returns the retained record, hash chain and Merkle inclusion proof. Integrity only: it does not make the underlying claim true. Free, read-only, no account; inputs must be public and non-personal.

  Parameters:

  • receipt_id (required) — string — A receipt_id returned by an earlier GAIP call.
  • synthetic — boolean — Optional: true marks a test call.
  • episode_id — string — Optional: your own id to group related calls.
  • continuity_handle — object — Optional: the continuity_handle from an earlier GAIP result; links this call to your earlier ones.
  • data_classification — string — PUBLIC (default) or NON_PERSONAL_PUBLIC. Never send personal data.
  • independent_operator_id — string — Optional: your operator id (recorded as a claim, not verified).

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• gaip_evidence_pack read-only

  Use this when an insurer, auditor or buyer asks what evidence exists about an agent or supplier. Pass its `subject` (public id or https URL). Returns conformance, watch, witness, repair and incident records with Merkle proofs, plus gaps. A compilation, not certification or advice. Free, read-only, no account; inputs must be public and non-personal.

  Parameters:

  • subject (required) — The agent or supplier: its public id or https URL. Never a person.
  • scope — object — Optional: {receipt_ids, since, until, categories, max_items}.
  • requester — object — Optional: {purpose, continuity_handle} to include your own receipts.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• gaip_incident_bundle read-only

  Use this when something went wrong with an agent and you need the facts in order. Pass the `receipt_ids` you hold and attributed `observations`. Returns a verified, source-attributed timeline with an EU AI Act Art. 73 reference aid. No fault, cause or liability finding. Free, read-only, no account; inputs must be public and non-personal.

  Parameters:

  • title — string — Optional: short incident title.
  • receipt_ids — array — GAIP receipt ids you hold about the incident.
  • observations — array — Attributed observations, each {source, statement, observed_at_utc}.
  • ai_system_ref — string — Optional: public id or URL of the AI system involved; given alone, GAIP starts the timeline from its own public records of that system.
  • data_classification — string — PUBLIC (default) or NON_PERSONAL_PUBLIC. Never send personal data.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

• gaip_check_sar_receipt read-only

  Use this when handed an x402 SAR-shaped receipt (draft proposal shape; may change). Pass `sar_receipt`, optionally the issuer's `public_key`. Returns missing fields, whether receipt_id matches the core and whether the signature checks out against that key. Free, read-only, no account; inputs must be public and non-personal.

  Parameters:

  • sar_receipt (required) — object — The SAR receipt object (or a whole gaip_receipt_export x402 result).
  • public_key — Optional: the issuer's Ed25519 public key, raw 32 bytes base64url or a JWK {kty: OKP, crv: Ed25519, x}. Omit to use GAIP's published keys.

  Hints: read-only yes · destructive no · idempotent yes · open-world no

Publisher website Repository

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.