ai.duvera/gateway

REMOTE · APP.DUVERA.AI · SCANNED AUG 3

Governed AI actions with signed, verifiable receipts: free keyless reads, human-approved writes.

Available components

+2 this week 63 63 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score →

Endpoint Security57

The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
Authorisation not fully verified: no authorisation is required to call this server, and 52 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail

Transport & Reachability100

Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass

Schema Quality & AI Usability73

AI-judged instruction clarity (good).Pass
Tool/resource definitions use about 3630 tokens (~69/item across 52 items; 52 tools + 0 resources), lean.Pass
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management27

Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass

Capabilities40

Spec-recency check failed: implements MCP spec 2025-03-26; the latest is 2026-07-28. See how to fix → Fail

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

remote · app.duvera.ai

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add --transport http ai-duvera-gateway https://app.duvera.ai/mcp

# ~/.codex/config.toml

[mcp_servers.ai-duvera-gateway]
url = "https://app.duvera.ai/mcp"

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "ai-duvera-gateway": {
      "type": "remote",
      "url": "https://app.duvera.ai/mcp",
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add ai-duvera-gateway --url https://app.duvera.ai/mcp --transport streamable-http

# ~/.hermes/config.yaml

mcp_servers:
  ai-duvera-gateway:
    url: "https://app.duvera.ai/mcp"

// mcp.json

{
  "mcpServers": {
    "ai-duvera-gateway": {
      "type": "http",
      "url": "https://app.duvera.ai/mcp"
    }
  }
}

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

2 Aug 26 +1

No change was recorded against any check on this day. Stability & Change Management went from 20 to 23. That category is still filling its 30-day observation window: 6 days of observed history at the previous scan, 7 at this one. The score rises as the window fills, whether or not the server changes.
31 Jul 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
30 Jul 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
29 Jul 26 +1

No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
27 Jul 26 +1
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
26 Jul 26 60

First indexed and scored.

Show 5 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Probed https://app.duvera.ai/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject	Issuer	Valid from	Valid until	Key	Signature	Serial
CN=app.duvera.ai	CN=YE1,O=Let's Encrypt,C=US	27 Jul 2026	25 Oct 2026	ECDSA 256	ECDSA-SHA384	68237eb991bf56bc3ce6b44b1cde6fc0a70
SANs: app.duvera.ai
CN=YE1,O=Let's Encrypt,C=US (CA)	CN=Root YE,O=ISRG,C=US	3 Sept 2025	2 Sept 2028	ECDSA 384	ECDSA-SHA384	5ddd70dd31f801c85c186a7a04b80afe
CN=Root YE,O=ISRG,C=US (CA)	CN=ISRG Root X2,O=Internet Security Research Group,C=US	13 May 2026	2 Sept 2032	ECDSA 384	ECDSA-SHA384	872165fc34b6e5fba8add5b3705fb53a
CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA)	CN=ISRG Root X1,O=Internet Security Research Group,C=US	13 May 2026	2 Sept 2032	ECDSA 384	SHA256-RSA	6c8f1dc727c7117f7baf853ac980f9cd

DNSSEC insecure

Validation of app.duvera.ai. — Not signed

Zone	DS	Keys	Algorithms	Outcome
.	trust_anchor	20326, 38696	8, 8	Verified
ai.	present	3799	8	Verified
duvera.ai.	absent			Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation

Authentication No authorisation required

The endpoint answered without asking for a token. Anyone who knows the URL can reach it.

Result	No authorisation required
HTTP status	200

Transports 2 probes

Transport	URL	Outcome	Status	Location
streamable-http	https://app.duvera.ai/mcp	Verified	200
http (plaintext)	http://app.duvera.ai/mcp	HTTPS enforced	301	https://app.duvera.ai/mcp

MCP tools — 52 exposed · ~3,630 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

amazon__package_track ~51

[amazon · risk:low] Look up the delivery status of an Amazon order (read-only)

Input Output Examples

Name	Type	Req	Description
order_id	string	—	The order or tracking id to look up (defaults to most recent)

No output schema declared.

No examples provided.

applehealth__heart_rate_read ~68

[applehealth · risk:medium] Read heart-rate data from Apple Health

Input Output Examples

Name	Type	Req	Description
end	string	—	ISO-8601 end of the query window (defaults to now)
start	string	—	ISO-8601 start of the query window (defaults to today)

No output schema declared.

No examples provided.

applehealth__sleep_read ~68

[applehealth · risk:medium] Read sleep-analysis data from Apple Health

Input Output Examples

Name	Type	Req	Description
end	string	—	ISO-8601 end of the query window (defaults to now)
start	string	—	ISO-8601 start of the query window (defaults to last night)

No output schema declared.

No examples provided.

applehealth__steps_read ~67

[applehealth · risk:medium] Read step-count data from Apple Health

Input Output Examples

Name	Type	Req	Description
end	string	—	ISO-8601 end of the query window (defaults to now)
start	string	—	ISO-8601 start of the query window (defaults to today)

No output schema declared.

No examples provided.

bluesky__trending_get ~51

[bluesky · risk:low] Fetch the current trending topics on Bluesky. Returns topic names, display labels, and links to the topic feed. No account or API key required.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

chase__balance_check ~46

[chase · risk:low] Read the current balance of a Chase account (read-only)

Input Output Examples

Name	Type	Req	Description
account	string	—	The Chase account to check (defaults to primary)

No output schema declared.

No examples provided.

datadog__logs_view ~85

[datadog · risk:low] Search and read logs from Datadog over a time range

Input Output Examples

Name	Type	Req	Description
from	string	—	Start of the time range (ISO 8601 or relative)
query	string	yes	Datadog log search query
to	string	—	End of the time range (ISO 8601 or relative)

No output schema declared.

No examples provided.

delta__boardingpass_show ~49

[delta · risk:low] Pull up the boarding pass for a Delta flight

Input Output Examples

Name	Type	Req	Description
confirmation_code	string	yes	Booking confirmation code
passenger	string	—	Passenger last name

No output schema declared.

No examples provided.

duvera__dev_npm_package ~76

[duvera · risk:low] Look up the latest version, description, license, and dependencies of an npm package. Works for scoped packages too (e.g. "@types/node"). No account required.

Input Output Examples

Name	Type	Req	Description
package	string	yes	npm package name, e.g. "express" or "@types/node".

No output schema declared.

No examples provided.

duvera__dev_pypi_package ~68

[duvera · risk:low] Look up the current version, summary, license, and homepage of a Python package on PyPI. No account required.

Input Output Examples

Name	Type	Req	Description
package	string	yes	PyPI package name, e.g. "requests" or "fastapi".

No output schema declared.

No examples provided.

duvera__dev_stackoverflow_search ~75

[duvera · risk:low] Search Stack Overflow questions by keyword. Returns top 5 by relevance with title, link, score, and answer status. No account required.

Input Output Examples

Name	Type	Req	Description
query	string	yes	Search terms, e.g. "goroutine leak detection" or "pandas merge on index".

No output schema declared.

No examples provided.

duvera__finance_crypto_price ~117

[duvera · risk:low] Current spot price for one or more cryptocurrencies (CoinGecko ids like "bitcoin,ethereum,solana") in a fiat currency (default USD). Read-only market data. No account required.

Input Output Examples

Name	Type	Req	Description
ids	string	yes	Comma-separated CoinGecko coin ids, e.g. "bitcoin" or "bitcoin,ethereum,solana".
vs_currencies	string	—	Comma-separated fiat/quote currencies (default "usd"), e.g. "usd,eur".

No output schema declared.

No examples provided.

duvera__finance_exchange_rates ~35

[duvera · risk:low] Live USD exchange rates against major currencies. Read-only, no account required.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

duvera__food_recipe_search ~71

[duvera · risk:low] Search recipes by dish name (e.g. "arrabiata", "pad thai"). Returns ingredients, instructions, category, and cuisine. No account required.

Input Output Examples

Name	Type	Req	Description
query	string	yes	Dish name to search for, e.g. "carbonara".

No output schema declared.

No examples provided.

duvera__food_restaurant_search ~68

[duvera · risk:low] Search for restaurants and food places by name or location using OpenStreetMap. Read-only, no account required.

Input Output Examples

Name	Type	Req	Description
query	string	yes	Search query, e.g. "pizza in San Francisco" or "sushi near me".

No output schema declared.

No examples provided.

duvera__geo_geocode ~95

[duvera · risk:low] Convert a city or place name (e.g. "Berlin", "San Francisco") to latitude/longitude, country, timezone, and population. Use this before weather.current or weather.air-quality when you only have a place name. No account required.

Input Output Examples

Name	Type	Req	Description
query	string	yes	Place name to look up, e.g. "Berlin" or "Springfield, Illinois".

No output schema declared.

No examples provided.

duvera__github_latest_release ~86

[duvera · risk:low] Get the latest published release (tag, name, notes, date) of a public GitHub repository. Returns 404 for repos that publish no releases. No auth required.

Input Output Examples

Name	Type	Req	Description
owner	string	yes	Repository owner, e.g. "expressjs".
repo	string	yes	Repository name, e.g. "express".

No output schema declared.

No examples provided.

duvera__github_read_file ~94

[duvera · risk:low] Read a file from a public GitHub repository. Read-only.

Input Output Examples

Name	Type	Req	Description
owner	string	yes	Repository owner (username or org), e.g. "octocat".
path	string	—	File path within the repository, e.g. "README.md". Defaults to README.md.
repo	string	yes	Repository name, e.g. "Hello-World".

No output schema declared.

No examples provided.

duvera__github_search_repos ~63

[duvera · risk:low] Search public GitHub repositories by keyword. Returns top 5 results by stars. No auth required.

Input Output Examples

Name	Type	Req	Description
query	string	yes	Search query (e.g. "machine learning python", "react component library").

No output schema declared.

No examples provided.

duvera__news_search ~69

[duvera · risk:low] Search Hacker News stories by keyword, ranked by relevance. Returns title, URL, points, author, and comment count. No account required.

Input Output Examples

Name	Type	Req	Description
query	string	yes	Search terms, e.g. "model context protocol" or "postgres performance".

No output schema declared.

No examples provided.

duvera__news_top_stories ~34

[duvera · risk:low] Top stories from Hacker News. Read-only, no account required.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

duvera__reference_dictionary ~58

[duvera · risk:low] Definitions, phonetics, part of speech, and examples for an English word. No account required.

Input Output Examples

Name	Type	Req	Description
word	string	yes	English word to define, e.g. "governance".

No output schema declared.

No examples provided.

duvera__reference_public_holidays ~102

[duvera · risk:low] Public holidays for a given year and ISO country code (e.g. 2026 + "US"). Includes national and regional holidays with dates and names. No account required.

Input Output Examples

Name	Type	Req	Description
country	string	yes	ISO 3166-1 alpha-2 country code, e.g. "US", "DE", "JP".
year	number	yes	Calendar year, e.g. 2026.

No output schema declared.

No examples provided.

duvera__time_now ~88

[duvera · risk:low] Current date and time in an IANA timezone (e.g. "America/New_York", "Asia/Tokyo"). Includes day of week and DST status. No account required.

Input Output Examples

Name	Type	Req	Description
timezone	string	yes	IANA timezone name, e.g. "America/New_York", "Europe/Berlin", "Asia/Tokyo".

No output schema declared.

No examples provided.

duvera__travel_flight_search ~133

[duvera · risk:low] List aircraft currently airborne within a radius of a point (adsb.lol ADS-B data). Use geo.geocode to get a city's coordinates first. Returns callsign, altitude, speed, and position. No account required.

Input Output Examples

Name	Type	Req	Description
latitude	number	yes	Latitude of the search center (e.g. 40.64 for JFK).
longitude	number	yes	Longitude of the search center (e.g. -73.78 for JFK).
radius_nm	number	yes	Search radius in nautical miles (1-250), e.g. 50.

No output schema declared.

No examples provided.

duvera__weather_air_quality ~105

[duvera · risk:low] Current air quality (US AQI, PM2.5, PM10, ozone) for a latitude/longitude. Use geo.geocode first if you only have a place name. No account required.

Input Output Examples

Name	Type	Req	Description
latitude	number	yes	Latitude of the location (e.g. 37.77 for San Francisco).
longitude	number	yes	Longitude of the location (e.g. -122.42 for San Francisco).

No output schema declared.

No examples provided.

duvera__weather_current ~102

[duvera · risk:low] Current temperature, conditions, wind, and humidity for a latitude/longitude (Open-Meteo). Use geo.geocode first if you only have a city or place name. No account required.

Input Output Examples

Name	Type	Req	Description
latitude	number	yes	Latitude of the location (e.g. 37.77 for San Francisco).
longitude	number	yes	Longitude of the location (e.g. -122.42 for San Francisco).

No output schema declared.

No examples provided.

duvera__wiki_search ~76

[duvera · risk:low] Search Wikipedia articles by keyword. Returns matching page titles, keys, and excerpts. Pass a result's key to wiki.summary for the article summary. No account required.

Input Output Examples

Name	Type	Req	Description
query	string	yes	Search terms, e.g. "zero trust architecture" or "Ada Lovelace".

No output schema declared.

No examples provided.

duvera__wiki_summary ~90

[duvera · risk:low] Get the lead summary of a Wikipedia article by title (e.g. "Zero_trust_architecture"). Use wiki.search first to find the exact page key. No account required.

Input Output Examples

Name	Type	Req	Description
title	string	yes	Article title or page key, e.g. "Ada Lovelace" or "Zero_trust_architecture" (from wiki.search results).

No output schema declared.

No examples provided.

gmail__mail_read ~44

[gmail · risk:low] Read recent emails from the Gmail inbox

Input Output Examples

Name	Type	Req	Description
label	string	—	Optional label/folder to read from (defaults to INBOX)

No output schema declared.

No examples provided.

google_workspace__mail_search ~51

[google-workspace · risk:low] Search Mail via Gmail, governed by Duvera.

Input Output Examples

Name	Type	Req	Description
query	string	yes	Search query, e.g. 'invoices from Acme last month'.

No output schema declared.

No examples provided.

googlecalendar__availability_find ~80

[googlecalendar · risk:low] Find open time slots within a date range in Google Calendar

Input Output Examples

Name	Type	Req	Description
duration_minutes	number	—	Desired slot length in minutes
end	string	yes	End of the search window in ISO 8601 format
start	string	yes	Start of the search window in ISO 8601 format

No output schema declared.

No examples provided.

grubhub__order_track ~47

[grubhub · risk:low] Check the live status and ETA of a Grubhub order

Input Output Examples

Name	Type	Req	Description
order_id	string	yes	Identifier of the order to track

No output schema declared.

No examples provided.

hackernews__stories_top ~66

[hackernews · risk:low] Fetch the current list of top-story ids on Hacker News. Returns an array of item ids (resolve details via the item endpoint). No account or API key required; the hacker-news.firebaseio.com endpoint is open and unmetered.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

instacart__menu_search ~65

[instacart · risk:low] Search for grocery items and stores in the Instacart app

Input Output Examples

Name	Type	Req	Description
query	string	yes	Search terms, e.g. "organic bananas"
store	string	—	Store name or id to scope the search

No output schema declared.

No examples provided.

maps__eta_share ~61

[maps · risk:low] Share your estimated time of arrival with a contact from Apple Maps

Input Output Examples

Name	Type	Req	Description
contact	string	yes	Contact name or number to share ETA with
destination	string	—	Destination address or place name for the active trip

No output schema declared.

No examples provided.

microsoft365__calendar_list ~47

[microsoft365 · risk:low] List Calendar via Outlook Calendar, governed by Duvera.

Input Output Examples

Name	Type	Req	Description
range	string	—	Date range, e.g. 'this week'.

No output schema declared.

No examples provided.

microsoft365__mail_search ~53

[microsoft365 · risk:low] Search Mail via Outlook / Exchange, governed by Duvera.

Input Output Examples

Name	Type	Req	Description
query	string	yes	Search query, e.g. 'invoices from Acme last month'.

No output schema declared.

No examples provided.

notion__notes_search ~38

[notion · risk:low] Search pages and notes in Notion by query

Input Output Examples

Name	Type	Req	Description
query	string	yes	Search query string

No output schema declared.

No examples provided.

obsidian__notes_search ~40

[obsidian · risk:low] Search notes in an Obsidian vault by query

Input Output Examples

Name	Type	Req	Description
query	string	yes	Search query string

No output schema declared.

No examples provided.

open_meteo__weather_forecast ~89

[open-meteo · risk:low] Current temperature, conditions, humidity, and wind for a latitude/longitude, from Open-Meteo.

Input Output Examples

Name	Type	Req	Description
latitude	number	yes	Latitude of the place (e.g. 37.77 for San Francisco).
longitude	number	yes	Longitude of the place (e.g. -122.42 for San Francisco).

No output schema declared.

No examples provided.

opensky__flights_live ~143

[opensky · risk:low] List aircraft currently airborne within a latitude/longitude box, from OpenSky's live ADS-B feed.

Input Output Examples

Name	Type	Req	Description
lamax	number	yes	North edge of the box — maximum latitude (e.g. 40.9 for NYC).
lamin	number	yes	South edge of the box — minimum latitude (e.g. 40.6 for NYC).
lomax	number	yes	East edge of the box — maximum longitude (e.g. -73.7 for NYC).
lomin	number	yes	West edge of the box — minimum longitude (e.g. -74.1 for NYC).

No output schema declared.

No examples provided.

postgres__sql_read ~55

[postgres · risk:low] Execute a read-only SQL query against a Postgres database

Input Output Examples

Name	Type	Req	Description
database	string	yes	Target database name
query	string	yes	Read-only SQL query (SELECT) to execute

No output schema declared.

No examples provided.

shazam__audio_identify ~46

[shazam · risk:low] Identify the song currently playing using Shazam

Input Output Examples

Name	Type	Req	Description
duration_ms	number	—	How long to listen before identifying, in milliseconds

No output schema declared.

No examples provided.

slack__message_search ~35

[slack · risk:low] Search recent messages across Slack channels

Input Output Examples

Name	Type	Req	Description
query	string	yes	Search query string

No output schema declared.

No examples provided.

southwest__flight_status ~57

[southwest · risk:low] Check the status of a Southwest flight

Input Output Examples

Name	Type	Req	Description
date	string	—	Flight date (YYYY-MM-DD)
flight_number	string	yes	Flight number, e.g. WN1234

No output schema declared.

No examples provided.

telegram__message_read ~40

[telegram · risk:low] Read recent messages from a Telegram chat

Input Output Examples

Name	Type	Req	Description
chat	string	yes	Chat id or @username to read from

No output schema declared.

No examples provided.

twitter__tweets_search ~114

[twitter · risk:low] Search for recent tweets matching a keyword, hashtag, or phrase using the Twitter v2 API. Pass your Twitter Bearer Token via X-Duvera-Service-Token header — Duvera never stores it. Get a free Bearer Token at developer.twitter.com.

Input Output Examples

Name	Type	Req	Description
max_results	number	—	Number of tweets to return (10-100, default 10).
query	string	yes	Twitter search query. Supports operators like "from:user", "#hashtag", "-word".

No output schema declared.

No examples provided.

uber__fare_estimate ~75

[uber · risk:low] Estimate the fare for a trip in the Uber app

Input Output Examples

Name	Type	Req	Description
destination	string	yes	Drop-off address or place name
pickup	string	—	Pickup address (defaults to current location)
product	string	—	Ride product, e.g. UberX, Comfort, Black

No output schema declared.

No examples provided.

united__flight_status ~55

[united · risk:low] Check the status of a United flight

Input Output Examples

Name	Type	Req	Description
date	string	—	Flight date (YYYY-MM-DD)
flight_number	string	yes	Flight number, e.g. UA123

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

26 Jul 3 Aug

Day	Score
26 Jul	60
27 Jul	61
28 Jul	61
29 Jul	62
30 Jul	62
31 Jul	62
1 Aug	62
2 Aug	63
3 Aug	63