satledger timestamp receipt
Measured conclusion: Deep-tested. L2 outcome: tools_ok.
RFC 3161 timestamps with no account, and a signed agent-ledger workspace. Paid per call over x402.
| Author | org.satledger |
|---|---|
| Access | remote |
| Publisher key required | No |
| Measured state | Deep-tested |
| L1 liveness | alive |
| L1 latency | 371 ms |
| Last measured | 2026-10-24 |
Add to your agent
Copy this into your MCP client config:
{
"mcpServers": {
"satledger timestamp receipt": {
"url": "https://api.satledger.org/mcp",
"transport": "streamable-http"
}
}
}
Measured tools (14)
timestamp_receiptSubmit a SHA-256 digest and receive a Time-Stamp Authority's signed RFC 3161 token over it: evidence that the data you hashed existed at that time, verifiable against the authority without trusting or contacting this service. Hash your data yourself - it never leaves your side. Your first 3 each day are free, no payment needed. Then 0.05 USDC for one, or 0.50 for up to 10 in a single call and a single payment, bound to one timestamp by a Merkle root. Paid over x402. No account, nothing stored here afterwards.
Parameters:
digest— string — SHA-256 hex digest, 64 characters.digests— array — Up to 10 digests in one call and one payment, bound to a single timestamp by a Merkle root. Each comes back with the proof that binds it.
Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared
provision_workspaceBuy a workspace: a tamper-evident usage and action ledger for your agents, every event ed25519-signed and hash-chained, with an export your own customers verify offline. Pay over x402 in _meta[x402/payment]: 0.50 USDC for 2,500 units (starter), 15.00 USDC for 100,000 units (block). Every workspace also carries 10,000 free units. Returns an API key once, plus the next calls to make. The ledger operations themselves are HTTP, authenticated with that key.
Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared
top_up_workspaceAdd units to a workspace you already hold. Send its API key in _meta[satledger/api-key] (or the api_key argument) and the payment in _meta[x402/payment]: 0.50 USDC for 2,500 units (starter), 15.00 USDC for 100,000 units (block). The units land in that workspace and nothing new is created; buying a workspace instead gives you an empty ledger under a different key.
Parameters:
api_key— string — Your workspace key, if your client cannot set _meta[satledger/api-key]. Prefer _meta: arguments are logged by most clients.
Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared
create_agentCreate an agent in your workspace: a named ledger whose every event is ed25519-signed and hash-chained. `initial_credits` mints supply to the workspace issuer, not to the agent - fund_agent moves credits across when you need usage metering. Costs 1 unit. Authenticate with the workspace key in _meta[satledger/api-key].
Parameters:
agent_id(required) — stringdisplay_name(required) — stringinitial_credits(required) — integerapi_key— string — Your workspace key, if your client cannot set _meta[satledger/api-key]. Prefer _meta: arguments are logged by most clients.
Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared
record_actionAppend what an agent did - a tool call, a decision, a message - as a signed, hash-chained entry. This is the thing the workspace is for. Costs 1 unit. Authenticate with the workspace key in _meta[satledger/api-key].
Parameters:
agent_id(required) — stringkind(required) — stringdetail— object — Anything you want recorded, as an object.api_key— string — Your workspace key, if your client cannot set _meta[satledger/api-key]. Prefer _meta: arguments are logged by most clients.
Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared
fund_agentMove credits from the workspace issuer to an agent's own account, so record_usage can burn them. Costs 1 unit. Authenticate with the workspace key in _meta[satledger/api-key].
Parameters:
agent_id(required) — stringamount(required) — integerapi_key— string — Your workspace key, if your client cannot set _meta[satledger/api-key]. Prefer _meta: arguments are logged by most clients.
Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared
record_usageBurn credits from an agent's account, as a signed ledger event. Costs 1 unit. Authenticate with the workspace key in _meta[satledger/api-key].
Parameters:
agent_id(required) — stringamount(required) — integerapi_key— string — Your workspace key, if your client cannot set _meta[satledger/api-key]. Prefer _meta: arguments are logged by most clients.
Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared
anchor_agentAsk a public RFC 3161 Time-Stamp Authority to sign the agent's current state. The one fact here the operator cannot manufacture: a timestamp cannot be issued for a time that has passed. An unchanged state returns the anchor it already has. Costs 100 units. Authenticate with the workspace key in _meta[satledger/api-key].
Parameters:
agent_id(required) — stringapi_key— string — Your workspace key, if your client cannot set _meta[satledger/api-key]. Prefer _meta: arguments are logged by most clients.
Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared
export_agentBuild the export bundle, run the customer-side verifier over it and return the summary plus the URL of the archive (HTTP, X-API-Key, free). Pass expect_action_head / expect_action_count from state YOU kept to check completeness. Free, permanently. Authenticate with the workspace key in _meta[satledger/api-key].
Parameters:
agent_id(required) — stringapi_key— string — Your workspace key, if your client cannot set _meta[satledger/api-key]. Prefer _meta: arguments are logged by most clients.expect_action_head— stringexpect_action_count— integer
Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared
list_agentsEvery agent in your workspace. Free. Authenticate with the workspace key in _meta[satledger/api-key].
Parameters:
api_key— string — Your workspace key, if your client cannot set _meta[satledger/api-key]. Prefer _meta: arguments are logged by most clients.
Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared
describe_agentCurrent state: root id, state hash, event count, balance. Free. Authenticate with the workspace key in _meta[satledger/api-key].
Parameters:
agent_id(required) — stringapi_key— string — Your workspace key, if your client cannot set _meta[satledger/api-key]. Prefer _meta: arguments are logged by most clients.
Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared
list_actionsThe agent's action log, with its head hash. Free. Authenticate with the workspace key in _meta[satledger/api-key].
Parameters:
agent_id(required) — stringapi_key— string — Your workspace key, if your client cannot set _meta[satledger/api-key]. Prefer _meta: arguments are logged by most clients.
Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared
list_anchorsEvery anchor commitment recorded for the agent. Free. Authenticate with the workspace key in _meta[satledger/api-key].
Parameters:
agent_id(required) — stringapi_key— string — Your workspace key, if your client cannot set _meta[satledger/api-key]. Prefer _meta: arguments are logged by most clients.
Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared
workspace_balanceUnits remaining and what each operation costs. Free, so you can plan before you are refused. Authenticate with the workspace key in _meta[satledger/api-key].
Parameters:
api_key— string — Your workspace key, if your client cannot set _meta[satledger/api-key]. Prefer _meta: arguments are logged by most clients.
Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared
Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.