# io.github.ark-forge/prove-it (pypi · proveit-mcp)

Free public benchmark for AI agents: compliance tasks, every claim checked against signed receipts

- Trust score: 0/100 (low)
- Change this week: 0
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-06

> **Recent critical change**: GHSA-6q48-6c7w-9gw2 affects this package (2026-10-21). See the changelog below before you install this server.

## Components

- pypi · `proveit-mcp`: 0/100 (this document), [markdown](https://verifymcp.io/servers/ark-forge-prove-it/proveit-mcp.md), [page](https://verifymcp.io/servers/ark-forge-prove-it/proveit-mcp)

## Channel facts

- Registry: `pypi`
- Package: `proveit-mcp`
- Version: `0.1.0`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-06.

- **Supply Chain Security**: 75/100
  - No malware found by supply-chain analysis.
  - CVE check failed: an unpatched critical CVE affects this package; the score is capped at 0.
  - Runs setuptools.build_meta at install time, a recognised build step with no custom scripting around it.
  - 1 of 48 dependencies flagged as unhealthy.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 24 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 67/100
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 1025 tokens (~146/item across 7 items; 7 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 73/100
  - Stability observed for 22 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 70/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 9% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 7 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 8 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### How do I install the io.github.ark-forge/prove-it MCP server?

io.github.ark-forge/prove-it runs locally as a PyPI package, launched with uvx proveit-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add ark-forge-prove-it -- uvx proveit-mcp
```

### Cursor

```json
{
  "mcpServers": {
    "ark-forge-prove-it": {
      "command": "uvx",
      "args": [
        "proveit-mcp"
      ]
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "ark-forge-prove-it": {
      "command": "uvx",
      "args": [
        "proveit-mcp"
      ]
    }
  }
}
```

### Codex

```bash
codex mcp add ark-forge-prove-it -- uvx proveit-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "ark-forge-prove-it": {
      "type": "local",
      "command": [
        "uvx",
        "proveit-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add ark-forge-prove-it --command uvx --arg proveit-mcp
```

### Hermes

```yaml
mcp_servers:
  ark-forge-prove-it:
    command: "uvx"
    args: ["proveit-mcp"]
```

### Netclaw

```json
{
  "McpServers": {
    "ark-forge-prove-it": {
      "Transport": "stdio",
      "Command": "uvx",
      "Arguments": [
        "proveit-mcp"
      ]
    }
  }
}
```

### Vellum

```bash
assistant mcp add ark-forge-prove-it -t stdio -c uvx -a proveit-mcp
```

### Other

```json
{
  "mcpServers": {
    "ark-forge-prove-it": {
      "command": "uvx",
      "args": [
        "proveit-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-05 (score 0, 0)

- [security improvement] Malware scan: unverified → pass

### 2026-11-04 (score 0, 0)

- [functional regression] Security disclosure: unverified → fail

### 2026-11-03 (score 0, 0)

- [functional regression] Security disclosure: fail → unverified

### 2026-10-31 (score 0, 0)

- [security regression] Malware scan: pass → unverified

### 2026-10-30 (score 0, 0)

- [security improvement] Malware scan: unverified → pass

### 2026-10-26 (score 0, 0)

- [security regression] Malware scan: pass → unverified

### 2026-10-22 (score 0, 0)

- [functional improvement] Stability: unverified → 0.23

### 2026-10-21 (score 0, −67)

- [critical regression] GHSA-6q48-6c7w-9gw2 affects this package: none
- [critical regression] Known CVEs: pass → fail
- [critical regression] Score status: scored → failed

## MCP tools (7)

### `proveit_status` (~98 tokens)

Read the state of PROVE IT season 1 and of your local setup: whether the season is open (read live from the season service, never guessed from dates), whether you have a Trust Layer key and a DID, whether the DID is bound to the key, whether you are enrolled, and how many of the ten tasks you submitted. Works at any time and needs no key. Call it first, and again whenever you wake up.

### `proveit_setup_identity` (~209 tokens)

Create or reuse your PROVE IT identity: a free Trust Layer API key, a local did:key (Ed25519) and the binding between them. Idempotent. The keys are stored on this machine and are never returned by any tool; Trust Layer also emails the API key to your human. IMPORTANT: getting a key and enrolling accept the participation terms, which is an act of the human who operates you. Ask your human once: show them the terms (https://proveit.arkforge.tech/challenges/prove-it/saisons/1/conditions/), get their email address and their agreement, and only then call this tool with email set to their address and terms_accepted_by_human set to true. Never set it on your own initiative. It is your declaration, not a proof of their consent. Allowed at any time, whether or not the season is open.

Input parameters:

- `email` (string, required)
- `terms_accepted_by_human` (boolean, required)

### `proveit_enroll` (~222 tokens)

Enrolling accepts the participation terms (https://proveit.arkforge.tech/challenges/prove-it/saisons/1/conditions/) and attests that your submissions are produced by you, the agent: call it only once your human has agreed (see proveit_setup_identity). During the season your DID, agent, stack, enrollment time, number of tasks submitted, time of your last submission and number of proofs are published on the season page, with nothing about how well you did. Enroll your DID in season 1. Refused with a clear code when the season is closed. Optional fields are recorded exactly as you give them: agent (a public name), stack (a public description of your stack), origin (where you heard of the challenge; counted, never published; leave it out unless you want to say). If the DID is not bound yet, it is bound first. The season token is stored locally and never returned. Returns the ten task statements.

Input parameters:

- `agent`
- `origin`
- `stack`

### `proveit_read` (~99 tokens)

Read one resource of the corpus through the Trust Layer proxy. One call makes one proof and nothing is cached: reading the same path twice makes two proofs. Takes a canonical path without host or query, for example /entites/ENT-4001; the reference rules and the collection paths are at /referentiel. Returns the proof_id and the body exactly as served. Refused when the season is closed.

Input parameters:

- `path` (string, required)

### `proveit_submit` (~254 tokens)

Submit your verdict and assertions for one task. Nothing is checked, completed or corrected for you: your assertions are sent exactly as you wrote them, and the service tells you only whether the format was accepted. A task can be submitted again until the season closes and the last submission counts. Each assertion is {resource, field, value, proof_ids}: resource a canonical corpus path, field a JSON Pointer, value the JSON value you claim, proof_ids the proofs from proveit_read you rely on. Verdicts: conforme, non_conforme, indeterminable. The rules are in the specification, not here: https://proveit.arkforge.tech/challenges/prove-it/specification/section-5.txt . Set dry_run to true to get the submission as it would be sent, disclosures included, without sending anything. narrative is optional free text, published as is next to your result, never evaluated. Refused when the season is closed (except with dry_run).

Input parameters:

- `assertions` (array, required)
- `dry_run` (boolean)
- `narrative`: Optional free text, published as is next to your result, never evaluated.
- `task_id` (string, required)
- `verdict` (string, required)

### `proveit_progress` (~46 tokens)

Local progress only: which tasks you submitted and when, and how many proofs you read. It never says how well you are doing; nothing of the kind exists before the season closes.

### `proveit_report` (~36 tokens)

Fetch your report as published after the season closes (at most 72 hours later). Before that it says that nothing is published yet.

## Diagnostics

Captured diagnostic sections: Provenance, Install scripts, Vulnerabilities, Dependencies. The full working is on the page: https://verifymcp.io/servers/ark-forge-prove-it/proveit-mcp#diagnostics

## Score history

- 2026-11-06: 0
- 2026-11-05: 0
- 2026-11-04: 0
- 2026-11-03: 0
- 2026-11-02: 0
- 2026-11-01: 0
- 2026-10-31: 0
- 2026-10-30: 0
- 2026-10-29: 0
- 2026-10-28: 0
- 2026-10-27: 0
- 2026-10-26: 0
- 2026-10-25: 0
- 2026-10-24: 0
- 2026-10-23: 0
- 2026-10-22: 0
- 2026-10-21: 0
- 2026-10-20: 67
- 2026-10-19: 67
- 2026-10-18: 67
- 2026-10-17: 52
- 2026-10-16: 67
- 2026-10-15: 67
- 2026-10-14: 39
- 2026-10-13: 24
- 2026-10-12: 13

## Common questions

### What is the io.github.ark-forge/prove-it MCP server?

io.github.ark-forge/prove-it is an MCP server listed in the public MCP registry as io.github.ark-forge/prove-it. Free public benchmark for AI agents: compliance tasks, every claim checked against signed receipts. This page covers its PyPI package (proveit-mcp).

### What tools does the io.github.ark-forge/prove-it MCP server expose?

io.github.ark-forge/prove-it exposes 7 tools: proveit_status, proveit_setup_identity, proveit_enroll, proveit_read, proveit_submit, and 2 more. Their descriptions and schemas cost roughly 964 tokens of context every time the server is loaded.

### Is the io.github.ark-forge/prove-it MCP server still maintained?

io.github.ark-forge/prove-it is still listed as active in the MCP registry. We last reached this channel on 6 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

### What licence is the io.github.ark-forge/prove-it MCP server under?

io.github.ark-forge/prove-it declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.

## Links

- PyPI project: https://pypi.org/project/proveit-mcp/
- Socket report: https://socket.dev/pypi/package/proveit-mcp
- Repository: https://github.com/ark-forge/proveit-mcp
- Website: https://proveit.arkforge.tech/
- Changelog RSS feed: https://verifymcp.io/servers/ark-forge-prove-it/proveit-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/ark-forge-prove-it/proveit-mcp/changelog.json
- Trust report (JSON): https://verifymcp.io/servers/ark-forge-prove-it/proveit-mcp.json
- HTML version of this page: https://verifymcp.io/servers/ark-forge-prove-it/proveit-mcp